testidp.jh.edu

- Johns Hopkins University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 70:5a:56:7d:34:97:66:8d:13:be:d5:cb:04:f5:1f:a7 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johns Hopkins University

Organization: Johns Hopkins University
Organization unit: JH
Address: 5801 Smith Avenue
Postal code: 21209
State / Province: MD
Locality: Baltimore
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:5a:56:7d:34:97:66:8d:13:be:d5:cb:04:f5:1f:a7
Serial Number (int): 149342596452201193171759523353794518951
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e5:c8:11:02:0f:ee:78:ee:36:60:b9:9b:fa:5e:28:dd:f9:f3:fc:b8
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 7d:0e:d1:72:21:e7:1f:5c:f9:15:7a:8a:2f:e4:c0:23:15:cb:3d:81
Fingerprint (sha256): 3b:bc:50:e9:c5:a4:d4:62:e2:d0:9f:01:0e:89:3f:82:4e:a4:c1:f4:30:46:73:19:59:00:38:13:11:f5:50:8f

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate testidp.jh.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testidp.jh.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testidp.jh.edu
testshib.johnshopkins.edu

Other certificates including the domain name jh.edu

(limited to 100 certificates)
ndes3.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
vpntest.jh.edu
jhutnt.jh.edu
mycloud.jh.edu
mycloudtestint.jh.edu
jhsessmgr.jh.edu
jhmsgtextweb.wintest.adtest.jhu.edu
lists04.jh.edu
devrpad.jhu.edu
schakravartilab.jh.edu
devrpad.jhu.edu
mwpulsetest1.jh.edu
idp.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhdrtisepsn1.win.ad.jhu.edu
vpn.jh.edu
sp13test.jho365.jh.edu
myit.jh.edu
jhbomgarbeta1.win.ad.jhu.edu
polymea.jhu.edu
adfsazdev.jh.edu
mobiletest.johnshopkins.edu
myit.jh.edu
mobile.johnshopkins.edu
code.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
mdev.jh.edu
jhutnt.jh.edu
schakravartilab.jh.edu
adfed.jh.edu
mobile.johnshopkins.edu
offwebapps.johnshopkins.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
idp.jh.edu
ewsgithub.jh.edu
mobiletestmail.johnshopkins.edu
jhutnt.jh.edu
dnstest.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mobile.johnshopkins.edu
my.jh.edu
mrpmpolyad01.hosts.jhmi.edu
azdevshib.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
ewspuppet19.jh.edu
idp.jh.edu
devvirtualvisit.jhmi.edu
mwpulselic1.jh.edu
mwpulselic1.jh.edu
vpndev.jh.edu
jh.edu
devrpad.jhu.edu
radar-base.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhutnt.jh.edu
jhutnt.jh.edu
ndes3.jh.edu
mobile.johnshopkins.edu
bme.phd.council.students.jh.edu
sickbay-test.jh.edu
ebaccess.jhu.edu
ndes3.jh.edu
m.jh.edu
jhutnt.jh.edu
mobile.johnshopkins.edu
testidp.jh.edu
gstage.tic.jh.edu
jhutnt.jh.edu
policies.jhu.edu
t.jh.edu
mobiletestmail.johnshopkins.edu
jhbomgarprod1.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
mwpulsetest1.jh.edu
pistg.jh.edu
mrpmpolyrm02.hosts.jhmi.edu
testidp.jh.edu
jhutnt.jh.edu
fodtest.jh.edu
idp.jh.edu
jh.edu
mysupportbeta.jh.edu
azuredev.jh.edu
jhutnt.jh.edu
mysoftware.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
mysupportbeta.jh.edu
api.jh.edu
mycloudtestint.jh.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
mrdmpolydma01.hosts.jhmi.edu
san-30-s12.tlsprovisioning.exacttarget.com
jhbomgarprod1.hosts.jhmi.edu
trac.jh.edu
jh.edu

