mobiletestmail.johnshopkins.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ea:39:f6:44:b8:bd:24:aa:bb:a7:36:15:7e:01:05:a8 was issued on by Internet2.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
State / Province: Maryland
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ea:39:f6:44:b8:bd:24:aa:bb:a7:36:15:7e:01:05:a8
Serial Number (int): 311340306852058250656912707050541221288
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8c:43:d4:59:8d:d0:10:cb:63:d9:b6:cc:9a:4c:5a:24:d4:27:e6:5a
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 1b:51:36:23:4c:dd:56:32:2b:42:79:3f:da:f7:aa:70:6c:9f:83:2d
Fingerprint (sha256): 28:2e:dc:45:a1:cd:98:24:30:1f:6e:1d:23:9f:b0:aa:2b:df:5c:e8:8a:c9:64:f6:ec:05:fd:19:41:5a:5b:7c

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate mobiletestmail.johnshopkins.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobiletestmail.johnshopkins.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobiletestmail.johnshopkins.edu
autodiscover.adtest.jhu.edu
autodiscover.test.jh.edu
autodiscover.wintest.adtest.jhu.edu
esgex16-test1.wintest.adtest.jhu.edu
esgex16-test2.wintest.adtest.jhu.edu
mobileimaptest.johnshopkins.edu
mobilepoptest.johnshopkins.edu
mobiletest-int.johnshopkins.edu
mobiletest.johnshopkins.edu

Other certificates including the domain name johnshopkins.edu

(limited to 100 certificates)
e210.johnshopkins.edu
devreotes.johnshopkins.edu
kasslab.johnshopkins.edu
connectdev.johnshopkins.edu
kasslab.johnshopkins.edu
kasslab.johnshopkins.edu
devrpad.jhu.edu
devrpad.jhu.edu
operations.onecampus.com
ssltest.johnshopkins.edu
esmepiciconnnp.esm.johnshopkins.edu
idp.jh.edu
esmepicmonnp1.esm.johnshopkins.edu
it.johnshopkins.edu
connectweb4.johnshopkins.edu
esgndestest2.johnshopkins.edu
it.johnshopkins.edu
kasslab.johnshopkins.edu
cloudapps.johnshopkins.edu
epicmobile.johnshopkins.edu
ndestest2.johnshopkins.edu
jhbcaweb.johnshopkins.edu
myit.jh.edu
search.johnshopkins.edu
esmepicmmcnp.esm.johnshopkins.edu
esgbloxtest.johnshopkins.edu
mobiletest.johnshopkins.edu
mobile.johnshopkins.edu
esgbloxtest.johnshopkins.edu
jhcred.esm.johnshopkins.edu
jhcred.esm.johnshopkins.edu
hdaidev.esm.johnshopkins.edu
mobile.johnshopkins.edu
e210.johnshopkins.edu
kasslab.johnshopkins.edu
esmepicepseinp.esm.johnshopkins.edu
offwebapps.johnshopkins.edu
jhcredtst.esm.johnshopkins.edu
operations.onecampus.com
idp.jh.edu
mdmtst.johnshopkins.edu
gssbcaweb.johnshopkins.edu
webct.jhu.edu
onmyway.johnshopkins.edu
smtptest.johnshopkins.edu
connectweb3.johnshopkins.edu
mobiletestmail.johnshopkins.edu
freefood.johnshopkins.edu
mobile.johnshopkins.edu
epicshib.johnshopkins.edu
esmepiciconnnp.esm.johnshopkins.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
logindev.johnshopkins.edu
adfs.johnshopkins.edu
digital.pathology.johnshopkins.edu
stage.johnshopkins.edu
srvmgr.johnshopkins.edu
devrpad.jhu.edu
adfstest.johnshopkins.edu
esmepicmmcnp.esm.johnshopkins.edu
freefood.johnshopkins.edu
connect.johnshopkins.edu
mobile.johnshopkins.edu
*.johnshopkins.edu
ebaccess.jhu.edu
mysite.johnshopkins.edu
kasslab.johnshopkins.edu
hpo.johnshopkins.edu
kasslab.johnshopkins.edu
trcoeus.johnshopkins.edu
hdaiqa.esm.johnshopkins.edu
e210.johnshopkins.edu
mobile.johnshopkins.edu
testidp.jh.edu
jhcred.esm.johnshopkins.edu
mobiletestmail.johnshopkins.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
enterpriseauth.johnshopkins.edu
operations.onecampus.com
kasslab.johnshopkins.edu
logintest.johnshopkins.edu
operations.onecampus.com
prcoeus.johnshopkins.edu
devreotes.johnshopkins.edu
testidp.jh.edu
*.erp.johnshopkins.edu
esmepicmmcpnp.esm.johnshopkins.edu
jhepicsoaptst.esm.johnshopkins.edu
kasslab.johnshopkins.edu
wmsscale.esm.johnshopkins.edu
ipmtwspamq.johnshopkins.edu
kasslab.johnshopkins.edu
idp.jh.edu
e210.johnshopkins.edu
ictr.johnshopkins.edu
jhepicsoaphtst.esm.johnshopkins.edu
mobile.johnshopkins.edu
mysupportbeta.jh.edu

Certificate

The complete raw certificate details for mobiletestmail.johnshopkins.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKaRRSUf6k8ki8Wrnnkx
LBOcRZsVrblVvqAtJN5k4ShHMuuU2P0rYxuNG6ebBOfoLdg1bWucnZFpBBnjpRNC
YR7Ago977ADyl33XSDikk4kaXUHAqUspa0zYxOzX8guRPJdXMU1c1CscpPk62/Vp
R5j4TmvrKs9p4U7EyzrVMQAa4cMlGyeOiTJmgeHnv3Ow4kAJ7Hfj3VwvngBpPUjN
T5niqWHv43ZIqw2iZTHb1XKy9JLLvL/WPVe/uN6MV5nHRhcx6Kt2a6sIS7TcRl1g
FRFfpTT5qP82oADgduElE2qCV88kDgEfa+W4gLmFgoqTuisOGAFLiJCAK+maTh2h
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311340306852058250656912707050541221288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobiletestmail.johnshopkins.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21795125930644276018678978096198237973570620982529842331781742225926713311012970575439787856888999886103523937467711673930578985357429333882564596228782719594354776874879959344249635985257978449544934875433933038604881770578508165683717350908352249035207196218352064550178878823156469591615803487254300113931607730974568824902263704262338721724326341957877517859838013747384514996128997835962564290340636474131175564165529042559035452639480853648298054003262117634128181842150249923885415861780303355033795973909159516694626802632120429513741444896340692705741145119101306600791016519527292468662247114612763092951349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c43d4598dd010cb63d9b6cc9a4c5a24d427e65a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185e45369b40000040300473045022100914ce940f8a5cefa5dcc196fe3f71fceb0c34b5f9a1918ae86ea8fec78c990ad02202e80e25cd50a32fbf199aa3ebf64955827b41fd8bce9959c76498a38ef813018007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185e45369ca0000040300473045022100dcf1ec47180a198193eaa263892d5f9ad2655b8c471ae914ebacfa8e3cffbe7502206448634dac3030bb00138b4d9fc0d729519253ea7565a10023caa694dfed14be007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185e45369980000040300483046022100d190b5076e930630c9fc7aecfcd1d6eb67a6cda554756774bea5b549ba4b69c0022100c704a15ef88a42c430935064fa47f500089c14a7838bc2fbec351581d28fba42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletestmail.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.test.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgex16-test1.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgex16-test2.wintest.adtest.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileimaptest.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilepoptest.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletest-int.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletest.johnshopkins.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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