columbiaobgyn.org

- Columbia University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 1d:9a:04:a0:97:e1:d3:64:08:80:a9:86:4d:b0:7e:99 was issued on by Internet2.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Columbia University

Organization: Columbia University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:9a:04:a0:97:e1:d3:64:08:80:a9:86:4d:b0:7e:99
Serial Number (int): 39347319447126583715031177690329677465
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 02:cb:cb:3b:16:09:dc:7e:cc:af:d0:dd:37:e3:3d:bb:62:6a:6b:30
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 6f:b2:ed:d1:21:03:7e:b6:e8:e8:f7:96:b2:57:97:71:af:59:e5:b0
Fingerprint (sha256): 36:14:a7:ee:80:46:ec:4f:fd:18:85:44:ce:b6:e6:16:49:0c:ab:3c:b7:45:ab:9c:b0:43:62:ab:5a:2c:a4:5c

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate columbiaobgyn.org

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiaobgyn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiaobgyn.org
*.adarc.org
*.auduboncenter.org
*.cap-ipa.org
*.celiacdiseasecenter.org
*.childrensorthopaedics.com
*.chriaclinic.org
*.columbia-lyme.org
*.columbiaals.org
*.columbiacpcenter.org
*.columbiadeptmedicine.org
*.columbiaethics.org
*.columbiaeye.org
*.columbiafertility.org
*.columbiagi.org
*.columbiamedhousestaff.com
*.columbiaobgyn.org
*.columbiaprofiles.org
*.columbiaradiology.org
*.columbiastemcell.org
*.entcolumbia.org
*.epilepsygenetics.org
*.givetocolumbiahiv.org
*.hiphoppublichealth.org
*.imapny.org
*.movement-disorders.org
*.narrativemedicine.com
*.narrativemedicine.org
*.prenatalpediatrics.org
*.raraf.org
*.rheumatologyatcolumbia.org
*.shapirolab.org
*.transplantforum.org
*.weinbergcpcenter.org
adarc.org
auduboncenter.org
cap-ipa.org
celiacdiseasecenter.org
childrensorthopaedics.com
chriaclinic.org
columbia-lyme.org
columbiaals.org
columbiacpcenter.org
columbiadeptmedicine.org
columbiaethics.org
columbiaeye.org
columbiafertility.org
columbiagi.org
columbiamedhousestaff.com
columbiaprofiles.org
columbiaradiology.org
columbiastemcell.org
entcolumbia.org
epilepsygenetics.org
givetocolumbiahiv.org
hiphoppublichealth.org
imapny.org
movement-disorders.org
narrativemedicine.com
narrativemedicine.org
prenatalpediatrics.org
raraf.org
rheumatologyatcolumbia.org
shapirolab.org
transplantforum.org
trujillofacialplastics.com
weinbergcpcenter.org
www.trujillofacialplastics.com

Other certificates including the domain name columbiaobgyn.org

(limited to 100 certificates)
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
columbiaobgyn.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
columbiaobgyn.org
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
columbiaobgyn.org
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
www.cumc.columbia.edu
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
dev.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
columbiadoctors.org
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
columbiapsychiatry.org
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
columbiadoctors.org
www.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
dev.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
5719677699358720-fe3.pantheonsite.io
www.cumc.columbia.edu
www.cumc.columbia.edu
5719677699358720-fe3.pantheonsite.io
columbiadoctors.org
cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu

