lyncfe2013pool.ad.csbsju.edu

- College of Saint Benedict-Saint John's University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ff:86:0d:46:d3:ac:3e:27:3e:bc:c4:5b:8a:92:87:31 was issued on by Internet2.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

College of Saint Benedict-Saint John's University

Organization: College of Saint Benedict-Saint John's University
Organization unit: IT Services
Address: 37 College Avenue
Postal code: 56374
State / Province: Minnesota
Locality: St. Joseph
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ff:86:0d:46:d3:ac:3e:27:3e:bc:c4:5b:8a:92:87:31
Serial Number (int): 339649175987003003786856216277019690801
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e8:ff:f3:12:fe:35:f5:c7:d3:e9:d1:ab:a5:fc:2a:78:7d:d1:5e:03
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 63:5c:b1:82:fc:59:4f:82:3a:22:eb:40:83:8e:fd:30:bd:65:49:2f
Fingerprint (sha256): 1d:f3:eb:94:df:e2:cd:ef:6d:e1:58:67:7b:01:b3:23:fa:0d:fd:63:b8:7a:03:81:3a:e8:47:e4:07:f9:eb:90

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate lyncfe2013pool.ad.csbsju.edu

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncfe2013pool.ad.csbsju.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncfe2013pool.ad.csbsju.edu
lync.csbsju.edu
lync.litpress.org
lync.sjprep.net
lync2013-fe1.ad.csbsju.edu
lync2013-fe2.ad.csbsju.edu
lync2013-fe3.ad.csbsju.edu
lyncdiscover.csbsju.edu
lyncdiscover.litpress.org
lyncdiscover.sjprep.net
lyncdiscoverinternal.csbsju.edu
lyncdiscoverinternal.litpress.org
lyncdiscoverinternal.sjprep.net
lyncfe2013poolws.csbsju.edu

Other certificates including the domain name csbsju.edu

(limited to 100 certificates)
moodle2sandbox.csbsju.edu
cognos.csbsju.edu
cluster.technolutions.net
clockwork.csbsju.edu
sjualum.csbsju.edu
banxf1.ad.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
assets.csbsju.edu
cluster.technolutions.net
igx.csbsju.edu
bookstore.csbsju.edu
cluster.technolutions.net
apps.csbsju.edu
sipaccess.csbsju.edu
sustainability.csbsju.edu
bansso.csbsju.edu
mitelcallcenter.csbsju.edu
cluster.technolutions.net
tbxsa8srv.ad.csbsju.edu
cluster.technolutions.net
citrix.csbsju.edu
employees.csbsju.edu
apps.csbsju.edu
cluster.technolutions.net
sharepoint.csbsju.edu
csbsju.edu
cluster.technolutions.net
bookstore.csbsju.edu
technolutions.com
cluster.technolutions.net
csbalum.csbsju.edu
banxf1.ad.csbsju.edu
employment.csbsju.edu
moodle.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
ssb.csbsju.edu
cluster.technolutions.net
api.csbsju.edu
digitalcommons.csbsju.edu
www.users.csbsju.edu
ssl365432.cloudflaressl.com
auth.csbsju.edu
banxf2.ad.csbsju.edu
ssl365433.cloudflaressl.com
apps.csbsju.edu
banxf1.ad.csbsju.edu
passsrv.ad.csbsju.edu
cluster.technolutions.net
bansso.csbsju.edu
cluster.technolutions.net
aleph.mnpals.net
cluster.technolutions.net
clubs.sharepoint.csbsju.edu
guides.csbsju.edu
banxf2.ad.csbsju.edu
cluster.technolutions.net
spam.csbsju.edu
sharepoint.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
bookstore.csbsju.edu
guides.csbsju.edu
cluster.technolutions.net
admissions.csbsju.edu
webapps.csbsju.edu
csbalum.csbsju.edu
cluster.technolutions.net
viewdevcs.csbsju.edu
blogs.csbsju.edu
digitalcommons.csbsju.edu
www.csbsju.edu
citrix.csbsju.edu
www.users.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
viewcs.csbsju.edu
view.csbsju.edu
auth-stage.csbsju.edu
zabbix.csbsju.edu
lyncfe2013pool.ad.csbsju.edu
vappvol.csbsju.edu
bookstore.csbsju.edu
cluster.technolutions.net
bookstore.csbsju.edu
cluster.technolutions.net
phyplantwork.csbsju.edu
ssl365433.cloudflaressl.com
cluster.technolutions.net
csbsju.edu
cluster.technolutions.net
homedir.csbsju.edu
apps.csbsju.edu
canvas.csbsju.edu
technolutions.com
selfservice.csbsju.edu
api.csbsju.edu
sharepoint.csbsju.edu
technolutions.com

Certificate

The complete raw certificate details for lyncfe2013pool.ad.csbsju.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv2lTyysNX6m2V0rl97J
HMzICNxWQcVbNzYnd8D1VTF1kviNrCnQ9DIyY+r78p3aUJha7chdYdbp+dL0E+W6
Z4xOfpmlA4O9/yhLfpXL/LxZJ3XX1YP2jWlgVH4QMfDicj1YbcimHtrrhJIEwzuW
0IczvC9IuMuaErjqWZFbzyQUR6mNJqxnGNPrnMX+nITipF0CUZuBfbzltA2EPn6P
5BKTbEXL0fzp2If4klDoBoserUJwnu8bZAafB2T/Ql2hADmneEQBEMcS2ok1vjcC
Axt/zJxHgNeU0ibpHVsQpp1Z9UkxG3m0KkJNeVMjq0E0hX6dgaXFheM/60kGV880
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339649175987003003786856216277019690801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '56374'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Joseph'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37 College Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'College of Saint Benedict-Saint John's University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncfe2013pool.ad.csbsju.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24110355319325727712810213440259120466549080750447496634745885308650537371857950141152237648518026315633644380503777097743024596424483548264989067404014405108269597140865987008917324549701430464239288009544198089517316428768945642562349132445691501649595034950305285890768553242440082328416413043344022084464157415114106870679930091579116495593887556754339958956528891412036425435722623360503873782079529862185147497914059805989981199096565050724855367822532167059665285303651566772110474851013125202991900795717305694465975541597440674072484737608345504975885007964298364004723856508418022298026190119660304196383929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8fff312fe35f5c7d3e9d1aba5fc2a787dd15e03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncfe2013pool.ad.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.litpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.sjprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync2013-fe1.ad.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync2013-fe2.ad.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync2013-fe3.ad.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.litpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sjprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.litpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.sjprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncfe2013poolws.csbsju.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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