external-domains.ilstu.edu

- Illinois State University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 58:7f:40:e5:fb:45:a4:63:d8:07:8c:ea:07:14:8a:d2 was issued on by Internet2.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Illinois State University

Organization: Illinois State University
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 58:7f:40:e5:fb:45:a4:63:d8:07:8c:ea:07:14:8a:d2
Serial Number (int): 117632801625335299054407277039962065618
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4f:d3:3e:34:61:36:be:d6:ea:a9:e8:2e:f0:0f:7d:74:47:91:44:42
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 9d:07:2c:11:6d:f8:9d:f0:bb:38:3c:d5:52:b0:48:27:e1:f8:3c:bf
Fingerprint (sha256): 30:a8:e0:87:36:2b:68:4d:57:a0:a2:93:b8:2e:81:85:8c:4d:61:9a:f9:05:ad:e3:17:ca:d0:a5:af:4a:ba:43

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate external-domains.ilstu.edu

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for external-domains.ilstu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

external-domains.ilstu.edu
*.illinoisshakes.com
*.innovationconsulting.community
*.itransfer.org
*.lettersinbiomath.org
*.sporajournal.org
*.stevensoncenter.org
*.studioteach.org
*.webdev.illinoisstate.edu
*.webdev.ilstu.edu
events.ilstu.edu
illinois.ag
illinoispep.org
illinoisshakes.com
illinoisstate.ag
innovationconsulting.community
itransfer.org
jobs.illinoisstate.edu
jobs.ilstu.edu
katieschool.org
lettersinbiomath.org
mind.illinoisstate.edu
mind.ilstu.edu
sporajournal.org
stevensoncenter.org
studioteach.org
www.events.ilstu.edu
www.jobs.illinoisstate.edu
www.jobs.ilstu.edu
www.katieschool.org
www.mind.illinoisstate.edu
www.mind.ilstu.edu

Other certificates including the domain name ilstu.edu

(limited to 100 certificates)
owa.ilstu.edu
frodo.che.ilstu.edu
webdemo.ilstu.edu
login.it.ilstu.edu
scalefundercert.net
owa.illinoisstate.edu
parkingeb.illinoisstate.edu
webvpn.ilstu.edu
atvelocity01.ad.ilstu.edu
cacti.tel.ilstu.edu
ilstucmgtest.ilstu.edu
www5.cob.ilstu.edu
homer.lib.ilstu.edu
sharepoint-test.illinoisstate.edu
help.illinoisstate.edu
vidette.veridiansoftware.com
www.hr.ilstu.edu
ilstu.edu
homer.lib.ilstu.edu
stories.illinoisstate.edu
www.onapp.ilstu.edu
www.mktvideo.ilstu.edu
ltmonitor.itk.ilstu.edu
wdia-accounts.ilstu.edu
provisionserver.ilstu.edu
www.offcampushousing.ilstu.edu
owa.illinoisstate.edu
www.icampus.ilstu.edu
aiscampus-dev.ais.ilstu.edu
nsdev.ilstu.edu
ha.peopleadmin.com
www.uclub.ilstu.edu
lilt.ilstu.edu
www.seven.ilstu.edu
awsutm-test.ilstu.edu
atexpc.ilstu.edu
scalefundercert.net
support.cast.ilstu.edu
www.jobs.ilstu.edu
ulid.ilstu.edu
*.iwss.ilstu.edu
stash.it.ilstu.edu
owa-test.illinoisstate.edu
account-test.illinoisstate.edu
gartner.ilstu.edu
www.hr.ilstu.edu
gitlab.it.ilstu.edu
www.ts.ilstu.edu
gitlab.it.ilstu.edu
scalefundercert.net
www5.cob.ilstu.edu
uhigh.illinoisstate.edu
labstats.ilstu.edu
atlansweep01-t.adtest.ilstu.edu
scalefundercert.net
homer.lib.ilstu.edu
ilstu.edu
www.mlb.ilstu.edu
external-domains.ilstu.edu
www.jobs.ilstu.edu
redbirdmail.ilstu.edu
docs.ilstu.edu
*.ilstu.edu
scalefundercert.net
external-domains.ilstu.edu
students.cob.ilstu.edu
atinsightcon01-t.at.illinoisstate.edu
mallard.phy.ilstu.edu
aiscampus-dev.ais.ilstu.edu
parkingeb.illinoisstate.edu
wgltradio.ilstu.edu
www.saoweb.ilstu.edu
support.cast.ilstu.edu
gitlab.it.ilstu.edu
listserv.ilstu.edu
pgnetdev.sys.ilstu.edu
gartner.ilstu.edu
ha.peopleadmin.com
www.cas.ilstu.edu
watchmen.tel.ilstu.edu
listserv.ilstu.edu
nsdev.ilstu.edu
jh152command.ilstu.edu
splunkweb.ilstu.edu
stash.it.ilstu.edu
vidette.veridiansoftware.com
www.advance.ilstu.edu
office.lilt.ilstu.edu
gitlab.it.ilstu.edu
webtma.ilstu.edu
offcampushousing.illinoisstate.edu
account-test.illinoisstate.edu
libre.ilstu.edu
gitlab.it.ilstu.edu
updvpn.ilstu.edu
login.it.ilstu.edu
account.illinoisstate.edu
webtma-test.ilstu.edu
webtrac.ilstu.edu
external-domains.ilstu.edu

