cs-prod-ib.illinoisstate.edu

- Illinois State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number b5:f6:9a:ec:55:42:93:61:6e:f7:0c:22:69:ba:8a:e3 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Illinois State University

Organization: Illinois State University
Organization unit: Illinois State University, Normal
Address: 251 S. School Street
Address: North and School Streets
Postal code: 61790
State / Province: Illinois
Locality: Normal
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b5:f6:9a:ec:55:42:93:61:6e:f7:0c:22:69:ba:8a:e3
Serial Number (int): 241870714479581367239948466320972614371
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 29:40:bb:01:61:51:3b:a7:41:bb:0c:7a:4a:65:11:5c:7a:e3:7d:e9
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b8:f2:07:84:d1:f9:fb:a7:97:36:c5:bf:47:7d:45:bb:ed:31:8b:24
Fingerprint (sha256): 29:e2:13:91:cd:0d:b1:29:ed:0e:0f:fb:fd:80:34:b1:c4:68:49:14:2d:42:b9:e1:6e:2a:c6:45:7e:6e:1f:14

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cs-prod-ib.illinoisstate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-prod-ib.illinoisstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-prod-ib.illinoisstate.edu

Other certificates including the domain name illinoisstate.edu

(limited to 100 certificates)
sfunder11cert.net
meteo.avocat.fr
meteo.avocat.fr
about.illinoisstate.edu
sfunder29cert.net
events.conferences.illinoisstate.edu
cs.illinoisstate.edu
alerts.illinoisstate.edu
alerts.illinoisstate.edu
sfunder11cert.net
*.illinoisstate.edu
parkingeb.illinoisstate.edu
alerts.illinoisstate.edu
bits.illinoisstate.edu
sharepoint-test.illinoisstate.edu
help.illinoisstate.edu
csib.illinoisstate.edu
meteo.avocat.fr
sts.illinoisstate.edu
meteo.avocat.fr
meteo.avocat.fr
alerts.illinoisstate.edu
meteo.avocat.fr
vidette.veridiansoftware.com
reggienet.illinoisstate.edu
ilstu.edu
meteo.avocat.fr
stories.illinoisstate.edu
internal-sisdev.illinoisstate.edu
events.conferences.illinoisstate.edu
apps.illinoisstate.edu
meteo.avocat.fr
cs-dev.illinoisstate.edu
alerts.illinoisstate.edu
owa.illinoisstate.edu
alerts.illinoisstate.edu
sfunder11cert.net
alerts.illinoisstate.edu
internal-ipeopledev.illinoisstate.edu
sfunder1cert.net
atexpc.ilstu.edu
sfunder15cert.net
scalefundercert.net
meteo.avocat.fr
about.illinoisstate.edu
tmc.library.illinoisstate.edu
alerts.illinoisstate.edu
hcm.illinoisstate.edu
meteo.avocat.fr
cstest-internal-ren.illinoisstate.edu
ir.library.illinoisstate.edu
sfunder11cert.net
csdev-ren.illinoisstate.edu
owa-test.illinoisstate.edu
account-test.illinoisstate.edu
meteo.avocat.fr
uhigh.illinoisstate.edu
meteo.avocat.fr
scalefundercert.net
cs.illinoisstate.edu
meteo.avocat.fr
sfunder1cert.net
uhigh.illinoisstate.edu
labstats.ilstu.edu
internal-sis.illinoisstate.edu
meteo.avocat.fr
csdev.illinoisstate.edu
ilstu.edu
alerts.illinoisstate.edu
csdev-internal-ren.illinoisstate.edu
*.sharepoint.illinoisstate.edu
docs.ilstu.edu
cstest-internal.illinoisstate.edu
meteo.avocat.fr
internal-ipeopledev.illinoisstate.edu
alerts.illinoisstate.edu
csdemo-ren.illinoisstate.edu
alerts.illinoisstate.edu
csdev-ren.illinoisstate.edu
external-domains.ilstu.edu
status-test.illinoisstate.edu
ir.library.illinoisstate.edu
alerts.illinoisstate.edu
cstest.illinoisstate.edu
atinsightcon01-t.at.illinoisstate.edu
sfunder6cert.net
parkingeb.illinoisstate.edu
meteo.avocat.fr
sts.illinoisstate.edu
hcmdev.illinoisstate.edu
givingday.marshall.edu
hcm-prod-internal.illinoisstate.edu
reggienet.illinoisstate.edu
alerts.illinoisstate.edu
sfunder1cert.net
ipeopledev.illinoisstate.edu
connect.illinoisstate.edu
ir.library.illinoisstate.edu
alerts.illinoisstate.edu
cs-prod-ib.illinoisstate.edu

Certificate

The complete raw certificate details for cs-prod-ib.illinoisstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4mmKTQEXHZ0y9+0BuuA
SgE2Ga6IGN0XmT2B63cT+CMM3wQKKiHuyBjfyptP+YyqW99eKbfiZf+SzcHSagUE
anDIIWX6W3ryN/L2gAgph0q7zDTEIPx5PMqGpwXLWe85E6eT5/kJmgmdVBGrZlpf
rKHOoQ96JZR9NNcj/DVPVfS34HcNJU7qgTUHYPClgFkp46pxpIAFFTEhecqtpObd
EBupJWu2SVvf4vSSXyRtwUtulR94LFURGO9v/BasFbeNk/njvN0XtmNBKUf5aYam
4O2Iu++yQ2OUUZisVcKLrjEL7iJdBk1rvSvVodnFfhzFX0lPQkq8Pr4+44RAv5Gx
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 241870714479581367239948466320972614371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '61790'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Normal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '251 S. School Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North and School Streets'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois State University, Normal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-prod-ib.illinoisstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20644720993837138397514157882580271378152516772802735235517765395766777498110209979876616852740858496846232411908933193873831877849341183318253150853927651944653147273483930626311260803033039030121972329499502256308224746644040224366522021718279774237367748697663796188079526638431608416370057618504084116399438135183683122646648278816007809608550465158075111278081985672595938066599179557237773834577634993650158623668760376759032054451811753534909960365972367110915524381634296204263076763375553321035652907172046126142278287527080581614583060777927134250513536116416032097306245894767879515882922726620237707457001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2940bb0161513ba741bb0c7a4a65115c7ae37de9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-prod-ib.illinoisstate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063e8ef0de0c184d959d7ecb5c4f269967ba3f7748d08f11323a93e78746150622d6268a665abe391a3fda5b75a97e0e1b2fe8401a2d172d5ed36100ce7117fff016627325eee26367969317e303ff993e3fd2be775d777f0f5b652d8c3aaab57f11880567d8b70e1dc52c246d6756f672f6743b913c05be5e5662c65d288a673e4c288b0d2571f8e035349cc9a387b02ca8f09fbd0a8ed7821b349781f202436f596a4872d886c86480eb3393061c723d8e3b79fd1c9337f14d86224168313bb2a135f7d06f6fbe6cbd680eaa38bc93509752e37be509162686d1b6b64bf1907c12f0651d9fcfec4c8dfec2618a3e57654d13db982def511e6d9db0ded08e40e