Certificate

The complete raw certificate details for columbiaobgyn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMgzCCCuugAwIBAgIQHZoEoJfh02QIgKmGTbB+mTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMSEwHwYDVQQDExhJbkNv
bW1vbiBSU0EgU2VydmVyIENBIDIwHhcNMjMxMTAyMDAwMDAwWhcNMjQxMjAyMjM1
OTU5WjBaMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxHDAaBgNVBAoT
E0NvbHVtYmlhIFVuaXZlcnNpdHkxGjAYBgNVBAMTEWNvbHVtYmlhb2JneW4ub3Jn
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFd0pcHJ2PRKez57ZR68
mxrKMPWCA6VAnErohCuCLlqVyGNwgUwfkJ6oTA1P63xCaMiVJx+yFNSOtzuGTklN
cCkB2bwIJzU6wkyyNTXqKIhnsLBSXbfIGtroL6tzaiwoi3RHcj3x7Xe2WcKxn5OD
nN1yBOXX/G1oqYzYhUYRMiPDaXubwL/ORJI8DCyLIBofhG5iqKiW50p0FWh7i7Rq
16q89x32zzovYGR2tegXkmO4vQ8eZGTS6ZNzYD1DrE6LFaum+rKYnDguvAEAS/af
0CFexnjnL5AW+ehYalSYBe/s/JFECkcWmBIdWtgFAtWJCxx1pihJ8+O36yJ1cg+x
swIDAQABo4II2TCCCNUwHwYDVR0jBBgwFoAU70wAkqb7di5eleLJX4cbGdVN4tkw
HQYDVR0OBBYEFALLyzsWCdx+zK/Q3TfjPbtiamswMA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV
HSAEQjBAMDQGCysGAQQBsjEBAgJnMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj
dGlnby5jb20vQ1BTMAgGBmeBDAECAjBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8v
Y3JsLnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2VydmVyQ0EyLmNybDBwBggrBgEF
BQcBAQRkMGIwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vSW5D
b21tb25SU0FTZXJ2ZXJDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5z
ZWN0aWdvLmNvbTCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAdv+IPwq2+5VR
wmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLkUxYVgAABAMASDBGAiEAmWS8mBjR
wfyZI8t1Tx9k8eAAavSoMMKfbbdXHJVhJjQCIQCsKXHkRapLXoYpqlHaZ6QdBYCd
eoDFjTRjtdhV2FQWjQB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRu
AAABi5FMWV8AAAQDAEcwRQIgG2i2Or4b/zWSQXglV1PyXVou8qsVnkZmdoNrE7tv
olgCIQDnSZiFIgLiE9/ZlJCilV8R6IeUIHb+RaT/8RrOB+EFUgB3AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi5FMWIkAAAQDAEgwRgIhAMB+C13A
dnZ0VIKRsT+Gys8xsEK2iZL39YZ0om7+PZzWAiEAkHY1aaFjKhi8QSjnfeUCqTsa
Kau0oK/kdkwhoW+fE5QwggXRBgNVHREEggXIMIIFxIIRY29sdW1iaWFvYmd5bi5v
cmeCCyouYWRhcmMub3JnghMqLmF1ZHVib25jZW50ZXIub3Jngg0qLmNhcC1pcGEu
b3JnghkqLmNlbGlhY2Rpc2Vhc2VjZW50ZXIub3JnghsqLmNoaWxkcmVuc29ydGhv
cGFlZGljcy5jb22CESouY2hyaWFjbGluaWMub3JnghMqLmNvbHVtYmlhLWx5bWUu
b3JnghEqLmNvbHVtYmlhYWxzLm9yZ4IWKi5jb2x1bWJpYWNwY2VudGVyLm9yZ4Ia
Ki5jb2x1bWJpYWRlcHRtZWRpY2luZS5vcmeCFCouY29sdW1iaWFldGhpY3Mub3Jn
ghEqLmNvbHVtYmlhZXllLm9yZ4IXKi5jb2x1bWJpYWZlcnRpbGl0eS5vcmeCECou
Y29sdW1iaWFnaS5vcmeCGyouY29sdW1iaWFtZWRob3VzZXN0YWZmLmNvbYITKi5j
b2x1bWJpYW9iZ3luLm9yZ4IWKi5jb2x1bWJpYXByb2ZpbGVzLm9yZ4IXKi5jb2x1
bWJpYXJhZGlvbG9neS5vcmeCFiouY29sdW1iaWFzdGVtY2VsbC5vcmeCESouZW50
Y29sdW1iaWEub3JnghYqLmVwaWxlcHN5Z2VuZXRpY3Mub3JnghcqLmdpdmV0b2Nv
bHVtYmlhaGl2Lm9yZ4IYKi5oaXBob3BwdWJsaWNoZWFsdGgub3JnggwqLmltYXBu
eS5vcmeCGCoubW92ZW1lbnQtZGlzb3JkZXJzLm9yZ4IXKi5uYXJyYXRpdmVtZWRp
Y2luZS5jb22CFyoubmFycmF0aXZlbWVkaWNpbmUub3JnghgqLnByZW5hdGFscGVk
aWF0cmljcy5vcmeCCyoucmFyYWYub3JnghwqLnJoZXVtYXRvbG9neWF0Y29sdW1i
aWEub3JnghAqLnNoYXBpcm9sYWIub3JnghUqLnRyYW5zcGxhbnRmb3J1bS5vcmeC
Fioud2VpbmJlcmdjcGNlbnRlci5vcmeCCWFkYXJjLm9yZ4IRYXVkdWJvbmNlbnRl
ci5vcmeCC2NhcC1pcGEub3JnghdjZWxpYWNkaXNlYXNlY2VudGVyLm9yZ4IZY2hp
bGRyZW5zb3J0aG9wYWVkaWNzLmNvbYIPY2hyaWFjbGluaWMub3JnghFjb2x1bWJp
YS1seW1lLm9yZ4IPY29sdW1iaWFhbHMub3JnghRjb2x1bWJpYWNwY2VudGVyLm9y
Z4IYY29sdW1iaWFkZXB0bWVkaWNpbmUub3JnghJjb2x1bWJpYWV0aGljcy5vcmeC
D2NvbHVtYmlhZXllLm9yZ4IVY29sdW1iaWFmZXJ0aWxpdHkub3Jngg5jb2x1bWJp
YWdpLm9yZ4IZY29sdW1iaWFtZWRob3VzZXN0YWZmLmNvbYIUY29sdW1iaWFwcm9m
aWxlcy5vcmeCFWNvbHVtYmlhcmFkaW9sb2d5Lm9yZ4IUY29sdW1iaWFzdGVtY2Vs
bC5vcmeCD2VudGNvbHVtYmlhLm9yZ4IUZXBpbGVwc3lnZW5ldGljcy5vcmeCFWdp
dmV0b2NvbHVtYmlhaGl2Lm9yZ4IWaGlwaG9wcHVibGljaGVhbHRoLm9yZ4IKaW1h
cG55Lm9yZ4IWbW92ZW1lbnQtZGlzb3JkZXJzLm9yZ4IVbmFycmF0aXZlbWVkaWNp
bmUuY29tghVuYXJyYXRpdmVtZWRpY2luZS5vcmeCFnByZW5hdGFscGVkaWF0cmlj
cy5vcmeCCXJhcmFmLm9yZ4IacmhldW1hdG9sb2d5YXRjb2x1bWJpYS5vcmeCDnNo
YXBpcm9sYWIub3JnghN0cmFuc3BsYW50Zm9ydW0ub3Jnghp0cnVqaWxsb2ZhY2lh
bHBsYXN0aWNzLmNvbYIUd2VpbmJlcmdjcGNlbnRlci5vcmeCHnd3dy50cnVqaWxs
b2ZhY2lhbHBsYXN0aWNzLmNvbTANBgkqhkiG9w0BAQwFAAOCAYEATH/INqTWo1te
SeIE+gauqYuj/EPZmRTRCYRVPQ0lNrvR1F/HCwlOTr6jjF28lfIJhuJSGH9aApyP
22340sxl5PCRqizRpgetLfaU+I0HTUtkgcfG7WyKRBZVTVfHP8D0aUA27kPbtUGK
ELOsO5fbabVIHltJ7EGpIPCqyclFqLQEEQbNQTJHtwS8RkKYgmn+kcvrLqFvCel5
