community.uchicagomedicine.org

- The University of Chicago -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 8b:fb:0c:5c:fc:fc:2b:a6:4e:10:f0:17:88:54:ea:11 was issued on by Internet2.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The University of Chicago

Organization: The University of Chicago
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 8b:fb:0c:5c:fc:fc:2b:a6:4e:10:f0:17:88:54:ea:11
Serial Number (int): 186066208681796821111819865350309472785
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 63:0b:71:24:bb:be:fb:04:d8:66:55:7c:af:67:5b:3c:c8:49:1d:70
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 90:79:5b:67:fc:2a:ec:55:68:b1:d8:de:4d:bb:d8:ad:8d:d7:59:0f
Fingerprint (sha256): 27:15:94:29:22:11:ae:ea:9a:32:80:49:66:dd:a7:98:a9:b6:c8:be:c5:08:fa:2a:96:fa:1b:ad:63:b6:1d:7d

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate community.uchicagomedicine.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.uchicagomedicine.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.uchicagomedicine.org
cancerar.uchicagomedicine.org
global.uchicagomedicine.org
uat-cancerar.uchicagomedicine.org
uat-community.uchicagomedicine.org
uat-global.uchicagomedicine.org

Other certificates including the domain name uchicagomedicine.org

(limited to 100 certificates)
mail.uchospitals.edu
pages.uchicagomedicine.org
san-15-s13.tlsprovisioning.exacttarget.com
mail.uchospitals.edu
community.uchicagomedicine.org
pages.uchicagomedicine.org
community.uchicagomedicine.org
uchicagomedicine.org
www.uchicagomedicine.org
healthlibrary.uchicagomedicine.org
uat.uchicagomedicine.org
uchicagomedicine.org
www.uchicagomedicine.org
pages.uchicagomedicine.org
healthlibrary.uchicagomedicine.org
www.uchicagomedicine.org
uat.uchicagomedicine.org
www.uchicagomedicine.org
mail.uchospitals.edu
uat.uchicagomedicine.org
www.uchicagomedicine.org
www.uchicagomedicine.org
www.uchicagomedicine.org
www.uchicagomedicine.org
*.uchicagomedicine.org
www.uchicagomedicine.org

