healthdata.org
- University of Washington -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number e6:06:63:6f:8a:47:06:34:93:b7:f4:85:5f:4f:85:3c was issued on by Internet2.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Washington
Organization:
University of Washington
Organization unit: UW-IT
Organization unit: UW-IT
State / Province:
Washington
Locality: Seattle
Country: US
Locality: Seattle
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e6:06:63:6f:8a:47:06:34:93:b7:f4:85:5f:4f:85:3cSerial Number (int): 305755609607353454724972342807882597692
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 2d:84:85:ee:47:4c:81:15:cb:28:45:38:4d:83:c0:f9:90:95:69:ed
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 6f:b5:82:73:62:53:be:09:dd:e4:c2:86:b6:ef:59:d7:06:c9:66:77
Fingerprint (sha256): 1e:4d:f9:66:af:12:a6:7b:b9:e9:43:ca:2b:c9:1a:12:20:9d:19:8b:8b:d2:3b:30:46:df:d6:0b:d3:dc:53:61
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate healthdata.org
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for healthdata.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
healthdata.org
*.apply.healthdata.org
*.ghdx.healthdata.org
*.globalva.org
*.healthdata.org
*.healthmetricsandevaluation.org
*.ihme.uw.edu
*.ihme.washington.edu
*.ihmeuw.org
*.s3.healthdata.org
*.vizhub.healthdata.org
globalva.org
healthmetricsandevaluation.org
ihme.uw.edu
ihme.washington.edu
ihmeuw.org
*.apply.healthdata.org
*.ghdx.healthdata.org
*.globalva.org
*.healthdata.org
*.healthmetricsandevaluation.org
*.ihme.uw.edu
*.ihme.washington.edu
*.ihmeuw.org
*.s3.healthdata.org
*.vizhub.healthdata.org
globalva.org
healthmetricsandevaluation.org
ihme.uw.edu
ihme.washington.edu
ihmeuw.org
Other certificates including the domain name healthdata.org
(limited to 100 certificates)
dev.healthdata.org
*.stage.ghdx.healthdata.org
ssl441041.cloudflaressl.com
login.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441041.cloudflaressl.com
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl4831.cloudflare.com
sni.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
s3.healthdata.org
learn.healthdata.org
ssl319586.cloudflaressl.com
learn.healthdata.org
learn.healthdata.org
dl.healthdata.org
ssl441041.cloudflaressl.com
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
ssl441041.cloudflaressl.com
ssl319586.cloudflaressl.com
healthdata.org
sni.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
dl.healthdata.org
console.dl.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
dev.healthdata.org
learn.healthdata.org
healthdata.org
healthdata.org
learn.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
learn.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
login.healthdata.org
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441041.cloudflaressl.com
healthdata.org
www.healthdata.org
*.stage.ghdx.healthdata.org
console.dl.healthdata.org
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
healthdata.org
console.dl.healthdata.org
dl.healthdata.org
console.dl.healthdata.org
healthdata.org
login.healthdata.org
console.dl.healthdata.org
console.dl.healthdata.org
healthdata.org
sni.cloudflaressl.com
dl.healthdata.org
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
ssl441042.cloudflaressl.com
www.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
learn.healthdata.org
ssl441040.cloudflaressl.com
console.dl.healthdata.org
ssl4831.cloudflare.com
sni.cloudflaressl.com
console.dl.healthdata.org
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441042.cloudflaressl.com
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441040.cloudflaressl.com
learn.healthdata.org
sni.cloudflaressl.com
*.stage.ghdx.healthdata.org
ssl441041.cloudflaressl.com
login.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441041.cloudflaressl.com
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl4831.cloudflare.com
sni.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
