gstage.tic.jh.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 66:48:b9:a6:b8:69:e0:ec:72:54:e8:f1:0d:b5:20:a4 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: MD
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:48:b9:a6:b8:69:e0:ec:72:54:e8:f1:0d:b5:20:a4
Serial Number (int): 135958866398600820742300245299150790820
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c6:66:d8:b0:54:39:31:25:11:7f:35:97:8e:91:d1:28:9d:71:91:d3
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e2:13:27:67:52:15:d3:99:8c:ad:ce:dd:28:5b:cd:85:ba:cf:8b:44
Fingerprint (sha256): 27:0f:2e:46:82:46:4d:9a:cb:a1:25:12:aa:4a:15:7c:72:f4:f0:ed:4b:56:8b:12:19:23:bb:12:da:c7:08:7e

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate gstage.tic.jh.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gstage.tic.jh.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gstage.tic.jh.edu
*.gstage.tic.jh.edu

Other certificates including the domain name jh.edu

(limited to 100 certificates)
ndes3.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
vpntest.jh.edu
jhutnt.jh.edu
mycloud.jh.edu
mycloudtestint.jh.edu
jhsessmgr.jh.edu
jhmsgtextweb.wintest.adtest.jhu.edu
lists04.jh.edu
devrpad.jhu.edu
schakravartilab.jh.edu
devrpad.jhu.edu
mwpulsetest1.jh.edu
idp.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhdrtisepsn1.win.ad.jhu.edu
vpn.jh.edu
sp13test.jho365.jh.edu
myit.jh.edu
jhbomgarbeta1.win.ad.jhu.edu
polymea.jhu.edu
adfsazdev.jh.edu
mobiletest.johnshopkins.edu
myit.jh.edu
mobile.johnshopkins.edu
code.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
mdev.jh.edu
jhutnt.jh.edu
schakravartilab.jh.edu
adfed.jh.edu
mobile.johnshopkins.edu
offwebapps.johnshopkins.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
idp.jh.edu
ewsgithub.jh.edu
mobiletestmail.johnshopkins.edu
jhutnt.jh.edu
dnstest.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mobile.johnshopkins.edu
my.jh.edu
mrpmpolyad01.hosts.jhmi.edu
azdevshib.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
ewspuppet19.jh.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
mwpulselic1.jh.edu
mwpulselic1.jh.edu
vpndev.jh.edu
jh.edu
devrpad.jhu.edu
radar-base.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
jhutnt.jh.edu
ndes3.jh.edu
mobile.johnshopkins.edu
bme.phd.council.students.jh.edu
sickbay-test.jh.edu
ebaccess.jhu.edu
ndes3.jh.edu
m.jh.edu
jhutnt.jh.edu
mobile.johnshopkins.edu
testidp.jh.edu
gstage.tic.jh.edu
jhutnt.jh.edu
policies.jhu.edu
t.jh.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
mwpulsetest1.jh.edu
pistg.jh.edu
mrpmpolyrm02.hosts.jhmi.edu
testidp.jh.edu
jhutnt.jh.edu
fodtest.jh.edu
idp.jh.edu
jh.edu
mysupportbeta.jh.edu
azuredev.jh.edu
jhutnt.jh.edu
mysoftware.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mysupportbeta.jh.edu
api.jh.edu
mycloudtestint.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
mrdmpolydma01.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhbomgarprod1.hosts.jhmi.edu
trac.jh.edu
jh.edu

Certificate

The complete raw certificate details for gstage.tic.jh.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziSDQYoPTlurUcWd5xnz
k4uPvjluPi+BZa8GdQos/ol+TIksiERcbm4Z+zcMG+HDrxJ/yEnBgApq8miNxYCO
h1usvYT2fChtUfXnQSWQQSI02NJNMXhKDcxGqs2QbajKL1wYIy0LMjDXXxnC9/HF
se0fNmZTRvxA1K+vjHX6wOGAkrSPNZR9c5KvBQwGBLuJCwsgecfoDC2w3aGs197q
n2x8QorIOrH001xr3HdqJmneidPLY2RB16Hm3ptfSO/0aNH94lJNqxeJhHzm/1UB
uUWPWVgjgu/TlYhnUV9ZB/chnaXgs616NK0bC06kOsjEdXDe6wgO/teUQQhM6hCy
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135958866398600820742300245299150790820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gstage.tic.jh.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26023095915707495822920364076019332374168575742250911388253174697290569647005113987320460609387484867733640398071887207470324156691940312699232530319571489347181808518498801952496120469469926840299845729701681304256464184657916783394266779495233918257172256453394604842064366592881440797459287675372936215475719638749836712164145799156115783923604012330400536595501608371410311200276891806864817280842489650291845186026557084228127686214392569039967778879329014974602373426411203414081490984426772111184322986632255780728840407182716815936705765098884035194877453822200409072829535866965489790652659437895300953453147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c666d8b054393125117f35978e91d1289d7191d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstage.tic.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstage.tic.jh.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007bf1f733ec9c4c56e25837c76f7d71ef967ca6584a785979d8a87cae050ec9d66a31146a4c3a054e153053b88b53a365591a8e26f18c42a9f5b181a1fab111a9e55e69824596703308bc8fe623c4633f9a90684dc1d9d066c21fb68de3c7936619b59a6a3b7f615c998bcf7ae65c1e6ede25b72fa20bf6cf5e912f90a37a1a11be3f59782af0ac091a5f110504d8c8641dd3083ea7e44ddb9879e3b4c4ea9e68a8b5b92d3d3f3e890b3cf3ff9840b121dbcbd988e9ef43161afbd638c92739ccfe2d4a34d422684092bac859f67029e88a419cbeff880213990f0bcf76c74395987f48cc00ca19f60cb167849d6c27490f414d320ae0d444ad6c1fdf83fc7c5c