Certificate

The complete raw certificate details for testidp.jh.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIBDCCBuygAwIBAgIQcFpWfTSXZo0TvtXLBPUfpzANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA3MTIwMDAwMDBaFw0yMDA3MTEy
MzU5NTlaMIGjMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMjEyMDkxCzAJBgNVBAgT
Ak1EMRIwEAYDVQQHEwlCYWx0aW1vcmUxGjAYBgNVBAkTETU4MDEgU21pdGggQXZl
bnVlMSEwHwYDVQQKExhKb2hucyBIb3BraW5zIFVuaXZlcnNpdHkxCzAJBgNVBAsT
AkpIMRcwFQYDVQQDEw50ZXN0aWRwLmpoLmVkdTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAPKS0Sp5d095UVPq+MY37Jayw4LU3ZyVUcwiGT6sXODlt7FF
p9Hq2A/ipvG4ZShPk6wKrPvFgK2Z2p3INqyv5H6diy+bbXAJIy+xIxQilLUPKF4k
9NMFYeCDc3SqPu4TVoNHymy1BiAdDBBQAWqffxbsludg6PzW6tUVBk4bjgCI+25k
PVMEHD09Mr7NuvN0tolnlLACSpHktEfBgj8qbrEKurKwpni4JTIo8r4guDS5qJQn
Ogmd5Pgyb7UB4BkdU6p9Gu9LVA6mDF0/AYZ2eHIdOMU0ZR2HR/1ArW4jCMdjkyEz
oP+7adhhhcFWClgoZp1exfJbfObWReN/A5Q/AmLileuJH2GamMCQ7Oos1nm64iB4
jvAbUXCuYeJlwA5dhmK5vFkv7QzQnO1xBry/edHF3yvLMGXhBjU9t+8kKEhmp5cP
pU6EJnAsI7ZYfrhFI47sBNPSEbyi1Hls+ioXIAEuDL7fh8FZE2d3lB1/KEBXqHDR
0NUmwMSSuUjG2jsIBCwP/8mdJ+reSMo/o+zngscZhNg9+UatTk+Am7SidRNR5SAN
8xmvdWwKDBMHjcDeq7AGgTh8Nz1aIh3XLbr5r6Bt1o9fPOyhs1TfoCUBZWoT85WP
n4m9LPUEW2RO6yWilp4NUai/b/FnZHq36tDzIfVtQ1y+XqWd+CL6kVu4cpwxAgMB
AAGjggNeMIIDWjAfBgNVHSMEGDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNV
HQ4EFgQU5cgRAg/ueO42YLmb+l4o3fnz/LgwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud
EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARg
MF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3Lmlu
Y29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQIC
MEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9J
bkNvbW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUH
MAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNB
XzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMDQG
A1UdEQQtMCuCDnRlc3RpZHAuamguZWR1ghl0ZXN0c2hpYi5qb2huc2hvcGtpbnMu
ZWR1MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDuS723dc5guuFCaR+r4Z5m
ow9+X7By2IMAxHuJeqj9ywAAAWSOy6HsAAAEAwBHMEUCIQDfD5qYOzLCf2IobFf1
eli9TowZXlntsQo0jm1DMwCsOwIgD0zpOu7L+ZS6GiX7jbyU+P3v6tifH3viNI+D
RZq/K3cAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWSOy6Iv
AAAEAwBHMEUCIBryCVjFFYlWAG74OIyasHQqz5vmIXROrqLkCqgvOTBTAiEA0uR0
PaLhCmWvusPLw6G2hiRgvcEIbJ/zRlKmRuvd5EAAdQBVgdTCFpA2AUrqC5tXPFPw
wOQ4eHAlCBcvo6odBxPTDAAAAWSOy6ISAAAEAwBGMEQCIDKc0e4JGGElQxdXU7Ng
9empWei1ZDnD1BC/KRZlOOMXAiAyDMDg/ZOEeHN8mfChd3B8AVCk6oYef7QSPMj3
hEdd6zANBgkqhkiG9w0BAQsFAAOCAQEAIIrvqc8iUcRQlJhJsbWqeqe9AE3FN5HR
B7Jt98I25oY8E3p0FhJGOHqo5Pf0mOq5o7IB2UdJ0kcTrSlSa25VcBYgp3r/V2Gp
4uoDdmGhSGI3+YLH2Yl78/w/VL3mNwmM7/524nLbJocR1WeIJeRMht4dv0If+XLO
DUe+c8d+YHv39o71gFGPuh/H600SGRELPPhr2A6/1MGJfMbmOr9xAUOkG0FguLpi
mMnars1SLT8gdPeXynpGo2AgAlylZ+DmKjGzHJlpU8NzqGiC+ADsMhu/FfEp6+13
CDfiJ+8IMI1HFt73M292FX2cSE3xpGY2PZWM/xVfMI8vLNKhqeS1LA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8pLRKnl3T3lRU+r4xjfs
lrLDgtTdnJVRzCIZPqxc4OW3sUWn0erYD+Km8bhlKE+TrAqs+8WArZnancg2rK/k
fp2LL5ttcAkjL7EjFCKUtQ8oXiT00wVh4INzdKo+7hNWg0fKbLUGIB0MEFABap9/
FuyW52Do/Nbq1RUGThuOAIj7bmQ9UwQcPT0yvs2683S2iWeUsAJKkeS0R8GCPypu