s3.healthdata.org
learn.healthdata.org
ssl319586.cloudflaressl.com
learn.healthdata.org
learn.healthdata.org
dl.healthdata.org
ssl441041.cloudflaressl.com
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
ssl441041.cloudflaressl.com
ssl319586.cloudflaressl.com
healthdata.org
sni.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
dl.healthdata.org
console.dl.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
dev.healthdata.org
learn.healthdata.org
healthdata.org
healthdata.org
learn.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
learn.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
login.healthdata.org
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441041.cloudflaressl.com
healthdata.org
www.healthdata.org
*.stage.ghdx.healthdata.org
console.dl.healthdata.org
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
healthdata.org
console.dl.healthdata.org
dl.healthdata.org
console.dl.healthdata.org
healthdata.org
login.healthdata.org
console.dl.healthdata.org
console.dl.healthdata.org
healthdata.org
sni.cloudflaressl.com
dl.healthdata.org
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
ssl441042.cloudflaressl.com
www.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
learn.healthdata.org
ssl441040.cloudflaressl.com
console.dl.healthdata.org
ssl4831.cloudflare.com
sni.cloudflaressl.com
console.dl.healthdata.org
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441042.cloudflaressl.com
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441040.cloudflaressl.com
learn.healthdata.org
sni.cloudflaressl.com
Certificate
The complete raw certificate details for healthdata.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHkjCCBnqgAwIBAgIRAOYGY2+KRwY0k7f0hV9PhTwwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjEwOTI5MDAwMDAwWhcNMjIwOTI5 MjM1OTU5WjCBgDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO BgNVBAcTB1NlYXR0bGUxITAfBgNVBAoTGFVuaXZlcnNpdHkgb2YgV2FzaGluZ3Rv bjEOMAwGA1UECxMFVVctSVQxFzAVBgNVBAMTDmhlYWx0aGRhdGEub3JnMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw5Xoqo9s4FrolBEBf/fyi73e2+Ir r5uBMt9zBOhwL8RMdj/c8O4ThXigbC0R7RXimk3BVTAWkaHm0NJ3TeYoK47SlAlK 2YwQ4pR/JLUGq7Lsb7VHu62mn/mwyBrWE3Sdyv84ZxCuvs6V1rQtvoEaynLTUvym g3eCIy1LyiZVOE1I3NZxGftg/DLJdoKnJT4EqFWC6RnjwGWCcAtKs3UTww44vwK1 9g/YwseVY4YZaQRxIDN4jbzBMj24Qyh/QzvJitkoScoeGQ/3jA6Thq6eVue8leo3 xLvsJa6PwD0INPdzmHXMcnGMP+p+FgbfLrbNo9TXkyr9Qe9DD3O+x+B9rcSRTBPl w4SYy3Ed2+rwfS8981Q7GdpOgrr4jC3jnJSxXv5dnq1HxFG8plJw51OUDa43HS0s pA5KonL5DEM3pzcbjl0LSTJiXrAO5x2LYVgasJwdj6JidU8xC1HdC7VVnBbJe5ZE 1Ql22VmPEozOIz2rDlHyHG02tFj7kVGllL/uxOL9uJjJ9w65GN/ElxQSGDrN64LW AhWadmhTA6zYX074OboeEYTh8pY+dwE+1O4l8FyEZuptLDWL/hY91G8bbIC1tj0g lTwhyaysrdaI4TBRMhUoNkW6lbObmWw9UnJR6E+qLY9KMUyKqtXubKRQ9asjYnVN 2k/PXKkv4O4s4IkCAwEAAaOCAw4wggMKMB8GA1UdIwQYMBaAFB4Fo3ePbJbiW4dL prSGrHEADOc4MB0GA1UdDgQWBBQthIXuR0yBFcsoRThNg8D5kJVp7TAOBgNVHQ8B Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQDAQEwQjBABggrBgEFBQcCARY0 aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQvcmVwb3NpdG9yeS9jcHNfc3Ns LnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5pbmNv bW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2VydmVyQ0EuY3JsMHUGCCsGAQUFBwEB BGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0luQ29t bW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz ZXJ0cnVzdC5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAwggFOBgNVHREEggFFMIIB QYIOaGVhbHRoZGF0YS5vcmeCFiouYXBwbHkuaGVhbHRoZGF0YS5vcmeCFSouZ2hk eC5oZWFsdGhkYXRhLm9yZ4IOKi5nbG9iYWx2YS5vcmeCECouaGVhbHRoZGF0YS5v cmeCICouaGVhbHRobWV0cmljc2FuZGV2YWx1YXRpb24ub3Jngg0qLmlobWUudXcu ZWR1ghUqLmlobWUud2FzaGluZ3Rvbi5lZHWCDCouaWhtZXV3Lm9yZ4ITKi5zMy5o ZWFsdGhkYXRhLm9yZ4IXKi52aXpodWIuaGVhbHRoZGF0YS5vcmeCDGdsb2JhbHZh Lm9yZ4IeaGVhbHRobWV0cmljc2FuZGV2YWx1YXRpb24ub3JnggtpaG1lLnV3LmVk dYITaWhtZS53YXNoaW5ndG9uLmVkdYIKaWhtZXV3Lm9yZzANBgkqhkiG9w0BAQsF AAOCAQEAgPTZV4qyGpseVfXNXvu62Irp4w7NR9biKVrG2a/+WP7qU9RLLqN2XUME