kecksci.claremont.edu

- The Claremont Colleges, Inc. -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 83:51:27:26:fa:c5:86:26:0b:80:b0:5a:2a:99:cc:18 was issued on by Internet2.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Claremont Colleges, Inc.

Organization: The Claremont Colleges, Inc.
State / Province: California
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 83:51:27:26:fa:c5:86:26:0b:80:b0:5a:2a:99:cc:18
Serial Number (int): 174550237595620062686215242291640650776
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:3d:21:f2:13:6f:3d:3c:8a:4c:0b:0b:19:c8:81:c7:b9:cf:01:45
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 98:29:b8:d1:7c:d1:8c:48:66:30:b7:6d:01:c7:f9:d2:f5:46:b8:08
Fingerprint (sha256): 19:69:3e:49:e4:7c:b6:36:b3:ff:36:65:5c:d4:99:91:64:ce:f2:f5:5c:1b:5c:b0:58:ba:c4:25:02:82:2f:b4

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate kecksci.claremont.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kecksci.claremont.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kecksci.claremont.edu
faculty.jsd.claremont.edu
faculty.kecksci.claremont.edu
neuro.jsd.claremont.edu
neuro.kecksci.claremont.edu
r.jsd.claremont.edu
r.kecksci.claremont.edu
www.kecksci.claremont.edu

Other certificates including the domain name claremont.edu

(limited to 100 certificates)
oakmont.cusd.claremont.edu
tccsforms.services.claremont.edu
*.cx.claremont.edu
libguides.libraries.claremont.edu
sumnerdanbury.cusd.claremont.edu
scholarship.claremont.edu
sahs.cusd.claremont.edu
envirolabasia.claremont.edu
claremonthigh.cusd.claremont.edu
pressbooks.claremont.edu
footprints.claremont.edu
projects.claremont.edu
email.claremontmckenna.edu
condit.cusd.claremont.edu
www.cuc.claremont.edu
claremonthigh.cusd.claremont.edu
teaching.claremont.edu
edge-uc4.peopleadmin.com
*.claremont.edu
cwt-pub01-ms.voice.claremont.edu
elroble.cusd.claremont.edu
library.claremont.edu
teaching.claremont.edu
moodle.cusd.claremont.edu
elroble.cusd.claremont.edu
tccsforms.services.claremont.edu
services.claremont.edu
www.cusd.claremont.edu
faq.dml.georgetown.edu
webauth.claremont.edu
libguides.libraries.claremont.edu
library.claremont.edu
cards.cuc.claremont.edu
www.creativity.claremont.edu
*.claremont.edu
libraryfaq.erskine.edu
edge-uc4.peopleadmin.com
libraryfaq.erskine.edu
services.claremont.edu
scholarship.claremont.edu
edge_uc4.peopleadmin.com
*.claremont.edu
kecksci.claremont.edu
*.cuc.claremont.edu
colleges.claremont.edu
sumner.cusd.claremont.edu
webauth.claremont.edu
libguides.libraries.claremont.edu
creativity.claremont.edu
libraryfaq.erskine.edu
*.services.claremont.edu
email.claremontmckenna.edu
*.cusd.claremont.edu
library.claremont.edu
*.claremont.edu
www.cuc.claremont.edu
claremonthigh.cusd.claremont.edu
services.claremont.edu
creativity.claremont.edu
www.iplace.claremont.edu
dev.rimeta.claremont.edu
services.claremont.edu
sahs.cusd.claremont.edu
ccdl.claremont.edu
edge-uc4.peopleadmin.com
services.claremont.edu
claremont.edu
oakmont.cusd.claremont.edu
teaching.claremont.edu
webauth.claremont.edu
library.claremont.edu
engage.claremont.edu
claremont.pressbooks.pub
*.cx.claremont.edu
library.claremont.edu
elroble.cusd.claremont.edu
sycamore.cusd.claremont.edu
creativity.claremont.edu
claremont.edu
libraryfaq.erskine.edu
sakai.claremont.edu
sumnerdanbury.cusd.claremont.edu
cusdmail.cusd.claremont.edu
mail.jsd.claremont.edu
danbury.cusd.claremont.edu
library.claremont.edu
sahs.cusd.claremont.edu
*.cuc.claremont.edu
claremont.edu
creativity.claremont.edu
jobs.cuc.claremont.edu
cusdmail.cusd.claremont.edu
ri-meta.dev.rimeta.claremont.edu
mail.cuc.claremont.edu
sumnerdanbury.cusd.claremont.edu
cusd-adfs01.cusd.claremont.edu
webauth.claremont.edu
library.claremont.edu
faq.dml.georgetown.edu
cusdmail.cusd.claremont.edu

Certificate

The complete raw certificate details for kecksci.claremont.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eBn9LTWRMQIz4m3xQpO
s0uEmgk+GSnSg5KHjQpz3/1vp4bAkB+ZLzQmbjR9QZpIe2e+diNov+trJJo+t+p6
9MUVhdR/KpuQQv7nJrmQ+39BdTCJWY7VD+K4CPEsAS2+78NWLL9rB36UnzJAZFv5
qYWvL53lCuYDZIHHhbBZFT36iiL8znRvYbEWMNIYDXEUIAssV3PnuMnQv9NpWx3q
hQbTfbXVAJaZxYkT6gqE5ioDB6m/uxkgJO+Re7POoA4bUm1KymXQcaEZBQng8fjj
w2dEheyMKsSqTW1Z2JO59DTBMj6Xnvlppe7OAawPJXrc19JM9OpQg010gfe3mB8l
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174550237595620062686215242291640650776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Claremont Colleges, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kecksci.claremont.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26494464499115445337363314253887182893126017317964040798228472494005452836238832311999392434134162705425959964063296486594984054504789547449976572804185330790716810251493579213879506632466894516712039338854992213251083695545657953672876587993861513871082412998221808671314385556998757688611446305769041584590196912982094401566968641275293229140246375199778039241924335753186700331705907790851333386046009348558673092202958565182333981276058278607098036675036178863619236400212554600739416519563283677539238989599927145458239364079390639522455746386871202174898139977888757665920148922457903270989470519018480203670837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a43d21f2136f3d3c8a4c0b0b19c881c7b9cf0145
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kecksci.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.jsd.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.kecksci.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuro.jsd.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuro.kecksci.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.jsd.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.kecksci.claremont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kecksci.claremont.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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