idp.jh.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f9:2e:18:06:52:89:be:97:26:e2:b1:ad:35:5f:2d:97 was issued on by Internet2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: Maryland
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:2e:18:06:52:89:be:97:26:e2:b1:ad:35:5f:2d:97
Serial Number (int): 331217103884680410830166158607004937623
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 99:7d:d4:27:db:65:be:ae:6c:2d:13:8d:07:d5:2a:c5:f9:a6:eb:04
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 46:d9:71:a7:f4:97:cf:7e:60:27:82:f2:c8:3e:38:d2:58:59:d5:de
Fingerprint (sha256): 2f:f9:78:3e:65:03:54:39:5d:80:5b:d7:91:a8:cb:d8:86:cb:b3:7a:f3:bf:ba:3d:17:b1:e3:ae:9e:9a:11:fe

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate idp.jh.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.jh.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp.jh.edu
alumshib.johnshopkins.edu
epicshib.johnshopkins.edu
incommon.johnshopkins.edu

Other certificates including the domain name jh.edu

(limited to 100 certificates)
ndes3.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
vpntest.jh.edu
jhutnt.jh.edu
mycloud.jh.edu
mycloudtestint.jh.edu
jhsessmgr.jh.edu
jhmsgtextweb.wintest.adtest.jhu.edu
lists04.jh.edu
devrpad.jhu.edu
schakravartilab.jh.edu
devrpad.jhu.edu
mwpulsetest1.jh.edu
idp.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhdrtisepsn1.win.ad.jhu.edu
vpn.jh.edu
sp13test.jho365.jh.edu
myit.jh.edu
jhbomgarbeta1.win.ad.jhu.edu
polymea.jhu.edu
mycloud.jh.edu
adfsazdev.jh.edu
mobiletest.johnshopkins.edu
myit.jh.edu
mobile.johnshopkins.edu
code.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
mdev.jh.edu
jhutnt.jh.edu
schakravartilab.jh.edu
adfed.jh.edu
mobile.johnshopkins.edu
offwebapps.johnshopkins.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
idp.jh.edu
ewsgithub.jh.edu
mobiletestmail.johnshopkins.edu
jhutnt.jh.edu
dnstest.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mobile.johnshopkins.edu
my.jh.edu
mrpmpolyad01.hosts.jhmi.edu
azdevshib.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
ewspuppet19.jh.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
mwpulselic1.jh.edu
mwpulselic1.jh.edu
vpndev.jh.edu
jh.edu
devrpad.jhu.edu
radar-base.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
jhutnt.jh.edu
ndes3.jh.edu
mobile.johnshopkins.edu
bme.phd.council.students.jh.edu
sickbay-test.jh.edu
ebaccess.jhu.edu
ndes3.jh.edu
m.jh.edu
jhutnt.jh.edu
mobile.johnshopkins.edu
testidp.jh.edu
gstage.tic.jh.edu
jhutnt.jh.edu
policies.jhu.edu
t.jh.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
mwpulsetest1.jh.edu
pistg.jh.edu
mrpmpolyrm02.hosts.jhmi.edu
testidp.jh.edu
jhutnt.jh.edu
fodtest.jh.edu
idp.jh.edu
jh.edu
mysupportbeta.jh.edu
azuredev.jh.edu
jhutnt.jh.edu
mysoftware.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mysupportbeta.jh.edu
api.jh.edu
mycloudtestint.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
mrdmpolydma01.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhbomgarprod1.hosts.jhmi.edu
trac.jh.edu

Certificate

The complete raw certificate details for idp.jh.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331217103884680410830166158607004937623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idp.jh.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839843705019638008694664481326946783740880846379042351412084499776399137241136782764868921415358388299366654345664671400010560575509826721217243079137389713751956871789229032908279824521897131298822368199527091667397999656365669693086447459861871601896155620654669416174029572062369003516106847257700660187334237991167790545093967053072044897480288069740538180882942110666736313359684700891125697024285499895257292471045336219478404930531849051665548858316583514221682184631907050484530401368637196337017921960892322604200286006468853030076872859853728217418345485282955548542320840873888309026240912516224459469284774740899831743720212998746199225721164925243091587265521242334508370566276886017657994464995738613964374334848140024305797869368919606534503987589659131516590662226189650478264323733456798184769777537475226719005948558273050164127769703050837111123090969142255150614956746312222665465881070237112413127902904759196135300143158964985614401239312370290506178569338204321510413606279033049218346356854755929834601154729211178866102536215240302256094160863120792842849969940751818264403778354924688023734293750651598456878303934668365184155850048616084664126101193683344058095990343231159679490138927633722634953031242013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							997dd427db65beae6c2d138d07d52ac5f9a6eb04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumshib.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicshib.johnshopkins.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incommon.johnshopkins.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00524b798892b82cccf5f34ddb6bb80abb172a3513e529f12fc8614f276dc5425b3f4f6d1847e5753ae9a95a8da7d8cb77f688bbd717def10605979f414f9adb2dbe31a52d586f513e3f9d6a859928e6377f39bf141b989f1a3f97e1538a142e399ad68acfe9c68d3fc97a33dd8606c1628ac9135ecc1cb9ecbb9de3842a002952b23d5218ab793049296a833d96a9785eb6fa8a843778f4384e94652977b52877738c5693fb82ba94d41e6f9f14825f5810ed82679f33cd3a4169d1cacedc4b347a9ea94a62b82ac52e350064a605964a95020307f10191fe6d19374cdfb5ff65af03e263fe4c9b572e7aa85dc684ed9ce45b8ee615a6d6d06969a370eb1f47e9