sQq6srCmeLglMijyviC4NLmolCc6CZ3k+DJvtQHgGR1Tqn0a70tUDqYMXT8BhnZ4
ch04xTRlHYdH/UCtbiMIx2OTITOg/7tp2GGFwVYKWChmnV7F8lt85tZF438DlD8C
YuKV64kfYZqYwJDs6izWebriIHiO8BtRcK5h4mXADl2GYrm8WS/tDNCc7XEGvL95
0cXfK8swZeEGNT237yQoSGanlw+lToQmcCwjtlh+uEUjjuwE09IRvKLUeWz6Khcg
AS4Mvt+HwVkTZ3eUHX8oQFeocNHQ1SbAxJK5SMbaOwgELA//yZ0n6t5Iyj+j7OeC
xxmE2D35Rq1OT4CbtKJ1E1HlIA3zGa91bAoMEweNwN6rsAaBOHw3PVoiHdctuvmv
oG3Wj1887KGzVN+gJQFlahPzlY+fib0s9QRbZE7rJaKWng1RqL9v8Wdkerfq0PMh
9W1DXL5epZ34IvqRW7hynDECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149342596452201193171759523353794518951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '21209'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 Smith Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johns Hopkins University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testidp.jh.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989613557136262199571026277133265742155633465370037800848677331321284917649226332531924073004733731475694397491385255358433889378685086063347991949952353756345913958087052633725080238202559405251095649787403363865463646202671589558612268154520009425138000263281670346420749909846289102963643587614856108302246300682013404806108849343750615137478864117685639114461440505928286120800476807310927580929938442069399685204408304548535446777535140835244004948217453039685527785783225434425800466654703325063013440084415824130853518301584007370955326778911082228673830766112568437852398459937594179432180945968532436129998872439949752773974444944604532720154071324076834366643732921495705888325893984029174697802956493277163927775229018082281776406362195004106911052458020708217117334160431184873339322289279903205572604982604260748331956466838454772342829583173595207668762605361903140392783756838229322634498596427128259832582117856177333400387741225591953819041404766458236595777573475060982342098902485260138431719686796971245561189324225250857877966974637257515283469070510496767850488424227315266574439066977810510493643924774083829752324384199957400189330364390852838951351365456601806884149675437618732522441745192075002614002129969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5c811020fee78ee3660b99bfa5e28ddf9f3fcb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testidp.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testshib.johnshopkins.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001648ecba1ec0000040300473045022100df0f9a983b32c27f62286c57f57a58bd4e8c195e59edb10a348e6d433300ac3b02200f4ce93aeecbf994ba1a25fb8dbc94f8fdefead89f1f7be2348f83459abf2b770076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001648ecba22f000004030047304502201af20958c5158956006ef8388c9ab0742acf9be621744eaea2e40aa82f393053022100d2e4743da2e10a65afbac3cbc3a1b6862460bdc1086c9ff34652a646ebdde4400075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001648ecba21200000403004630440220329cd1ee0918612543175753b360f5e9a959e8b56439c3d410bf29166538e3170220320cc0e0fd938478737c99f0a177707c0150a4ea861e7fb4123cc8f784475deb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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