dev.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 69:bd:ca:19:0c:a2:e5:44:a6:37:38:24:cf:e3:5f:23 was issued on by Internet2.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 69:bd:ca:19:0c:a2:e5:44:a6:37:38:24:cf:e3:5f:23
Serial Number (int): 140554382695033998359640070695793418019
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 92:15:d2:4b:b1:83:00:fd:fd:b1:24:f6:1e:ef:61:58:54:78:2b:cc
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 98:5d:25:5e:fe:1d:f5:9d:c6:a8:6c:a4:70:d4:11:a2:a3:e2:b9:a8
Fingerprint (sha256): 2c:d2:6d:eb:09:63:6e:79:ff:09:32:de:24:09:e0:69:22:af:73:88:38:3f:23:98:5c:5c:f5:50:a3:e5:db:23

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate dev.cumc.columbia.edu

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cumc.columbia.edu
dev.anesthesiology.cumc.columbia.edu
dev.biochem.cumc.columbia.edu
dev.brand.cumc.columbia.edu
dev.columbia-lyme.org
dev.columbiacardiology.org
dev.columbiaeye.org
dev.columbiaobgyn.org
dev.columbiapsychiatry.org
dev.columbiaradiology.org
dev.compliance.cumc.columbia.edu
dev.crr.columbia.edu
dev.dental.columbia.edu
dev.derc.cumc.columbia.edu
dev.dermatology.columbia.edu
dev.epic.cumc.columbia.edu
dev.facultyclub.cumc.columbia.edu
dev.gca.cumc.columbia.edu
dev.genetics.cumc.columbia.edu
dev.hipaa.cumc.columbia.edu
dev.ihn.cumc.columbia.edu
dev.infectiousdiseases.cumc.columbia.edu
dev.nyonrc.cumc.columbia.edu
dev.pathology.columbia.edu
dev.ps.columbia.edu
dev.rheumatologyatcolumbia.org
dev.stemcell.columbia.edu
dev.ws.cumc.columbia.edu
sandbox.ws.cumc.columbia.edu
stage.anesthesiology.cumc.columbia.edu
stage.biochem.cumc.columbia.edu
stage.brand.cumc.columbia.edu
stage.columbia-lyme.org
stage.columbiacardiology.org
stage.columbiaeye.org
stage.columbiaobgyn.org
stage.columbiapsychiatry.org
stage.columbiaradiology.org
stage.compliance.cumc.columbia.edu
stage.crr.columbia.edu
stage.cumc.columbia.edu
stage.dental.columbia.edu
stage.derc.cumc.columbia.edu
stage.dermatology.columbia.edu
stage.epic.cumc.columbia.edu
stage.facultyclub.cumc.columbia.edu
stage.gca.cumc.columbia.edu
stage.genetics.cumc.columbia.edu
stage.hipaa.cumc.columbia.edu
stage.ihn.cumc.columbia.edu
stage.infectiousdiseases.cumc.columbia.edu
stage.nyonrc.cumc.columbia.edu
stage.pathology.columbia.edu
stage.ps.columbia.edu
stage.rheumatologyatcolumbia.org
stage.stemcell.columbia.edu
stage.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for dev.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAto86hr+R7Z2lU1WNJJoT
v6Ot7Iz3Y6N6400XQeRJHO6/prPjRno7Gjaf/ehuY0Q8hSl+WEmoXyobU6LlGpCq
52XsT6rCp1mWAWWDZ/ZakGJH0Ak08sAZ9WTJnJY4kJHccWywBkdBaTyV0/GE+/BB
cjNCnOjAt+0iDK/X8xbklf7qinpZmmOSCk6MZkky2ArNc2PFgXHusBlgdRfMpkaQ
q9SJqSGdNlAO2qxFqvV9iV6IlazsG7s66kEyiF0KDS2deLzRxrMvPGPn8tBm/LU4
H/S2pxhNyyHJF4po8ND3DLUXAk0I1hcxIp1Ray5J4d1xRdSKjgExd7HjQ8N0NO2M
o2i+UzX7GSDBPlHPhGet3u+rTru5S28x5+Ss+WbMwJ98JFy+B0yPFnVv1jOposST
8aMSyKwQmHFpKT3Sm+Na+xLKr88Ub3ERcQKUfsySQDs8JmkXt2IaKNSPvQGjfmTS
QW+8nt0ZQQ9B/zWM4RWGoE7BlHi9gGSKCUnMRJ42vNI8/DGJcoJnMNZnF+/kGTiQ
CGEWLFBJ6tK6uepC8nk2+J230S08YGiQofT6z9LbYFf7k13x7XU5qBipJkmy41fR
054EolDFWAtfftc1KKZ0d3x6oPh+GOP4QatUCeOFWpqh3E+rGTf/o4ESqP5GT66A
eVrT6LvRD30FAOH7EJQ4opkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140554382695033998359640070695793418019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744777727349298644393735951972634114645905639487849638606443930043871464551673078419469569090953026625532376862449240129132958181573065272597411297801946355639665690346792520395546529658451847520786714208833078715313533060972635930352222008867374978496012937818884975574586604485935741941370794104522298529895145195331676019845659809900786581980471689431633508729411934249647025441559942655882747126575297929892124876097489085534403914736336097087973534895857668591764543941572453061068992540447011923582237803595476061320468311059067871730314312488332159364343955368559436218918219065381264503411509025277800302878405128765063482070990593704917756601830513843264607877392662725197756744496888949568708208192341692673406469602613733615065558552689039570901059931189877302510798153146179987085210851239446958556118413409715848222588428372182481411083850972106924566275043414554023745036743121070912370832921606909536169997243666724281215475828042110744434991676795536287051092739480178640004272451066463005991793260399407321057695692218863148736526116646260337404256738677257692599828490136854365224053417759157103176127661931757568337691984816880793662871861572458441667559930359127328271997520905362874034458961433928764886764528281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9215d24bb18300fdfdb124f61eef615854782bcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.cumc.columbia.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a79f4f65715aab6956e6f46ff6561c484e2fd1b8f19a90ab0d4ad3443500661796f25fd52e23ecf8ef9978924ded832186c0646a26b1cb11640fd4ec3f14a3d2d6b62ed2604c05b2ce2990990684b8d164ce937322b1c10cb23fca1f4d25f74c7c1c670911433179a7ab86ef1cde6e630b8433176c47e732298f2dbd83e30f7b9f17bb0a0429b585cdad1398d78bedbdd50a37ebff91feaec9b5042123b4b5c7e52997aef1df52af2b3eafcefc44b832cde2c2e8bfc6b3a3a145f812f67e8003ccc5007128f4e0458da1b3d245a0d26132b8b606a8891fe6a4f7b63e23c9e332f9c738fecef8b09a352a7913bc5f3a50bd3fca74aff1ec0840ea1fcda2dd793