dev.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ab:38:89:d6:f1:25:3b:3a:35:10:01:a3:55:e1:45:fb was issued on by Internet2.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:38:89:d6:f1:25:3b:3a:35:10:01:a3:55:e1:45:fb
Serial Number (int): 227591551622871940260792147205234443771
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d4:7b:23:e9:e4:3e:bb:60:37:96:b0:a2:bb:29:aa:e8:fa:a1:9c:da
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 99:e2:3a:bf:e7:11:80:7d:bf:28:0c:53:55:50:cc:6c:fe:b7:0f:73
Fingerprint (sha256): 47:34:84:52:9f:2a:55:6c:c2:ad:f8:d1:be:2a:31:88:a1:16:73:4c:62:d4:18:69:33:42:d8:5a:21:a4:6d:59

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate dev.cumc.columbia.edu

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cumc.columbia.edu
dev.anesthesiology.cumc.columbia.edu
dev.biochem.cumc.columbia.edu
dev.brand.cumc.columbia.edu
dev.columbia-lyme.org
dev.columbiacardiology.org
dev.columbiaeye.org
dev.columbiaobgyn.org
dev.columbiapsychiatry.org
dev.columbiaradiology.org
dev.communications.cumc.columbia.edu
dev.compliance.cumc.columbia.edu
dev.crr.columbia.edu
dev.dental.columbia.edu
dev.derc.cumc.columbia.edu
dev.dermatology.columbia.edu
dev.epic.cumc.columbia.edu
dev.facultyclub.cumc.columbia.edu
dev.gca.cumc.columbia.edu
dev.genetics.cumc.columbia.edu
dev.hipaa.cumc.columbia.edu
dev.ihn.cumc.columbia.edu
dev.infectiousdiseases.cumc.columbia.edu
dev.nyonrc.cumc.columbia.edu
dev.pathology.columbia.edu
dev.physicianorganization.cumc.columbia.edu
dev.ps.columbia.edu
dev.rheumatologyatcolumbia.org
dev.stemcell.columbia.edu
dev.ws.cumc.columbia.edu
sandbox.ws.cumc.columbia.edu
stage.anesthesiology.cumc.columbia.edu
stage.biochem.cumc.columbia.edu
stage.brand.cumc.columbia.edu
stage.columbia-lyme.org
stage.columbiacardiology.org
stage.columbiaeye.org
stage.columbiaobgyn.org
stage.columbiapsychiatry.org
stage.columbiaradiology.org
stage.communications.cumc.columbia.edu
stage.compliance.cumc.columbia.edu
stage.crr.columbia.edu
stage.cumc.columbia.edu
stage.dental.columbia.edu
stage.derc.cumc.columbia.edu
stage.dermatology.columbia.edu
stage.epic.cumc.columbia.edu
stage.facultyclub.cumc.columbia.edu
stage.gca.cumc.columbia.edu
stage.genetics.cumc.columbia.edu
stage.hipaa.cumc.columbia.edu
stage.ihn.cumc.columbia.edu
stage.infectiousdiseases.cumc.columbia.edu
stage.nyonrc.cumc.columbia.edu
stage.pathology.columbia.edu
stage.physicianorganization.cumc.columbia.edu
stage.ps.columbia.edu
stage.rheumatologyatcolumbia.org
stage.stemcell.columbia.edu
stage.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for dev.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227591551622871940260792147205234443771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842124295535183772778781447998794648729109323721076318325819164409373451794789562515462525419876648114973650292753331048924402784599623950614468865993497571227377062711301106268142084541444298122934518136997938675236656779150707536239812492362398831787994626115267404226470993701415593010826055595732821949144921103596771280537380466644594989780012799368984318219837514004810097484423491672491651840517242337948892780944402992435027624310704377552484643201855623349365776903114328988398450243164312762877207247462726168695526043489428785203894707644338798233802153189450349871922242784806621788323634401824977537731848035179820166953551841104595520411193272891121135053809698399638754162888080023825713557437632511373598855901915645297028774605936967825592258198234164103149031958646742849120765258582380444566585201936736290005817128472902075294132532154850069680379659620836005366466864240589475666752094248093067014616463987448297599140440596560978194919722552105784575489301538814645336527683233324369369026016087866253672108191280950066667961076964312780693466198195334848085533002318771356212095573754501962084466255937499560418265907797845469219245844169223319654868596355481697348440782507371300416971274434278775937105767099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d47b23e9e43ebb603796b0a2bb29aae8faa19cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001634a8a2fcc0000040300473045022100dedffbe5089830a713e154b68b6f1b1a595b19918680153ec881cfbf246179700220637ff10ab5872c43f9d2064e91e74ac1ada382cd5fc1a7d1b4270ac2349bf3080076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001634a8a300e000004030047304502202faf39ada10a0d6aed41889d49d40bd63eac42818a8fd3767c26a250bd909280022100eb725c73a2a8ffa46daf6740a960d0911a5a79b162fdaa80245a9ec68c7ba5790075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001634a8a305b000004030046304402201dae7806350ec85209658da89a8395b7c691a486ed1160a8be4f08097ae0369a022047a37c6a44518a534597ee80ea6b98c9daf9561c6f191b5ed3059d303210425f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049a8f177922bb619c2632fdd4a536320d96faaa1fb926f357e436e092f6ca75f2b32c56300e25ce19ad243d4751687e101efd68cc6d6e14f3f6d39c42f59fde64c03b2025d745c1fae7e665677cf4e924112adc9ed24bd9dc85bdc7323a62efa5a0bd185874d8ed950adaeb3c0d0d34eee08b5192b65f74ed63d9d82e5677a06715d03521da91849b15cf877277b772e241a969f526fe77a3c64af075a040bf91f221973f8d7507f22b8cfc4ac21b79ece72818905e9f03cda36c2476fec6433002116c7c7b198150f5672daed77a00706664628d41f5096a041443c286c5c1e9f5ed390dcca00fb3e7f53662178a700e7ca014dfda85b0ef65bdf1118560a35