testidp.jh.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 3b:7b:a5:97:f5:5a:8b:26:91:4e:bf:04:20:fb:90:5f was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: MD
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:7b:a5:97:f5:5a:8b:26:91:4e:bf:04:20:fb:90:5f
Serial Number (int): 79066462901880250329551563879712788575
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 62:03:d6:9d:c4:75:cf:f9:96:75:bb:39:0e:a4:73:b5:dd:b5:e6:3f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 2f:d3:2c:8c:d2:e5:3b:cc:b2:1d:99:b7:ff:3e:b0:a8:dc:43:6f:7b
Fingerprint (sha256): 26:79:b2:0b:34:52:96:92:83:00:54:55:f7:8e:de:ac:1f:b0:9a:26:d7:24:b3:4b:1d:1f:d0:20:17:9f:e8:2e

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate testidp.jh.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testidp.jh.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testidp.jh.edu
ctyshib.jh.edu
epicshib.johnshopkins.edu
testshib.johnshopkins.edu

Other certificates including the domain name jh.edu

(limited to 100 certificates)
ndes3.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
vpntest.jh.edu
jhutnt.jh.edu
mycloud.jh.edu
mycloudtestint.jh.edu
jhsessmgr.jh.edu
jhmsgtextweb.wintest.adtest.jhu.edu
lists04.jh.edu
devrpad.jhu.edu
schakravartilab.jh.edu
devrpad.jhu.edu
mwpulsetest1.jh.edu
idp.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhdrtisepsn1.win.ad.jhu.edu
vpn.jh.edu
sp13test.jho365.jh.edu
myit.jh.edu
jhbomgarbeta1.win.ad.jhu.edu
polymea.jhu.edu
adfsazdev.jh.edu
mobiletest.johnshopkins.edu
myit.jh.edu
mobile.johnshopkins.edu
code.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
mdev.jh.edu
jhutnt.jh.edu
schakravartilab.jh.edu
adfed.jh.edu
mobile.johnshopkins.edu
offwebapps.johnshopkins.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
idp.jh.edu
ewsgithub.jh.edu
mobiletestmail.johnshopkins.edu
jhutnt.jh.edu
dnstest.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mobile.johnshopkins.edu
my.jh.edu
mrpmpolyad01.hosts.jhmi.edu
azdevshib.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
ewspuppet19.jh.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
mwpulselic1.jh.edu
mwpulselic1.jh.edu
vpndev.jh.edu
jh.edu
devrpad.jhu.edu
radar-base.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
jhutnt.jh.edu
ndes3.jh.edu
mobile.johnshopkins.edu
bme.phd.council.students.jh.edu
sickbay-test.jh.edu
ebaccess.jhu.edu
ndes3.jh.edu
m.jh.edu
jhutnt.jh.edu
mobile.johnshopkins.edu
testidp.jh.edu
gstage.tic.jh.edu
jhutnt.jh.edu
policies.jhu.edu
t.jh.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
mwpulsetest1.jh.edu
pistg.jh.edu
mrpmpolyrm02.hosts.jhmi.edu
testidp.jh.edu
jhutnt.jh.edu
fodtest.jh.edu
idp.jh.edu
jh.edu
mysupportbeta.jh.edu
azuredev.jh.edu
jhutnt.jh.edu
mysoftware.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mysupportbeta.jh.edu
api.jh.edu
mycloudtestint.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
mrdmpolydma01.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhbomgarprod1.hosts.jhmi.edu
trac.jh.edu
jh.edu

Certificate

The complete raw certificate details for testidp.jh.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79066462901880250329551563879712788575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testidp.jh.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713822604658475810565853256004842598835580146699778196059585149230346234154383888472772970961522042618578738832848569747222922913229469346468823378114910832464630089803280075600880788915564525602610190937258852274343590598957053035207627526756858337412679009231803329334444019206593761590179652989665092577674301593576591371928437961556472739225487133633257947851118274082984331846064079412690374817956194371637921161526621928464197768849662914135976986461727687736983773442734771318593011630856949706469758815030556808572360421031869875739922073574424139813867281003021063595767983807847107487993482329673705818804950353288142958810328458825211532756843662292561620361154165553723885382610559729999745756949568893003506126872293996893220654983394875794701996824537353599492633701458901289659690463130180284909067096934281718380988919474375016044699385976165910314805331320728676272663393815935418013013429336880931176319383795214509872202141374628818733467999894585702703963583960747588358423184080537282633774707847554683587157997297428386508723972435848489262614570170895205602383191170705507265098080276131039941514080012848451515155135073977704793274941744569787710965137560786161304965347282950667197246211420064733495070602103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6203d69dc475cff99675bb390ea473b5ddb5e63f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testidp.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctyshib.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicshib.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testshib.johnshopkins.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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