columbiapsychiatry.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 43:45:93:f3:1a:08:7b:b5:c8:0e:3f:8b:7d:13:5a:2c was issued on by Internet2.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: New York
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:45:93:f3:1a:08:7b:b5:c8:0e:3f:8b:7d:13:5a:2c
Serial Number (int): 89419544975540360218975521216241293868
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:61:60:6c:a2:f3:aa:70:af:89:4e:39:c5:fc:7b:54:12:f9:9b:ce
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 50:e7:4e:07:be:f1:36:c1:31:27:56:6a:38:8e:37:78:c4:d2:d5:67
Fingerprint (sha256): 31:f7:a2:65:9b:47:4d:dd:d5:1e:1c:05:03:e6:6b:48:a1:27:6e:5d:d4:f6:7a:ec:cf:88:81:27:9b:df:00:20

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate columbiapsychiatry.org

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiapsychiatry.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiapsychiatry.org
*.childrensorthopaedics.com
*.columbia-lyme.org
*.columbiaals.org
*.columbiacardiology.org
*.columbiaeye.org
*.columbiafertility.org
*.columbiaheartsource.org
*.columbiaheartvalve.org
*.columbiaobgyn.org
*.columbiaortho.org
*.columbiaot.org
*.columbiaphysicaltherapy.org
*.columbiapsychiatry.org
*.columbiaradiology.org
*.columbiastemcell.org
*.cussp.org
*.depression-nyc.org
*.legacygirlsstudy.org
*.nbdiabetes.org
*.prenatalpediatrics.org
*.raraf.org
*.rheumatologyatcolumbia.org
*.scid4.org
*.scid5.org
childrensorthopaedics.com
columbia-lyme.org
columbiaals.org
columbiacardiology.org
columbiaeye.org
columbiafertility.org
columbiaheartsource.org
columbiaheartvalve.org
columbiaobgyn.org
columbiaortho.org
columbiaot.org
columbiaphysicaltherapy.org
columbiaradiology.org
columbiastemcell.org
cussp.org
depression-nyc.org
legacygirlsstudy.org
nbdiabetes.org
prenatalpediatrics.org
raraf.org
rheumatologyatcolumbia.org
scid4.org
scid5.org

Other certificates including the domain name columbiapsychiatry.org

(limited to 100 certificates)
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
columbiacardiology.org
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiadoctors.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiacardiology.org
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiacardiology.org
prod.cumc.columbia.edu
columbiapsychiatry.org
columbiadoctors.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
www.cumc.columbia.edu
columbiadoctors.org
cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu

Certificate

The complete raw certificate details for columbiapsychiatry.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80gGPNXHO6GaCW0upwap
iw6DAMQ1cLZCnUVz9tvbNrGR2c6TLnN0I/Vr5T5B3BfHJN+PFFx3X1fMOG+pZXqK
4SGYz7mAUJfwpysp8UXR4jFwp0DYpE22dYv8XwPmzUfUD6b2YmQBPGhABRamIa3R
QjQNQeDj9FeLJAKilSwKgaXEKhpoQjUE7GDRxYWjFUAZ2dR+7LBukfWRVma0mabK
KF9E9U4n5KK9KG1bWjLdoIoBZnCW8sE+3JFzlUc/6CwJttw23XY722X/BGGhWQ2G
U+M8UpIYuj0OZo+vYaGxaba2MP/xhdVR+cWZHuPlnO9pEn/odL+UnaW8Jj/jUNPG
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89419544975540360218975521216241293868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiapsychiatry.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30711424645232712779471562705400590421112335530665730256458179653132735129751007397863175689712815510308218891763477853802391571759493994711879522351677377780764242029098855242106382483610776519011856573459248769818658570683987061449467534151026625398210582193687392693622184214072150095469149795246799431741261443815720442235073304951535255971530904174388813677991085957072703571096734283887801259889762085703998916137867752145803323449367994912939217623574627473668533326423843640094318154408239178413480398176741315634451524523424408277219172599887014985088463234906442056281047615944625159708992291054968169023131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6461606ca2f3aa70af894e39c5fc7b5412f99bce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid5.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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