GUWLIOZ6zqV3M1AjqYqdn5BAlnq1XRtCFLG6qTH58FdUKWreycTWSVrLzpLERPDe
4hoca8ixk5cLOhEU6NhdjuPd7eWvu39kc8imNLMCRebuw/CRuwHs8zBbFFwcp8+5
o1w433LoM1x0MkvfnmOk2OfDH5SHo8QQR0Use7G3pe+HdelyHgT7u+Yxop8fNzqw
V9C3if5dsHbh0dIBBhaEaLy5MQUt6AfzxEAj2aAERU/Dcy+2Ii0Kx2dcekFokxVG
zTjL4U0yAbMyrerfAhzFLNtFLWTpZAou2M9MMipGPZ1kPhKr9oyQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFd0pcHJ2PRKez57ZR68
mxrKMPWCA6VAnErohCuCLlqVyGNwgUwfkJ6oTA1P63xCaMiVJx+yFNSOtzuGTklN
cCkB2bwIJzU6wkyyNTXqKIhnsLBSXbfIGtroL6tzaiwoi3RHcj3x7Xe2WcKxn5OD
nN1yBOXX/G1oqYzYhUYRMiPDaXubwL/ORJI8DCyLIBofhG5iqKiW50p0FWh7i7Rq
16q89x32zzovYGR2tegXkmO4vQ8eZGTS6ZNzYD1DrE6LFaum+rKYnDguvAEAS/af
0CFexnjnL5AW+ehYalSYBe/s/JFECkcWmBIdWtgFAtWJCxx1pihJ8+O36yJ1cg+x
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39347319447126583715031177690329677465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiaobgyn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22766020884329340229188732541032851067161702555197845530667407164590081949967519043084880855868020731419710573517332531256247554524435440291582700418592334247394661027353741657716490746436220524692245407684633252977930121176547557879067519687597251724911833120717444143636048743029067422324906988717472205149974661426358380168417717872255811113290489796199312482619327128682383799070937922116000069659690156663537511063747958004403355645630148300409897958139063698654536938629408313499721011126468853169980102973951531815763221793132486479408361261517628629921096035782492941427609556580909700630950530804405502980531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02cbcb3b1609dc7eccafd0dd37e33dbb626a6b30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auduboncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cap-ipa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celiacdiseasecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chriaclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacpcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadeptmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaethics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamedhousestaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaprofiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epilepsygenetics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givetocolumbiahiv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiphoppublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imapny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movement-disorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narrativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narrativemedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shapirolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transplantforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weinbergcpcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auduboncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap-ipa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celiacdiseasecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chriaclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacpcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadeptmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaethics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamedhousestaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaprofiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epilepsygenetics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetocolumbiahiv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiphoppublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imapny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movement-disorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narrativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narrativemedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapirolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transplantforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trujillofacialplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weinbergcpcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trujillofacialplastics.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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