Certificate

The complete raw certificate details for community.uchicagomedicine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlDCCBfygAwIBAgIRAIv7DFz8/CumThDwF4hU6hEwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5D
b21tb24gUlNBIFNlcnZlciBDQSAyMB4XDTIzMTEwNzAwMDAwMFoXDTI0MTEwNjIz
NTk1OVowbTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMSIwIAYDVQQK
ExlUaGUgVW5pdmVyc2l0eSBvZiBDaGljYWdvMScwJQYDVQQDEx5jb21tdW5pdHku
dWNoaWNhZ29tZWRpY2luZS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLY5xz47GgNF77XyABFFwKQySyFDX2defo8f9vCSKmhxVnSlomSzvoBQgx
NAaRlOnOPKGT9gNLe9/a//KkLIJKVcaqLgQFIvwcpszco78FsQy1St6LXmsHrrYv
RJs67YxXgtznzQaz3nxZIsP8sQkghk3LZAgEsYdCTrSFfDPIm0RsYIj1e7hPiZOP
HtW5EgSTtrcjHenkFNWMcvpRLoYPL0xkP2iWe4GvRvQiX7Oo6Sv8YA9xeQRISWhy
RTfyyC3hNn1wPRMHmMCHE1wBu0Ovhjbmuc0/kYc+wUID2d8nYYO1bY6Tx21pDSXc
Bpc/HHbfhzSLXLE/k+YoA29WjqjrAgMBAAGjggPWMIID0jAfBgNVHSMEGDAWgBTv
TACSpvt2Ll6V4slfhxsZ1U3i2TAdBgNVHQ4EFgQUYwtxJLu++wTYZlV8r2dbPMhJ
HXAwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAmcwJTAjBggr
BgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMEAGA1Ud
HwQ5MDcwNaAzoDGGL2h0dHA6Ly9jcmwuc2VjdGlnby5jb20vSW5Db21tb25SU0FT
ZXJ2ZXJDQTIuY3JsMHAGCCsGAQUFBwEBBGQwYjA7BggrBgEFBQcwAoYvaHR0cDov
L2NydC5zZWN0aWdvLmNvbS9JbkNvbW1vblJTQVNlcnZlckNBMi5jcnQwIwYIKwYB
BQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBgAYKKwYBBAHWeQIEAgSC
AXAEggFsAWoAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYur
+umCAAAEAwBHMEUCIQDTqk5UjWAtYP7VHrDq1j/E7WySKhQroob8+MyeoDeWtwIg
U5lczcv7jyTlMnE561FdUbt+bAhMaIwLR4g11eH6KLsAdwA/F0tP1yJHWJQdZRyE
vg0S7ZA3fx+FauvBvyiF7PhkbgAAAYur+unhAAAEAwBIMEYCIQDYt8QBhuP7SdcY
wGXIMKZ7LZu8N44bm2YSzKYBJyw2sAIhAOysTJQGqhlsEgMxI5ITW4qA4Tm4wwA2
UE7KeOfDSAg5AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGL
q/rpsgAABAMASDBGAiEA3L3JQVgITfxXM29lMpqgxQcg6AWPZbxcJmK9ODytDk8C
IQCNxoHOqFnfwHu+mIWXb9aQkqEcextXNOjHadIfb4slbTCBzwYDVR0RBIHHMIHE
gh5jb21tdW5pdHkudWNoaWNhZ29tZWRpY2luZS5vcmeCHWNhbmNlcmFyLnVjaGlj
YWdvbWVkaWNpbmUub3JnghtnbG9iYWwudWNoaWNhZ29tZWRpY2luZS5vcmeCIXVh
dC1jYW5jZXJhci51Y2hpY2Fnb21lZGljaW5lLm9yZ4IidWF0LWNvbW11bml0eS51
Y2hpY2Fnb21lZGljaW5lLm9yZ4IfdWF0LWdsb2JhbC51Y2hpY2Fnb21lZGljaW5l
Lm9yZzANBgkqhkiG9w0BAQwFAAOCAYEAZxnlTGQ/VKS4e+j3rPHmTNV/YSfhbLTO
i24jp+Lw1VuV+lxTNCFPv9wAo7t8/1pZhptm8Emack3AdYq6A0ixSMgoUiBqKtAI
hvrUCswxyPU9ojCukX8jdPjKCAUuEmIFdIa/Zfl8PjDqvscVRnjguNJVGkSsWkPk
oygeirRmu2idBbbVsIElnD8ZNh9eMcGbcbZsyiKOHfRfzkIFxJ/MoKKCUnVsgAC0
X3yIhtmPexrFWII3RdBn+87jX6p663I+l0fZWfPrWEewrYuKk68MzEag/hABo/8V
tKE1D2zMRn2vtUIntazotn0+5LyqyxF7TI8E7v4C8aKfwZJslxa3k42XYKwwqXDZ
JrzGtjGNXOJ5Rcd1T0qFErZZLuxS1PF+QtV4YK1WG9OeriM7w0OFmrronldGtguV
6wu/z8fMwLzCXTYHo+ejQpWphjPXX5coJ5bJWCHwBkt5P413Ve8jiK/qZPg3mI1Z
AdbJU35u42Rj0S4SRnAgW8GyUiCDXD5H
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Occ+OxoDRe+18gARRc
CkMkshQ19nXn6PH/bwkipocVZ0paJks76AUIMTQGkZTpzjyhk/YDS3vf2v/ypCyC
SlXGqi4EBSL8HKbM3KO/BbEMtUrei15rB662L0SbOu2MV4Lc580Gs958WSLD/LEJ
IIZNy2QIBLGHQk60hXwzyJtEbGCI9Xu4T4mTjx7VuRIEk7a3Ix3p5BTVjHL6US6G
Dy9MZD9olnuBr0b0Il+zqOkr/GAPcXkESElockU38sgt4TZ9cD0TB5jAhxNcAbtD
r4Y25rnNP5GHPsFCA9nfJ2GDtW2Ok8dtaQ0l3AaXPxx234c0i1yxP5PmKANvVo6o
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186066208681796821111819865350309472785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.uchicagomedicine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25675495993617741689115984559368034514377142739953302601972723788386590587037996969748148090185200953466490391012575102563975500832711784210357869429970747692476834406805848877146516630568601605856426927835696799139313766600481659893479296849942106199278666524088836710242388804831835485704660082192482394664740224422357815859279541858841823031071130833117664034217597149120588558315021634080571522648197829393502887455783066899155889694080899319187541155668421508140674829561562562781807310958180014474854760949959960732501969416533861661591844895939154471569165883010284163299097978290497959318724384080312469989611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							630b7124bbbefb04d866557caf675b3cc8491d70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancerar.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cancerar.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-community.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-global.uchicagomedicine.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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