Certificate

The complete raw certificate details for external-domains.ilstu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kHXYQz0l8DnHuUlPY6R
DWI57LAiAsHs2F7AQNKIGP3mKFY10jvwfPR3c6cIwASrbnf7sEV7nL0iOrOMq7tb
dXPFaZKzLtlIlK9AWHIPl0UyiqH8k5195hySZpyi9gWtxIV3J3tS298BqhBEXrBV
T56Mg6XDiW/UET/ugsDbk2XYbilUoQ7sEIWvQRFqgoNhUQbDlwQ2k7gxLl9olBxk
NxefyO+wDTeoPDb05trCQFAvy96I8oEIrrnWpHTFKCOyPiS5HfOcsy3EzT7LnLkc
yYGE2Lv3iqQHOXnr85laPGDePYSVHobxmcREvKSKCfLE1mdt7kK1Z6zkQPE6YRaf
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117632801625335299054407277039962065618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'external-domains.ilstu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26542511610127574874456808979662543454397690788914618800903710709089631762601304896253695157940617824746139444265389382098653866658177119727280636446034388631171972665266943204115150810069750073028097375288485467042824116129527072356953399299069392848956096849736284707836614056621480162079909505061643567771466148744578068434103277566040379774485206989971844641413501095061626276430853414639985156966605393140979085731161602845555778055664827752339671363314715018921162486959888204733949296479311891272243871497267633197776989116026432170026148553619839695901843018621435458493323794747874359019303692699464352833467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fd33e346136bed6eaa9e82ef00f7d7447914442
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-domains.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illinoisshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovationconsulting.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itransfer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lettersinbiomath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporajournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevensoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studioteach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webdev.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webdev.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinois.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoispep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisstate.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationconsulting.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itransfer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katieschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettersinbiomath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mind.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mind.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporajournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioteach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.events.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.ilstu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katieschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mind.illinoisstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mind.ilstu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		000fd8f134f8c74e0d4ba085a5c9fe661eb615b405b0cd568ccea35725b3a9c6b422dfb932dc8bfc7d32f09804a89beea434e1e58f82ca7f139f576bc1af64542e2d09dd362df89701c93ddce049dbbcf0619c5efc5d45ce33014d4444f487f6541ba6b1e5fe3cdeb47c4013507efcbed4eb93d03df97eef4dd27245c802e57fb762028fa603524edf4f5391639e83dc43eee8713f8fd62c66a146ed754d25fd85018f13630c5d04f672d0d709883836dd71a7139b32dc1fa4c514dc5e54e5dd77959d1a9d6040c5f2d9b9aad016f76e5548ef25f27084f98f552a6bd48f3dbffb4b47533b24a27f1d2271785cc13dc62cf43c492726f4ba18f2ea323b6543632acc46a1f2069637f670ec2b3f35a9a2557057aae253e1499432d60d8585a97b64b0f3ba8bddb3b99e5c3394d4525c2f0ee865efa5ea5c8bf652b1e997b726166eb776d0a05c54a8e6e5f4b8e16bd3e04c1526c9e25f29d70338b5b0d6a91c88060916bfad10161854697f06aebc20f8770cc937616091f0db44ca88fedf2e7884