intercondev.uchad.uchospitals.edu

- University of Chicago -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a0:4c:79:2c:4b:7f:ee:33:57:9c:21:5b:4c:50:e8:98 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Chicago

Organization: University of Chicago
Organization unit: The University of Chicago Medical Center
Address: 5801 South Ellis Avenue
Postal code: 60637
State / Province: IL
Locality: Chicago
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a0:4c:79:2c:4b:7f:ee:33:57:9c:21:5b:4c:50:e8:98
Serial Number (int): 213073551567802413230141365347182241944
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 41:6e:e6:9b:7b:36:5a:0a:51:d9:51:d3:23:1d:f0:08:64:fa:96:fa
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 69:53:e0:34:46:a8:7b:9c:da:b3:6a:bd:b0:31:d6:f5:a7:2c:14:e6
Fingerprint (sha256): 40:4e:f2:8c:5d:bd:e2:3b:c9:87:81:6a:f5:67:a0:9b:72:55:96:41:b4:08:cc:e0:64:aa:9d:0f:41:8f:bc:62

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate intercondev.uchad.uchospitals.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intercondev.uchad.uchospitals.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intercondev.uchad.uchospitals.edu

Other certificates including the domain name uchospitals.edu

(limited to 100 certificates)
tls.automattic.com
interconapps-test.uchospitals.edu
incapsula.com
social.learning.uchospitals.edu
ocps.uchospitals.edu
gatekeeper4.uchospitals.edu
uchapps.uchad.uchospitals.edu
mail.uchospitals.edu
identity.uchospitals.edu
vsp.uchospitals.edu
wdprd6a.uchospitals.edu
tls.automattic.com
dw7epint02.uchad.uchospitals.edu
nids-qip.uchospitals.edu
carelinktest.uchospitals.edu
apidb02drn.uchad.uchospitals.edu
tls.automattic.com
dw2cccweb01.uchad.uchospitals.edu
interconapps.uchospitals.edu
tls.automattic.com
soagateway.uchospitals.edu
www-test.uchospitals.edu
expressionengine.uchicago.edu
dw4epcla01.uchad.uchospitals.edu
bmb.uchospitals.edu
tls.automattic.com
incapsula.com
inteconapps-test.uchospitals.edu
mail.uchospitals.edu
securemail.uchospitals.edu
mycharttst.uchospitals.edu
www.uchospitals.edu
dw4bxap01.uchad.uchospitals.edu
uchicagoapps.uchad.uchospitals.edu
bsc.uchad.uchospitals.edu
bsdsentry.uchospitals.edu
mail.uchospitals.edu
interconprod.ha.uchospitals.edu
expressionengine.uchicago.edu
mycharttest.uchospitals.edu
dl2lms01.uchospitals.edu
spwfepr01dar.uchad.uchospitals.edu
tls.automattic.com
sciencelife.uchospitals.edu
radpics.uchad.uchospitals.edu
tls.automattic.com
cw4mpall.uchad.uchospitals.edu
dw2epcla01.uchad.uchospitals.edu
jss.uchospitals.edu
ccdd1w9enf01.uchad.uchospitals.edu
uchicagoapps.uchad.uchospitals.edu
obixappts01ccd.uchad.uchospitals.edu
webapps.uchospitals.edu
honestbroker.uchospitals.edu
molbio.uchospitals.edu
intercondev.uchad.uchospitals.edu
cw2iscvcsql01.uchad.uchospitals.edu
bsdsentry.uchospitals.edu
wordpress.uchospitals.edu
webapps.uchospitals.edu
mail.uchospitals.edu
incapsula.com
bsdsentry.uchospitals.edu
incapsula.com
tls.automattic.com
sciencelife.uchospitals.edu
kuiper.uchad.uchospitals.edu
incapsula.com
webapps.uchospitals.edu
www.uchospitals.edu
identitydev.uchospitals.edu
nursing.uchospitals.edu
www.uchicagomedicine.org
incapsula.com
tls.automattic.com
icdmzpr01dar.uchad.uchospitals.edu
ca2trap01.uchospitals.edu
bcstest.uchad.uchospitals.edu
www.uchospitals.edu
incapsula.com
www.uchospitals.edu
incapsula.com
wordpress.uchospitals.edu
tls.automattic.com
incapsula.com
mail.uchospitals.edu
incapsula.com
ccdd1w9enf01.uchad.uchospitals.edu
dw4epcla01.uchad.uchospitals.edu
dw4bxap01.uchad.uchospitals.edu
d169l1trbo01.uchospitals.edu
incapsula.com
expressionengine.uchicago.edu
interconapps-test.uchospitals.edu
ca2trap01.uchospitals.edu
incapsula.com
mail.uchospitals.edu
ingallsestubtest.uchospitals.edu
obixfmdmts01ccd.uchad.uchospitals.edu
dw2cccweb01.uchad.uchospitals.edu

