external-domains.ilstu.edu

- Illinois State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 30:f8:d9:bf:4f:72:9e:4f:3e:cd:cb:6f:3b:c6:bc:38 was issued on by Internet2.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Illinois State University

Organization: Illinois State University
Organization unit: Administrative Technologies
Address: 251 S. School Street
Address: Julian Hall
Postal code: 61761
State / Province: IL
Locality: Normal
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:f8:d9:bf:4f:72:9e:4f:3e:cd:cb:6f:3b:c6:bc:38
Serial Number (int): 65095049858643512703273679164881157176
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 58:bc:62:b8:ec:7c:45:ed:1b:41:09:bc:27:1e:e1:0c:79:eb:96:c6
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 69:61:a5:d2:2a:b5:97:18:da:2a:eb:3f:99:dc:b4:f5:e5:2d:95:bd
Fingerprint (sha256): 1d:15:83:7d:7d:35:f4:a9:d6:65:0d:bf:22:72:51:21:93:16:53:8e:01:dc:fc:3a:57:86:40:a1:9b:9d:63:36

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate external-domains.ilstu.edu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for external-domains.ilstu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

external-domains.ilstu.edu
*.illinoisartstation.org
*.illinoisshakes.com
*.innovationconsulting.community
*.stevensoncenter.org
*.thefestival.org
illinoisartstation.org
illinoisshakes.com
innovationconsulting.community
stevensoncenter.org
thefestival.org

Other certificates including the domain name ilstu.edu

(limited to 100 certificates)
owa.ilstu.edu
frodo.che.ilstu.edu
webdemo.ilstu.edu
login.it.ilstu.edu
scalefundercert.net
owa.illinoisstate.edu
parkingeb.illinoisstate.edu
webvpn.ilstu.edu
atvelocity01.ad.ilstu.edu
cacti.tel.ilstu.edu
ilstucmgtest.ilstu.edu
www5.cob.ilstu.edu
homer.lib.ilstu.edu
sharepoint-test.illinoisstate.edu
help.illinoisstate.edu
vidette.veridiansoftware.com
www.hr.ilstu.edu
ilstu.edu
homer.lib.ilstu.edu
stories.illinoisstate.edu
www.onapp.ilstu.edu
www.mktvideo.ilstu.edu
ltmonitor.itk.ilstu.edu
wdia-accounts.ilstu.edu
provisionserver.ilstu.edu
www.offcampushousing.ilstu.edu
owa.illinoisstate.edu
www.icampus.ilstu.edu
aiscampus-dev.ais.ilstu.edu
nsdev.ilstu.edu
ha.peopleadmin.com
www.uclub.ilstu.edu
lilt.ilstu.edu
www.seven.ilstu.edu
awsutm-test.ilstu.edu
atexpc.ilstu.edu
scalefundercert.net
support.cast.ilstu.edu
www.jobs.ilstu.edu
ulid.ilstu.edu
*.iwss.ilstu.edu
stash.it.ilstu.edu
owa-test.illinoisstate.edu
account-test.illinoisstate.edu
gartner.ilstu.edu
www.hr.ilstu.edu
gitlab.it.ilstu.edu
www.ts.ilstu.edu
gitlab.it.ilstu.edu
scalefundercert.net
www5.cob.ilstu.edu
uhigh.illinoisstate.edu
labstats.ilstu.edu
atlansweep01-t.adtest.ilstu.edu
scalefundercert.net
homer.lib.ilstu.edu
ilstu.edu
www.mlb.ilstu.edu
external-domains.ilstu.edu
www.jobs.ilstu.edu
redbirdmail.ilstu.edu
docs.ilstu.edu
*.ilstu.edu
scalefundercert.net
external-domains.ilstu.edu
students.cob.ilstu.edu
atinsightcon01-t.at.illinoisstate.edu
mallard.phy.ilstu.edu
aiscampus-dev.ais.ilstu.edu
parkingeb.illinoisstate.edu
wgltradio.ilstu.edu
www.saoweb.ilstu.edu
support.cast.ilstu.edu
gitlab.it.ilstu.edu
listserv.ilstu.edu
pgnetdev.sys.ilstu.edu
gartner.ilstu.edu
ha.peopleadmin.com
www.cas.ilstu.edu
watchmen.tel.ilstu.edu
listserv.ilstu.edu
nsdev.ilstu.edu
jh152command.ilstu.edu
splunkweb.ilstu.edu
stash.it.ilstu.edu
vidette.veridiansoftware.com
www.advance.ilstu.edu
office.lilt.ilstu.edu
gitlab.it.ilstu.edu
webtma.ilstu.edu
offcampushousing.illinoisstate.edu
account-test.illinoisstate.edu
libre.ilstu.edu
gitlab.it.ilstu.edu
updvpn.ilstu.edu
login.it.ilstu.edu
account.illinoisstate.edu
webtma-test.ilstu.edu
webtrac.ilstu.edu
external-domains.ilstu.edu

Certificate

The complete raw certificate details for external-domains.ilstu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KiC+TpSsgrzf6VVZFeC
Tv7n0TqLDWC5pofqukFat/XDqi4td7sBl7QvFLc278WcLnitf/i8LhnXbw+dhLLo
W4RUO17i7O6OwfcRftEdgfYkVodcTm/VaSleQ6LmOiDMx7cUVpFECCKeXme2PUCb
WmEfnFCDVFDQPnXOC+3oB1hHwUPWMywNB9Ywc0KjjqZaHgE9uECj+RCJyicrl/G2
3qJL3U6PagD+Ug8ETwtnSvT1mfm5F78r6qHE+8Xq1m/oafE6C8lRcwQVrswT17Ho
bQZkANed+EfqSmuZ4dFZHWJrBLuhU1aEC0MFMLVpzd9GY3lmFPAKiBP63EXMC31t
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65095049858643512703273679164881157176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '61761'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Normal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '251 S. School Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Julian Hall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administrative Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'external-domains.ilstu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26845616827402305685265819123181508055210666349504605424041606858367849809473987270820223724273978480789306242952020484231070030988637715044870343928206886176781752304864903022102842072150371834022074463082268965556734935011669152228114436072387116444162951074798019510047326255784059731608619133025793021623479513923597445028695278626786943006357515225601696629072056626014218183197226150840010107327053643575463464823128030104411019950805206177537935812840785328827398197587450977404140605634592311485484242216960712257502728934401594342834985926481794562082347088742009219792955723423147754875217202760218006351167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58bc62b8ec7c45ed1b4109bc271ee10c79eb96c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-domains.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illinoisartstation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illinoisshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovationconsulting.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevensoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisartstation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationconsulting.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefestival.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007fe0770c95bdb9bc078cb2cb1856e3a6405d546d62f1195fe31dd444fef3d686c80ceb81a75a8c73beffe1730757a16f496eddb6da54009ce7a76b89e6811e0c2032a2ec45f003f6f3cf264407c0ac4be963c8db2611912ab76d727420b3691765ed48457b623694c324809f27af8a81b733a32c128c5f2030086a89afd72a3c73d6f1c482305f48ccf94fe031f4502c4cc49885fd44a8dc94a1ecb072a7745ca953b78f4be393de8947566c9f40b1151b7e5e34bedd25c6e8f595230ae5ee8d8b14ea8a5994ad8f94318d5d34b539b9e5a4f8e062d99520f9dd4199f31998cd70a652c248e83d7eda830d95d8a759e63ac61170d911ee3e23d7ed78f59eb77a