rp-dru01.urel.berkeley.edu

Issued by InCommon RSA Server CA

About this certificate


This digital certificate with serial number e9:c1:90:39:eb:93:35:80:0f:54:32:27:a7:17:32:ef was issued on by Internet2 .

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

University of California, Berkeley (Regents of the Univ. of CA)

Organization: University of California, Berkeley (Regents of the Univ. of CA)
Organization unit: University Relations
Address: 200 California Hall #1500
Postal code: 947201500
State / Province: California
Locality: Berkeley
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Postal code: 947201500
State / Province: California
Locality: Berkeley
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): e9:c1:90:39:eb:93:35:80:0f:54:32:27:a7:17:32:ef
Serial Number (int): 310715161567477751323712560192575451887
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 39:6f:1e:fa:55:ef:1c:ca:c0:77:8a:ad:11:4c:ac:c9:17:47:33:e8
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 17:cb:40:79:bc:9f:c3:24:53:f9:f0:cf:62:00:74:32:d7:a9:a9:60
Fingerprint (sha256): 17:13:10:19:71:90:70:59:b6:c3:1b:7b:32:8a:a0:02:2a:13:34:91:ab:87:03:f0:01:03:99:0e:b4:ad:de:c1

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for the current certificate on rp-dru01.urel.berkeley.edu
46
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

rp-dru01.urel.berkeley.edu
alumni-friends.berkeley.edu
awards.berkeley.edu
calfund.berkeley.edu
calfutures.berkeley.edu
calparents-engagement.berkeley.edu
commencement.berkeley.edu
convio.berkeley.edu
csav.berkeley.edu
dar.berkeley.edu
founderspledge.berkeley.edu
homecoming.berkeley.edu
icols.berkeley.edu
innovators.berkeley.edu
international.berkeley.edu
ols.berkeley.edu
planyourlegacy.berkeley.edu
reunions.berkeley.edu
rp-dru.urel.berkeley.edu
rtdp1.urel.berkeley.edu
rtdp2.urel.berkeley.edu
sectionclub.berkeley.edu
seniors.berkeley.edu
urel.berkeley.edu
www.alumni-friends.berkeley.edu
www.awards.berkeley.edu
www.calfund.berkeley.edu
www.calfutures.berkeley.edu
www.calparents-engagement.berkeley.edu
www.commencement.berkeley.edu
www.convio.berkeley.edu
www.csav.berkeley.edu
www.dar.berkeley.edu
www.founderspledge.berkeley.edu
www.homecoming.berkeley.edu
www.icols.berkeley.edu
www.innovators.berkeley.edu
www.international.berkeley.edu
www.ols.berkeley.edu
www.planyourlegacy.berkeley.edu
www.reunions.berkeley.edu
www.sectionclub.berkeley.edu
www.seniors.berkeley.edu
www.urel.berkeley.edu
www.youngalumni.berkeley.edu
youngalumni.berkeley.edu