UNny3dQgTHY5WxbiKpmKT6CD+D9M0/huTNOawA5p+kcpXKy1zVuOgwgjX5Q/fpMK QRhuRWyWs/KfnEv4wNQ+axtijiap9ja+j+RzByq0Eyyf0kUGm4cMh8V5ouh6oYfC NGwo5mrjXkjHa5MiLQS5eslOk/reXaceK0BieoJo4eyZR9fSbuLe1ENJywXpv1qL B0ZJo77j6lPaOT2wG7ixm0NHb9V4bbRHTW3ECTCXaBYTBXsRQPq3kakUFOas/6pR 32w4z6Ue60d9rw9Q2KfSDPXsYyjZ+g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw5Xoqo9s4FrolBEBf/fy i73e2+Irr5uBMt9zBOhwL8RMdj/c8O4ThXigbC0R7RXimk3BVTAWkaHm0NJ3TeYo K47SlAlK2YwQ4pR/JLUGq7Lsb7VHu62mn/mwyBrWE3Sdyv84ZxCuvs6V1rQtvoEa ynLTUvymg3eCIy1LyiZVOE1I3NZxGftg/DLJdoKnJT4EqFWC6RnjwGWCcAtKs3UT ww44vwK19g/YwseVY4YZaQRxIDN4jbzBMj24Qyh/QzvJitkoScoeGQ/3jA6Thq6e Vue8leo3xLvsJa6PwD0INPdzmHXMcnGMP+p+FgbfLrbNo9TXkyr9Qe9DD3O+x+B9 rcSRTBPlw4SYy3Ed2+rwfS8981Q7GdpOgrr4jC3jnJSxXv5dnq1HxFG8plJw51OU Da43HS0spA5KonL5DEM3pzcbjl0LSTJiXrAO5x2LYVgasJwdj6JidU8xC1HdC7VV nBbJe5ZE1Ql22VmPEozOIz2rDlHyHG02tFj7kVGllL/uxOL9uJjJ9w65GN/ElxQS GDrN64LWAhWadmhTA6zYX074OboeEYTh8pY+dwE+1O4l8FyEZuptLDWL/hY91G8b bIC1tj0glTwhyaysrdaI4TBRMhUoNkW6lbObmWw9UnJR6E+qLY9KMUyKqtXubKRQ 9asjYnVN2k/PXKkv4O4s4IkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305755609607353454724972342807882597692 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UW-IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthdata.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797919557174161357086106005436651322248884940909675456693503703448262527338261109355125115479564855063889206757323793485686111162338522729278349343359434437993007010460350243307319838685962141167259852235134524246685849098484304730073848160170365411036831061954804407103930191159794936159041114988084134015447685124904439546241147701412379566054008391373128606261505880212350267299489398401259270373838635775300117306387309370611859666354852130100323936543407825245078587818284865709543057121073119232112148647797403417118362873149351081722985308335189160658422494247647279605101842204524309119795445327197389931286368171729680449693157120919737016324661548515790717387215268124003588428672841451182435421432684635837782898205058520636772809928990092540333780850383842476725265316629875292091083479723273483218786763135125711363316451121185720345851900628109859744343976015408055085629724716896507204067205734403551468641929087680311563613713431157362420813098693628506695319579193180356974082292998211016024126874029819737285069475086190422434300078964379147875194197317125978829521508216684319004295157880371963476697844081374532835470208533865929131314470740186906802924102206136307838810225668701140927462309089766200675188662409 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d8485ee474c8115cb2845384d83c0f9909569ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apply.healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghdx.healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthmetricsandevaluation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihme.uw.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihme.washington.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihmeuw.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vizhub.healthdata.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmetricsandevaluation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihme.uw.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihme.washington.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmeuw.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0080f4d9578ab21a9b1e55f5cd5efbbad88ae9e30ecd47d6e2295ac6d9affe58feea53d44b2ea3765d430450d9f2ddd4204c76395b16e22a998a4fa083f83f4cd3f86e4cd39ac00e69fa47295cacb5cd5b8e8308235f943f7e930a41186e456c96b3f29f9c4bf8c0d43e6b1b628e26a9f636be8fe473072ab4132c9fd245069b870c87c579a2e87aa187c2346c28e66ae35e48c76b93222d04b97ac94e93fade5da71e2b40627a8268e1ec9947d7d26ee2ded44349cb05e9bf5a8b074649a3bee3ea53da393db01bb8b19b43476fd5786db4474d6dc4093097681613057b1140fab791a91414e6acffaa51df6c38cfa51eeb477daf0f50d8a7d20cf5ec6328d9fa