www.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 95:d7:f6:ef:a1:c1:30:05:fb:75:42:0e:39:86:25:b9 was issued on by Internet2.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: New York
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 95:d7:f6:ef:a1:c1:30:05:fb:75:42:0e:39:86:25:b9
Serial Number (int): 199176323654891428271268823484957337017
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 87:cd:3e:60:17:8e:9b:b2:54:a1:0e:61:c7:25:16:77:fd:63:eb:38
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): c1:3e:78:e3:c2:92:58:51:e4:00:43:a7:1a:64:9a:ea:81:80:dc:5c
Fingerprint (sha256): 0e:ea:1f:10:75:ec:73:54:30:a2:5a:30:34:0b:cc:ee:d6:3f:fa:e9:75:f9:5b:d7:1e:36:5b:47:ac:2b:89:ac

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.cumc.columbia.edu

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cumc.columbia.edu
alscenter.cuimc.columbia.edu
anesthesiology.cumc.columbia.edu
biochem.cumc.columbia.edu
columbia-lyme.org
columbiacardiology.org
columbiaeye.org
columbiaobgyn.org
columbiaortho.org
columbiapsychiatry.org
columbiaradiology.org
columbiastemcell.org
communications.cuimc.columbia.edu
compliance.cumc.columbia.edu
congenitalheart.cuimc.columbia.edu
crr.columbia.edu
cuimc.columbia.edu
cumc.columbia.edu
dental.columbia.edu
derc.cumc.columbia.edu
dermatology.columbia.edu
emergencymedicine.columbia.edu
epic.cumc.columbia.edu
facultyclub.cumc.columbia.edu
fpo.cuimc.columbia.edu
gca.cumc.columbia.edu
genetics.cumc.columbia.edu
genmed.columbia.edu
giving.cuimc.columbia.edu
gsas.cuimc.columbia.edu
gsas.cumc.columbia.edu
hipaa.cumc.columbia.edu
igm.columbia.edu
ihn.cumc.columbia.edu
infectiousdiseases.cumc.columbia.edu
irvinginstitute.columbia.edu
it.cuimc.columbia.edu
nyonrc.cumc.columbia.edu
pathology.columbia.edu
pediatrics.columbia.edu
precisiondentalmedicine.columbia.edu
ps.columbia.edu
rheumatologyatcolumbia.org
stemcell.columbia.edu
ws.cumc.columbia.edu
www.alscenter.cuimc.columbia.edu
www.anesthesiology.cumc.columbia.edu
www.biochem.cumc.columbia.edu
www.columbia-lyme.org
www.columbiacardiology.org
www.columbiaeye.org
www.columbiaobgyn.org
www.columbiaortho.org
www.columbiapsychiatry.org
www.columbiaradiology.org
www.columbiastemcell.org
www.communications.cuimc.columbia.edu
www.compliance.cumc.columbia.edu
www.congenitalheart.cuimc.columbia.edu
www.crr.columbia.edu
www.cuimc.columbia.edu
www.dental.columbia.edu
www.derc.cumc.columbia.edu
www.dermatology.columbia.edu
www.emergencymedicine.columbia.edu
www.epic.cumc.columbia.edu
www.facultyclub.cumc.columbia.edu
www.fpo.cuimc.columbia.edu
www.gca.cumc.columbia.edu
www.genetics.cumc.columbia.edu
www.genmed.columbia.edu
www.giving.cuimc.columbia.edu
www.gsas.cuimc.columbia.edu
www.gsas.cumc.columbia.edu
www.hipaa.cumc.columbia.edu
www.igm.columbia.edu
www.ihn.cumc.columbia.edu
www.infectiousdiseases.cumc.columbia.edu
www.irvinginstitute.columbia.edu
www.it.cuimc.columbia.edu
www.nyonrc.cumc.columbia.edu
www.pathology.columbia.edu
www.pediatrics.columbia.edu
www.precisiondentalmedicine.columbia.edu
www.ps.columbia.edu
www.rheumatologyatcolumbia.org
www.stemcell.columbia.edu
www.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for www.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199176323654891428271268823484957337017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679499267875276861618658566550308109489304681446773168264984253044128017610357418320824870766699105222423981251937583970468589884411004969912725424960004783108466277318229677927005554206718002486229726302463745717602649852192445667797621496560076540983108839887135868634109911621429033653481583632427114582254092102338501902736927094838690125958139257519966388368015997041473913966377927639705723991916460418620025031295637341664911795919824823155138121865547306551537476240248503208063069506392002292277212697189933375474812150633476421438700005620613396945578481212222326216379118329109895088944090833952372338496558207790251249768516222631315633969834564379448658704394268242838471895585995964453988747902721249369847874100580036780708424527686588174501659533246640345108413975617625081210384240137024066875880307480632920159478051126946370116120597491677018145450200295785445347811773349244282151642815242965345175019240676740550518853348033029408937791060529386396530822675027671485714660668659168718294322616518201013077561911411081413750187670304342160669484920533711582509550897309430220283152591348842198101540870175848179560923379052467977931888125196283588999931094592835708871411722760226314551437506130312401361274126747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87cd3e60178e9bb254a10e61c7251677fd63eb38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alscenter.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencymedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpo.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsas.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igm.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisiondentalmedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alscenter.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergencymedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpo.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsas.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igm.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisiondentalmedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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