sf-lib-web-008.serverfarm.cornell.edu

Issued by InCommon RSA Server CA

About this certificate


This digital certificate with serial number 72:b5:48:6e:f7:46:ec:37:ab:86:f3:95:a0:63:f7:f8 was issued on by Internet2 .

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cornell University

Organization: Cornell University
Organization unit: Certificate Management
Address: 120 Maple Ave
Postal code: 14850
State / Province: NY
Locality: Ithaca
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Postal code: 14850
State / Province: NY
Locality: Ithaca
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 72:b5:48:6e:f7:46:ec:37:ab:86:f3:95:a0:63:f7:f8
Serial Number (int): 152473266375993090539811655558352861176
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4c:f5:4d:2f:f1:a6:3c:f0:a0:ae:36:02:a9:3d:17:16:14:e8:a9:05
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 67:77:94:be:c6:ba:1c:b2:04:a0:e2:d7:05:7d:aa:af:aa:5c:36:37
Fingerprint (sha256): 0f:66:48:d9:f9:21:cd:b9:e3:67:41:fa:47:4c:cf:e6:68:35:88:7f:f0:d5:17:46:2a:0d:c1:71:c7:74:cf:a0

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for the current certificate on sf-lib-web-008.serverfarm.cornell.edu
43
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

sf-lib-web-008.serverfarm.cornell.edu
2cul.org
ac.library.cornell.edu
acme.library.cornell.edu
aerial-ny.library.cornell.edu
africana-prod.library.cornell.edu
annex-prod.library.cornell.edu
annex.library.cornell.edu
anthrocollections.library.cornell.edu
antiquities.library.cornell.edu
artifactsandart.library.cornell.edu
chinapreservationtutorial.library.cornell.edu
cl3.library.cornell.edu
dcaps-prod.library.cornell.edu
dcaps.library.cornell.edu
efraimracker.library.cornell.edu
engineering.library.cornell.edu
featureserver.library.cornell.edu
ghali.library.cornell.edu
hlm.library.cornell.edu
johnclairmiller.library.cornell.edu
johnreps.library.cornell.edu
johnson.library.cornell.edu
kluge.library.cornell.edu
lamp-prod1.library.cornell.edu
law.library.cornell.edu
ld4l.org
lee.library.cornell.edu
leelibrary.cornell.edu
lts.library.cornell.edu
management.library.cornell.edu
olinuris.library.cornell.edu
olinurisworkshops.library.cornell.edu
persuasivemaps.library.cornell.edu
seapapers.library.cornell.edu
signale.cornell.edu
tarr.library.cornell.edu
www-prod.2cul.org
www.2cul.org
www.law.library.cornell.edu
www.ld4l.org
www.lee.library.cornell.edu
www.leelibrary.cornell.edu