Certificate

The complete raw certificate details for intercondev.uchad.uchospitals.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIRAKBMeSxLf+4zV5whW0xQ6JgwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgwNzExMDAwMDAwWhcNMjAwNzEw
MjM1OTU5WjCB3TELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTYwNjM3MQswCQYDVQQI
EwJJTDEQMA4GA1UEBxMHQ2hpY2FnbzEgMB4GA1UECRMXNTgwMSBTb3V0aCBFbGxp
cyBBdmVudWUxHjAcBgNVBAoTFVVuaXZlcnNpdHkgb2YgQ2hpY2FnbzExMC8GA1UE
CxMoVGhlIFVuaXZlcnNpdHkgb2YgQ2hpY2FnbyBNZWRpY2FsIENlbnRlcjEqMCgG
A1UEAxMhaW50ZXJjb25kZXYudWNoYWQudWNob3NwaXRhbHMuZWR1MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxla00YspMrt4MgB6jGd2k+D3a+m0/jJq
omYbZztgMlvv4RFDscmP4EThoLAMImmXgpPp1XD3NiiStRJuV2NTBfrwpaTNSvYr
a50PD/GyhuXr82wXDqn0CBzj/VtkxOZVsRXikg0Z1acllolDQNwL92jlOmRYqxvU
v9sXQ1VlS6i77EpvXY0JyxHEklFnGMw0v3/OrVWFJs0p1/lcmOXGPS+MJODnCdkE
s1OaHFHea5YXhEp3jqzM8P53jsSqFFIjlwQHX6BUvJXLwwSjfV8Wb0ETkFUBALyB
rOPN5sl+92SiB3wTZWDpe8MjY/BtlOC+yIGlUpj//2QPPw2hgNHCawIDAQABo4ID
WTCCA1UwHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYE
FEFu5pt7NloKUdlR0yMd8Ahk+pb6MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E
AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIG
DCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1v
bi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNV
HR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21t
b25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJo
dHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNy
dDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAsBgNVHREE
JTAjgiFpbnRlcmNvbmRldi51Y2hhZC51Y2hvc3BpdGFscy5lZHUwggGABgorBgEE
AdZ5AgQCBIIBcASCAWwBagB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6
qP3LAAABZIpersIAAAQDAEgwRgIhAMzZ8TY5TeyqNXUEYElY8EUQbuih4x7XN4l6
ENIoSogYAiEAnCtszRYXpDBEfwJTRxl/+UqEqP6nSCE2DHlxh2byUQkAdgBep3P5
31bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWSKXrDkAAAEAwBHMEUCIEgf
WKjgEkkTc/WiBc7Eo61Y0ZtTiFn7h0ME2zgoWlS4AiEA2RYXBSou1M/Hjxzgwywi
FD6VcQseAAE2eOViQgM1XUsAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6od
BxPTDAAAAWSKXq7pAAAEAwBIMEYCIQCyD8TAnyXuEe7gV78cUFFtbpKLqhyfKBZC
I6o2Zd7o7wIhAI2pf8uj3RV6CcN5+F5phwPBcz698qDcNDzoMQiWNb2uMA0GCSqG
SIb3DQEBCwUAA4IBAQBDs8n5jfMXTy3rpjD3b21xB+n53RVmvpiVKXUwSUM5SeoX
zT15b+pl/URvAiz0T7xjKXt6HoTSYGF11cU/y97i0b1SPvGuyIfowBizn3NDk7HG
zhO65Nrq/UlFUrjIUcVA3sRpMIaEk1XK12qjabpfvcqTNLRCbARki/J0DMj3e88B
a7XSHN2LMX28gZnw9dqyvMuBZxMsMGyHDjPFfnuyQkKGHWMdQdpkKOlVcev/wg/o
Ldospkj1xkDNLvEcls5KsXAKscAHY3Sdkpv3NDzieoYvefAZWmuaya81Eb9Th2U0
8xyL7OOiVKm4x9osTp/wAvpWpgK2PbBGfaJ+WVsM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxla00YspMrt4MgB6jGd2
k+D3a+m0/jJqomYbZztgMlvv4RFDscmP4EThoLAMImmXgpPp1XD3NiiStRJuV2NT
BfrwpaTNSvYra50PD/GyhuXr82wXDqn0CBzj/VtkxOZVsRXikg0Z1acllolDQNwL
92jlOmRYqxvUv9sXQ1VlS6i77EpvXY0JyxHEklFnGMw0v3/OrVWFJs0p1/lcmOXG
PS+MJODnCdkEs1OaHFHea5YXhEp3jqzM8P53jsSqFFIjlwQHX6BUvJXLwwSjfV8W
b0ETkFUBALyBrOPN5sl+92SiB3wTZWDpe8MjY/BtlOC+yIGlUpj//2QPPw2hgNHC
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213073551567802413230141365347182241944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60637'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5801 South Ellis Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Chicago Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intercondev.uchad.uchospitals.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25037940864401824947404685675916679006912533115157725484573028230120245752503249316808496897079030619164363107451728347588722996236575181855836156649238576501557140801379220978242176703664302983008901439022658077295088774798618262490683191423756928526404824056298326284124517778510741212076373601610407316440278752612986920608723604210621177361627031809025703165825389924777540847743077553674243746058366085433003945183566291431124903821933038873855079503566545834295871662471050424597401532611462966677639004615012455402876331126453165740980494450820251744796135179098690595292026986842615682300176606196231564280427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							416ee69b7b365a0a51d951d3231df00864fa96fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercondev.uchad.uchospitals.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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