exchangemail.richmond.edu

- University of Richmond -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 04:71:c8:62:4d:18:70:cf:7b:05:72:ba:ad:03:32:0e was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Richmond

Organization: University of Richmond
Organization unit: Information Services
Address: 28 Westhampton Way
Postal code: 23173
State / Province: VA
Locality: Richmond
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:c8:62:4d:18:70:cf:7b:05:72:ba:ad:03:32:0e
Serial Number (int): 5907705798294648453930091581670633998
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 74:37:bc:f9:90:e8:71:48:d7:5e:c3:da:00:05:de:cb:cd:d8:3d:6f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 82:e0:b7:85:16:cb:9e:44:ce:26:79:01:39:fb:e1:88:9d:0f:ec:57
Fingerprint (sha256): 16:57:07:fd:bc:6e:7d:73:18:2f:1d:f8:3c:3f:a7:b0:3a:87:21:b6:8d:e6:d9:44:14:20:95:3d:1c:9e:01:20

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate exchangemail.richmond.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchangemail.richmond.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchangemail.richmond.edu

Other certificates including the domain name richmond.edu

(limited to 100 certificates)
smtp.richmond.edu
lawreview.richmond.edu
ems.richmond.edu
codingbootcamp.richmond.edu
collegian.richmond.edu
spiderchallenge.richmond.edu
cygnet.richmond.edu
connect.richmond.edu
spdr-rw.richmond.edu
blackboard.richmond.edu
md.richmond.edu
spidertechnet.richmond.edu
www.lawinfo.richmond.edu
lawreview.richmond.edu
spdr-vm.richmond.edu
king.richmond.edu
blog.richmond.edu
onecardweb.richmond.edu
effect.richmond.edu
libguides.richmond.edu
connect.richmond.edu
secure-usea1-1.tessituranetwork.com
bootcamps.richmond.edu
spidertechhub.richmond.edu
webapps.richmond.edu
webapps.richmond.edu
collegian.richmond.edu
spidergiving.richmond.edu
sorry.richmond.edu
masterplan.richmond.edu
avs-ess-sessmgr-sm100.richmond.edu
cassini.richmond.edu
secure-usea1-1.tessituranetwork.com
bishop.richmond.edu
askboatwright.richmond.edu
secure-usea1-1.tessituranetwork.com
*.richmond.edu
dsl.richmond.edu
libsystest2.richmond.edu
libcal.richmond.edu
secure-usea1-1.tessituranetwork.com
www.student.richmond.edu
secure-usea1-1.tessituranetwork.com
idp.richmond.edu
lawreview.richmond.edu
effect.richmond.edu
jerkshistory.richmond.edu
emstest.richmond.edu
policy.richmond.edu
archives.richmond.edu
sprd-vm.richmond.edu
securessl-est1.tessituranetworkhost.com
dsl.richmond.edu
secure-usea1-1.tessituranetwork.com
websecure.richmond.edu
libcal.richmond.edu
xblog.richmond.edu
testapp.richmond.edu
secure-usea1-1.tessituranetwork.com
webpass.richmond.edu
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
tickets.modlin.richmond.edu
collegian.richmond.edu
codingbootcamp.richmond.edu
xemq20u1.richmond.edu
emstest.richmond.edu
securessl-est1.tessituranetworkhost.com
avs-cma.richmond.edu
scholarship.richmond.edu
testforms.richmond.edu
exchangemail.richmond.edu
sailaway.richmond.edu
richmond.edu
bannerweb.richmond.edu
codingbootcamp.richmond.edu
xeadmu.richmond.edu
scholarship.richmond.edu
collegian.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
securessl-est1.tessituranetworkhost.com
asords24p.richmond.edu
secure-usea1-1.tessituranetwork.com
spdr-cms.richmond.edu
collegian.richmond.edu
urhere.richmond.edu
idp.richmond.edu
secure-usea1-1.tessituranetwork.com
xess19u1.richmond.edu
avs-ric-avp2.richmond.edu
helping.richmond.edu
upgradeweb.richmond.edu
*.coursedog.com
bootcamps.richmond.edu
xemc20u1.richmond.edu
libcal.richmond.edu
avs-ess-avp.richmond.edu
metcalf.richmond.edu
wwws.richmond.edu

Certificate

The complete raw certificate details for exchangemail.richmond.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPd0xeMPeujkU+8GBsrY
5YciRlyiTqQLTMVuMqMjjVnmAAWuUPRHUxaT3BJml4LPhXuzZm+GuoivWscm+QSD
WUeQDwUQ+JhUmOvX5xuYQAemyX5xvPYSIIWmgLIzffGVUj3m8Vpz419S0oxCynlJ
J/O0KcSU84Z8Q3F/uFrrqtFsfSr0HtPM/2pmJgCVHe0kmQSWowB4jK0535iubjMJ
0vlCee0H39JRKzfwXjaEW67PYLVAnr7vAMnlC/yyvzB+F12eiPFzACPGACavFtiM
OQsNcqDr/ISJrYJigqcM3FBEvf7faq1jRn5Q3aay7xv5iViCHx5YdKfbPpchAVme
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5907705798294648453930091581670633998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '23173'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '28 Westhampton Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Richmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchangemail.richmond.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25369686166012693247394759157282173780866543835212935695979040295555584987459242478686505780910068048784148211030457593939786907709413631783502738643009657600729535162862170287825734782926158437960278464300254061116876461377994869890018794470187662255383715514821341545973221942641228185730239285134454505548982910548887004089800066773513602606593068283736178041891294951777924356641472346561115733964640895839854970238287541920675584526939399106282427014284102108494905578576178591139405915282261968568453703357259711628303906465759406911245143939359563374166676281339631413626529403566799436177004199167725265329813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7437bcf990e87148d75ec3da0005decbcdd83d6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangemail.richmond.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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