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIKSjCCCTKgAwIBAgIQcrVIbvdG7DerhvOVoGP3+DANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xNTA4MzEwMDAwMDBaFw0xNjA4MzAy MzU5NTlaMIHBMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTQ4NTAxCzAJBgNVBAgT Ak5ZMQ8wDQYDVQQHEwZJdGhhY2ExFjAUBgNVBAkTDTEyMCBNYXBsZSBBdmUxGzAZ BgNVBAoTEkNvcm5lbGwgVW5pdmVyc2l0eTEfMB0GA1UECxMWQ2VydGlmaWNhdGUg TWFuYWdlbWVudDEuMCwGA1UEAxMlc2YtbGliLXdlYi0wMDguc2VydmVyZmFybS5j b3JuZWxsLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMv9YY8s un8YIhuJxcihZFqZz0muIbu+L/9BPfpipjjyyYeuJ4TOTVdwgtq+o2fYznMXPrjX qtpAngr2INDmYNYB7cmEJfXKYTCMYKSwb3Uodx6nk46tZN7m+rWJT7A7jnpQ7uff +C1g6xVXGpYkAiD2RK0W6ndvXq+bxJAWvkub5pQpMTE+81fe/tkxW9+dfmAeBQJL xl+SulyGCs7P08J39KfGvSNFbZ/oK6ls4KM79N2XAsboepsrKPepYJKazCobXW+3 L5vxl7IKHw0XYGk3Ze0gNjwyfb6iSLg2FqS4NT45kstoP2GPdoUFGnThAlnI8cxL 9vPbV+BccqZcqokCAwEAAaOCBoYwggaCMB8GA1UdIwQYMBaAFB4Fo3ePbJbiW4dL prSGrHEADOc4MB0GA1UdDgQWBBRM9U0v8aY88KCuNgKpPRcWFOipBTAOBgNVHQ8B Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0 aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3Ns LnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5pbmNv bW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2VydmVyQ0EuY3JsMHUGCCsGAQUFBwEB BGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0luQ29t bW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wggTbBgNVHREEggTSMIIEzoIlc2YtbGliLXdlYi0wMDguc2Vy dmVyZmFybS5jb3JuZWxsLmVkdYIIMmN1bC5vcmeCFmFjLmxpYnJhcnkuY29ybmVs bC5lZHWCGGFjbWUubGlicmFyeS5jb3JuZWxsLmVkdYIdYWVyaWFsLW55LmxpYnJh cnkuY29ybmVsbC5lZHWCIWFmcmljYW5hLXByb2QubGlicmFyeS5jb3JuZWxsLmVk dYIeYW5uZXgtcHJvZC5saWJyYXJ5LmNvcm5lbGwuZWR1ghlhbm5leC5saWJyYXJ5 LmNvcm5lbGwuZWR1giVhbnRocm9jb2xsZWN0aW9ucy5saWJyYXJ5LmNvcm5lbGwu ZWR1gh9hbnRpcXVpdGllcy5saWJyYXJ5LmNvcm5lbGwuZWR1giNhcnRpZmFjdHNh bmRhcnQubGlicmFyeS5jb3JuZWxsLmVkdYItY2hpbmFwcmVzZXJ2YXRpb250dXRv cmlhbC5saWJyYXJ5LmNvcm5lbGwuZWR1ghdjbDMubGlicmFyeS5jb3JuZWxsLmVk dYIeZGNhcHMtcHJvZC5saWJyYXJ5LmNvcm5lbGwuZWR1ghlkY2Fwcy5saWJyYXJ5 LmNvcm5lbGwuZWR1giBlZnJhaW1yYWNrZXIubGlicmFyeS5jb3JuZWxsLmVkdYIf ZW5naW5lZXJpbmcubGlicmFyeS5jb3JuZWxsLmVkdYIhZmVhdHVyZXNlcnZlci5s aWJyYXJ5LmNvcm5lbGwuZWR1ghlnaGFsaS5saWJyYXJ5LmNvcm5lbGwuZWR1ghdo bG0ubGlicmFyeS5jb3JuZWxsLmVkdYIjam9obmNsYWlybWlsbGVyLmxpYnJhcnku Y29ybmVsbC5lZHWCHGpvaG5yZXBzLmxpYnJhcnkuY29ybmVsbC5lZHWCG2pvaG5z b24ubGlicmFyeS5jb3JuZWxsLmVkdYIZa2x1Z2UubGlicmFyeS5jb3JuZWxsLmVk dYIebGFtcC1wcm9kMS5saWJyYXJ5LmNvcm5lbGwuZWR1ghdsYXcubGlicmFyeS5j b3JuZWxsLmVkdYIIbGQ0bC5vcmeCF2xlZS5saWJyYXJ5LmNvcm5lbGwuZWR1ghZs ZWVsaWJyYXJ5LmNvcm5lbGwuZWR1ghdsdHMubGlicmFyeS5jb3JuZWxsLmVkdYIe bWFuYWdlbWVudC5saWJyYXJ5LmNvcm5lbGwuZWR1ghxvbGludXJpcy5saWJyYXJ5 LmNvcm5lbGwuZWR1giVvbGludXJpc3dvcmtzaG9wcy5saWJyYXJ5LmNvcm5lbGwu ZWR1giJwZXJzdWFzaXZlbWFwcy5saWJyYXJ5LmNvcm5lbGwuZWR1gh1zZWFwYXBl cnMubGlicmFyeS5jb3JuZWxsLmVkdYITc2lnbmFsZS5jb3JuZWxsLmVkdYIYdGFy ci5saWJyYXJ5LmNvcm5lbGwuZWR1ghF3d3ctcHJvZC4yY3VsLm9yZ4IMd3d3LjJj dWwub3Jnght3d3cubGF3LmxpYnJhcnkuY29ybmVsbC5lZHWCDHd3dy5sZDRsLm9y Z4Ibd3d3LmxlZS5saWJyYXJ5LmNvcm5lbGwuZWR1ghp3d3cubGVlbGlicmFyeS5j b3JuZWxsLmVkdTANBgkqhkiG9w0BAQsFAAOCAQEAm7eIlKn9yCbpgHW387ZH8tMD JAakVXZr3gxHu0AP1zyiOrhsSMdo1cwGYf1iiQ/s3oy5/6cuC1f4Y7WP2V05xY5t 7ip3QZYrjbgtyQ0M3NePL/5+ITWmMmskQ3OOSI8h0YBvodVwGH7NkEHPBuxsMdNO 6hYBvw+Xw4Fd8Cvsoq7ZAYy76flDpCCRaxfYyr0JDXV4lsT66ThrF57Cv5QFdVif WDdA98hCtcV1sfMFjwGk3YZ8Il9/lHG0RSt5U/j04hn9qI9HTl6FPCXB/SXUNEGm z18NzrUBSuH1e25ERUJ4wwUdt9Q4QHoJhgEJScQiwzsQEIW2M9bZyKJ246Yw4g== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/1hjyy6fxgiG4nFyKFk WpnPSa4hu74v/0E9+mKmOPLJh64nhM5NV3CC2r6jZ9jOcxc+uNeq2kCeCvYg0OZg 1gHtyYQl9cphMIxgpLBvdSh3HqeTjq1k3ub6tYlPsDuOelDu59/4LWDrFVcaliQC IPZErRbqd29er5vEkBa+S5vmlCkxMT7zV97+2TFb351+YB4FAkvGX5K6XIYKzs/T wnf0p8a9I0Vtn+grqWzgozv03ZcCxuh6myso96lgkprMKhtdb7cvm/GXsgofDRdg aTdl7SA2PDJ9vqJIuDYWpLg1PjmSy2g/YY92hQUadOECWcjxzEv289tX4Fxyplyq iQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 152473266375993090539811655558352861176 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '14850' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ithaca' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '120 Maple Ave' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cornell University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certificate Management' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sf-lib-web-008.serverfarm.cornell.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25751322780877685209819294017438175036789045728165877885944701913762830314614122711819881038819856896999717243316861978816754749723608083342269648336587002877212015898776968152323932709950161275897573576558949239518643862831676554770731537887137618318130616187170925687442760241221816511702260637875129710629707589169694811707838659430188332734133396035603359100292489408492879543815542789114190366025682899038509968155751893967737656208744132040885940070739713759821616349468598005328482430269273285848815599317248132788963917741774123895313295729452759782810601387870426610252045798228738741142476211130014147324553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4cf54d2ff1a63cf0a0ae3602a93d171614e8a905 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1234 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-lib-web-008.serverfarm.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2cul.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acme.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerial-ny.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africana-prod.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annex-prod.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annex.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthrocollections.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquities.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactsandart.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinapreservationtutorial.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl3.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcaps-prod.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcaps.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efraimracker.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureserver.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghali.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlm.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnclairmiller.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnreps.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnson.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluge.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamp-prod1.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld4l.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leelibrary.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lts.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olinuris.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olinurisworkshops.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persuasivemaps.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seapapers.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signale.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarr.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prod.2cul.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2cul.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.law.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ld4l.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lee.library.cornell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leelibrary.cornell.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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