columbiadoctors.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 56:8c:6e:7e:90:d2:a1:83:c7:0a:02:c9:d6:d1:9e:df was issued on by Internet2.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 56:8c:6e:7e:90:d2:a1:83:c7:0a:02:c9:d6:d1:9e:df
Serial Number (int): 115042770290322997987037104375497596639
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fe:e2:82:16:be:17:7a:71:0b:da:2f:29:ab:bc:ca:18:b5:e4:71:f9
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 04:fc:9e:cf:af:f2:b9:3e:b0:2f:13:7e:00:37:03:07:bc:ab:7f:d7
Fingerprint (sha256): 50:82:c7:7e:e3:46:12:69:de:e4:a0:ca:15:e0:8a:b7:35:e3:7d:e4:e3:72:ed:4b:f3:f8:07:a7:1b:df:b7:c3

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate columbiadoctors.org

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiadoctors.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiadoctors.org
*.columbiachildrenshealth.org
*.columbiadoctors-columbuscircle.com
*.columbiadoctors-columbuscircle.org
*.columbiadoctors.com
*.columbiadoctors.org
*.columbiadoctorsmidtown.com
*.columbiadoctorsmidtown.net
*.columbiadoctorsmidtown.org
*.columbiagynsurgery.org
*.columbialasik.org
*.columbiapresbyterian.com
*.columbiapresbyterian.net
*.legacygirlsstudy.org
*.midtownpeds.com
*.mycolumbiadoctors.com
*.mycolumbiadoctors.net
*.mycolumbiadoctors.org
*.pediatricsofnyc.com
*.westsidepeds.com
columbiachildrenshealth.org
columbiadoctors-columbuscircle.com
columbiadoctors-columbuscircle.org
columbiadoctors.com
columbiadoctorsmidtown.com
columbiadoctorsmidtown.net
columbiadoctorsmidtown.org
columbiagynsurgery.org
columbialasik.org
columbianps.com
columbianps.net
columbianps.org
columbianursepractitionergroup.com
columbiapresbyterian.com
columbiapresbyterian.net
legacygirlsstudy.org
midtownpeds.com
mycolumbiadoctors.com
mycolumbiadoctors.net
mycolumbiadoctors.org
pediatricsofnyc.com
westsidepeds.com
www.columbianps.com
www.columbianps.net
www.columbianps.org
www.columbianursepractitionergroup.com

Other certificates including the domain name columbiadoctors.org

(limited to 100 certificates)
forms.columbiadoctors.org
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
www.columbiadoctors.org
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
www.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
columbiapsychiatry.org
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
stage.forms.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
forms.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
columbiapsychiatry.org
5680163505307648-fe4.pantheonsite.io
columbiadoctors.org
columbiadoctors.org
www.columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
columbiadoctors.org
5680163505307648-fe4.pantheonsite.io
columbiadoctors.org
www.columbiadoctors.org
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io

Certificate

The complete raw certificate details for columbiadoctors.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46RSkLm+CEVHupQntV0f
FaPTJ8k0x4yrOhx50EOQSJEFrx8R/7ID5jja5WPA+rkdVQNrchJaPcL83LmGX5OK
mWFdaHjpysHidMx8jtJhCDhLc7mp7xwpbd2fwg7p80xAw4wL7Pv1nM/ZAt/1hfVG
Hq1FRIR1KK9N5hQtBWTuWYwuTAJm4cVOdEnBZ45j3E9zdjXtNnJi0V25i77Fsx/3
gryTYNFGKnrbi4aYVPzh1kHksHCNjbQb2XH4FvQzb1jWil9Ay3A900GVMk0FdCbd
Yix97s1emuH5L/QernaNjfKAhh02jLOndvRR+CUm4bJWjH0yhRDpdZesVEDfLNhY
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115042770290322997987037104375497596639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiadoctors.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28737125682366317400287181699904324713935598127023553837660861468713498410295719523514716479813707175980023881401854110488172406188956928327896312350993264490120801312054157090284885788156516386966681904788043480919234353763357961818476146645034014503947706723485598469053584128337101872948857826257927408791568803386530825155101608852517982268807681723451343108837245217856443681148998618709214171102303018070849038582127397779645886539567396740912630256676431571405878996887903478977483950550322213498181362987924105209578198753661252175197093366021980800992234283621165530777375188880620533403797962999886870239339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fee28216be177a710bda2f29abbcca18b5e471f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiachildrenshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors-columbuscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors-columbuscircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagynsurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbialasik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapresbyterian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapresbyterian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midtownpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pediatricsofnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westsidepeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiachildrenshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors-columbuscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors-columbuscircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagynsurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbialasik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianursepractitionergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapresbyterian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapresbyterian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midtownpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatricsofnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsidepeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianursepractitionergroup.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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