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIKazCCCVOgAwIBAgIRAOnBkDnrkzWAD1QyJ6cXMu8wDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTUxMDE0MDAwMDAwWhcNMTgxMDEz MjM1OTU5WjCB+zELMAkGA1UEBhMCVVMxEjAQBgNVBBETCTk0NzIwMTUwMDETMBEG A1UECBMKQ2FsaWZvcm5pYTERMA8GA1UEBxMIQmVya2VsZXkxIjAgBgNVBAkMGTIw MCBDYWxpZm9ybmlhIEhhbGwgIzE1MDAxSDBGBgNVBAoTP1VuaXZlcnNpdHkgb2Yg Q2FsaWZvcm5pYSwgQmVya2VsZXkgKFJlZ2VudHMgb2YgdGhlIFVuaXYuIG9mIENB KTEdMBsGA1UECxMUVW5pdmVyc2l0eSBSZWxhdGlvbnMxIzAhBgNVBAMTGnJwLWRy dTAxLnVyZWwuYmVya2VsZXkuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvFbhC3Gmw+mveWy077qPrKT/DRvq0cJDKnVTxyV3g9scEt5yY7w+nHst op2bLkxcZYCSonClYLVvXxgiKkd9o5mGPJRG1QUhRX5A7MupVGAqNrKH38HWFa5V XqE6Sj667O5/oD5Pge5IEFC3epk5fFBphlaoHPwUnvkzc1AqrixGWOw0W03D2nKc 56YeyHdgiiBTxngbgZNJNaDNORYBMZQKQTUGvJAPv/j2V+0lnq2Zc4/d8UeDRI5X SKYh2vfrQC/BDh0Rs9ycwl8df8v3+oJHUE96rSv7qYz4gn6S+MuXX1uVvF/66GOK p6qogVr84LoZA4pFNZ2CZy3MgarwDQIDAQABo4IGbDCCBmgwHwYDVR0jBBgwFoAU HgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYEFDlvHvpV7xzKwHeKrRFMrMkX RzPoMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAG CCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0 b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRw Oi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmww dQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVz dC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0 cDovL29jc3AudXNlcnRydXN0LmNvbTCCBMEGA1UdEQSCBLgwggS0ghpycC1kcnUw MS51cmVsLmJlcmtlbGV5LmVkdYIbYWx1bW5pLWZyaWVuZHMuYmVya2VsZXkuZWR1 ghNhd2FyZHMuYmVya2VsZXkuZWR1ghRjYWxmdW5kLmJlcmtlbGV5LmVkdYIXY2Fs ZnV0dXJlcy5iZXJrZWxleS5lZHWCImNhbHBhcmVudHMtZW5nYWdlbWVudC5iZXJr ZWxleS5lZHWCGWNvbW1lbmNlbWVudC5iZXJrZWxleS5lZHWCE2NvbnZpby5iZXJr ZWxleS5lZHWCEWNzYXYuYmVya2VsZXkuZWR1ghBkYXIuYmVya2VsZXkuZWR1ghtm b3VuZGVyc3BsZWRnZS5iZXJrZWxleS5lZHWCF2hvbWVjb21pbmcuYmVya2VsZXku ZWR1ghJpY29scy5iZXJrZWxleS5lZHWCF2lubm92YXRvcnMuYmVya2VsZXkuZWR1 ghppbnRlcm5hdGlvbmFsLmJlcmtlbGV5LmVkdYIQb2xzLmJlcmtlbGV5LmVkdYIb cGxhbnlvdXJsZWdhY3kuYmVya2VsZXkuZWR1ghVyZXVuaW9ucy5iZXJrZWxleS5l ZHWCGHJwLWRydS51cmVsLmJlcmtlbGV5LmVkdYIXcnRkcDEudXJlbC5iZXJrZWxl eS5lZHWCF3J0ZHAyLnVyZWwuYmVya2VsZXkuZWR1ghhzZWN0aW9uY2x1Yi5iZXJr ZWxleS5lZHWCFHNlbmlvcnMuYmVya2VsZXkuZWR1ghF1cmVsLmJlcmtlbGV5LmVk dYIfd3d3LmFsdW1uaS1mcmllbmRzLmJlcmtlbGV5LmVkdYIXd3d3LmF3YXJkcy5i ZXJrZWxleS5lZHWCGHd3dy5jYWxmdW5kLmJlcmtlbGV5LmVkdYIbd3d3LmNhbGZ1 dHVyZXMuYmVya2VsZXkuZWR1giZ3d3cuY2FscGFyZW50cy1lbmdhZ2VtZW50LmJl cmtlbGV5LmVkdYIdd3d3LmNvbW1lbmNlbWVudC5iZXJrZWxleS5lZHWCF3d3dy5j b252aW8uYmVya2VsZXkuZWR1ghV3d3cuY3Nhdi5iZXJrZWxleS5lZHWCFHd3dy5k YXIuYmVya2VsZXkuZWR1gh93d3cuZm91bmRlcnNwbGVkZ2UuYmVya2VsZXkuZWR1 ght3d3cuaG9tZWNvbWluZy5iZXJrZWxleS5lZHWCFnd3dy5pY29scy5iZXJrZWxl eS5lZHWCG3d3dy5pbm5vdmF0b3JzLmJlcmtlbGV5LmVkdYIed3d3LmludGVybmF0 aW9uYWwuYmVya2VsZXkuZWR1ghR3d3cub2xzLmJlcmtlbGV5LmVkdYIfd3d3LnBs YW55b3VybGVnYWN5LmJlcmtlbGV5LmVkdYIZd3d3LnJldW5pb25zLmJlcmtlbGV5 LmVkdYIcd3d3LnNlY3Rpb25jbHViLmJlcmtlbGV5LmVkdYIYd3d3LnNlbmlvcnMu YmVya2VsZXkuZWR1ghV3d3cudXJlbC5iZXJrZWxleS5lZHWCHHd3dy55b3VuZ2Fs dW1uaS5iZXJrZWxleS5lZHWCGHlvdW5nYWx1bW5pLmJlcmtlbGV5LmVkdTANBgkq hkiG9w0BAQsFAAOCAQEADco2KcIIKjLAIiUMDYxT7Qqvbxc3kykZlX1mWc5hdytz Qkx/K577Ltx1iqMhzMmYU+aywI2iepsY9EOnlbgSr2XufTTrZgqn8EbXihdHhSmh UEBbaWq9o8o12rTobuRqAQxfW2igpsqHrNnZFN9TJn8wmDxHk3mavATUYZ9Kqh41 ZChOWwtx72pvM7gqTDinIYWChczfkFB1B3duzUEC1CB4lBjk76US7vRpjqu426kt iELS7gTs2JoQ8i+E3YjVosrwy8Q08bUpdOpdeTFYfuOFWWBTjuqQi45eZBBJDsO1 gG7i9QrpMP9T3gmRT4ryn9EybxcBu6XINFFJGjSuQw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFbhC3Gmw+mveWy077qP rKT/DRvq0cJDKnVTxyV3g9scEt5yY7w+nHstop2bLkxcZYCSonClYLVvXxgiKkd9 o5mGPJRG1QUhRX5A7MupVGAqNrKH38HWFa5VXqE6Sj667O5/oD5Pge5IEFC3epk5 fFBphlaoHPwUnvkzc1AqrixGWOw0W03D2nKc56YeyHdgiiBTxngbgZNJNaDNORYB MZQKQTUGvJAPv/j2V+0lnq2Zc4/d8UeDRI5XSKYh2vfrQC/BDh0Rs9ycwl8df8v3 +oJHUE96rSv7qYz4gn6S+MuXX1uVvF/66GOKp6qogVr84LoZA4pFNZ2CZy3Mgarw DQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310715161567477751323712560192575451887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '947201500' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berkeley' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '200 California Hall #1500' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Berkeley (Regents of the Univ. of CA)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Relations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rp-dru01.urel.berkeley.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23775643005127392227234222917534340999249752788506276064057841362984213451401536916394804986477031221858795540180099425200841847086025864906192922007578505093552629642187978321116371346166191599772268359417283967075290275939731769682002631888512955209866229733557401275962527187002643602210328258862604074029461540678137635747139515650936203247635382487501273526954072150946046085664197853506104875268563261340062579711047252727177376113079150530944254575039460106369080682477463490662092184338846446910542223077368533408126256130097627046965982734233500358596180501353012682809059384891091552005381545182982218379277 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 396f1efa55ef1ccac0778aad114cacc9174733e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1208 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-dru01.urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-friends.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calfund.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calfutures.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calparents-engagement.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commencement.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convio.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csav.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dar.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderspledge.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecoming.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icols.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovators.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ols.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planyourlegacy.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunions.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-dru.urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtdp1.urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtdp2.urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectionclub.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniors.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-friends.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awards.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calfund.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calfutures.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calparents-engagement.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commencement.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.convio.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csav.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dar.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.founderspledge.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homecoming.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icols.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovators.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ols.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planyourlegacy.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunions.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sectionclub.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seniors.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urel.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngalumni.berkeley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngalumni.berkeley.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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