vpn.dcollege.net
- Drexel University -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number e8:b9:a7:76:53:7d:15:34:9d:1b:cb:9c:f0:af:06:b2 was issued on by Internet2.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Drexel University
Organization:
Drexel University
Organization unit: IRT
Organization unit: IRT
Address:
3141 Chestnut Street
Postal code: 19104
State / Province: PA
Locality: Philadelphia
Country: US
Postal code: 19104
State / Province: PA
Locality: Philadelphia
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e8:b9:a7:76:53:7d:15:34:9d:1b:cb:9c:f0:af:06:b2Serial Number (int): 309344866478094883819985182444777047730
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e1:ed:58:82:70:06:e9:df:9e:d2:27:99:d9:cf:f5:43:5c:8f:50:64
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): f1:97:b5:bd:a8:6b:c2:ee:3f:01:a8:34:75:12:96:80:8d:62:f8:e5
Fingerprint (sha256): 5b:19:65:cd:40:27:fb:f7:fa:4d:2c:47:d1:44:09:46:12:60:98:b4:47:b8:5d:3f:75:7c:82:37:a6:35:02:8f
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate vpn.dcollege.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn.dcollege.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn.dcollege.net
Other certificates including the domain name dcollege.net
(limited to 100 certificates)
rmcplogin.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
partners.dcollege.net
vle.dcollege.net
neumann.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
rmcp.dcollege.net
vpn.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
learn.dcollege.net
us-east-1-san4.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
rmcpapi.dcollege.net
pmt.dcollege.net
partners.dcollege.net
rmcpapp.irttest.dcollege.net
us-east-1-san4.blackboard.com
cabrini.dcollege.net
rmcp.irttest.dcollege.net
mkt.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
medaille.dcollege.net
reports.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
learn.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
learning.dcollege.net
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
reporting.dcollege.net
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
vpn.dcollege.net
broadcast.dcollege.net
us-east-1-san4.blackboard.com
reports-dev.irttest.dcollege.net
partners.dcollege.net
neumann.dcollege.net
mkt-dev.irttest.dcollege.net
tpgadmin.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
us-east-1-san4.blackboard.com
rmcpapi.irttest.dcollege.net
mkt.dcollege.net
pmt.irttest.dcollege.net
its.learning.dcollege.net
learn.dcollege.net
reports.irttest.dcollege.net
mkt.irttest.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
learn-1513041-1.dcollege.net
us-east-1-san3.blackboard.com
rmcpadmin.dcollege.net
cabrini.dcollege.net
us-east-1-san4.blackboard.com
medaille.dcollege.net
cabrini.dcollege.net
pmt.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
pmt-dev.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san4.blackboard.com
pmt.dcollege.net
pmt.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
rmcplogin.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
mkt.irttest.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
pmt.irttest.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
reporting.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
partners.dcollege.net
vle.dcollege.net
neumann.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
rmcp.dcollege.net
vpn.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
learn.dcollege.net
us-east-1-san4.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
rmcpapi.dcollege.net
pmt.dcollege.net
partners.dcollege.net
rmcpapp.irttest.dcollege.net
us-east-1-san4.blackboard.com
cabrini.dcollege.net
rmcp.irttest.dcollege.net
mkt.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
medaille.dcollege.net
reports.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
learn.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
learning.dcollege.net
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
reporting.dcollege.net
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
vpn.dcollege.net
broadcast.dcollege.net
us-east-1-san4.blackboard.com
reports-dev.irttest.dcollege.net
partners.dcollege.net
neumann.dcollege.net
mkt-dev.irttest.dcollege.net
tpgadmin.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
us-east-1-san4.blackboard.com
rmcpapi.irttest.dcollege.net
mkt.dcollege.net
pmt.irttest.dcollege.net
its.learning.dcollege.net
learn.dcollege.net
reports.irttest.dcollege.net
mkt.irttest.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
learn-1513041-1.dcollege.net
us-east-1-san3.blackboard.com
rmcpadmin.dcollege.net
cabrini.dcollege.net
us-east-1-san4.blackboard.com
medaille.dcollege.net
cabrini.dcollege.net
pmt.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
pmt-dev.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san4.blackboard.com
pmt.dcollege.net
pmt.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
rmcplogin.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
mkt.irttest.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
pmt.irttest.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
reporting.dcollege.net
Certificate
The complete raw certificate details for vpn.dcollege.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIRAOi5p3ZTfRU0nRvLnPCvBrIwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTUwMzEwMDAwMDAwWhcNMTgwMzA5 MjM1OTU5WjCBpTELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTE5MTA0MQswCQYDVQQI EwJQQTEVMBMGA1UEBxMMUGhpbGFkZWxwaGlhMR0wGwYDVQQJExQzMTQxIENoZXN0 bnV0IFN0cmVldDEaMBgGA1UEChMRRHJleGVsIFVuaXZlcnNpdHkxDDAKBgNVBAsT A0lSVDEZMBcGA1UEAxMQdnBuLmRjb2xsZWdlLm5ldDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMKxYFfelUuGXGYZLlxtsqzZ7cavHW2gyS2wbP+E/8pJ p/3ZrqN5Ji9RvLxvOrOr6Pr8GZZubyP9Op9Ot8i6jlC/k9k5gRjbGoNnUtO/SCGX 38VWu8MJswHKcFhyHhwgaPFrI4p8EwPEAghsp+ejY3IcU0MBXuoAYIU//8JvOtis BDedask7RUwdTllKdngi1iyfSngyT17UMvd8tt1VXkyoH2FFRYQAS2rAnXBFGLEt DIWiLiHUx47O/3dlkJ8ceFgR148wSsUO/b/Ta0WcLW5DKgdUEX4qBWE+9v5NbhlK k1jw0h40oKUyjBG04nyDcWhMLvAnsIWFe0KNk7Ic8lkCAwEAAaOCAcQwggHAMB8G A1UdIwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBTh7ViCcAbp 357SJ5nZz/VDXI9QZDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4j AQQDAQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2Nl cnQvcmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5 oDegNYYzaHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2Vy dmVyQ0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2Ny dC51c2VydHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYB BQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wGwYDVR0RBBQwEoIQdnBu LmRjb2xsZWdlLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEAebkWTpYUlRs2RMWWKS2R n2+6jdwMKTrCKiL2uAKS6tZkY591GLyKLdUk08hE+zPuOV/EgbdLhsFVI/g1bjJ0 9ATSG/GepKGOwhgLS5lLMoqTU4PsxK/0oBxarnG8ZZthrPnD1NUuyvmTDaZKIXEj 3+f3jZ3jMzYIcZ1VHhaNnme7CNdO50+Rq6Y3X9xZadq/4zWRwMuO3a5YpNnOAdYx tTUColWAcWgAeI7ShDZ6t81dFtbpyDYVzm41TCNCaYT6mhIH9J2MCNMITiNZLdNI DAs/Dh5fqj4v728vGsRW2FL1imlqTRQ01bXp53+HmKEj/0eRrCAQY9RmwSIL4/OT zw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrFgV96VS4ZcZhkuXG2y rNntxq8dbaDJLbBs/4T/ykmn/dmuo3kmL1G8vG86s6vo+vwZlm5vI/06n063yLqO UL+T2TmBGNsag2dS079IIZffxVa7wwmzAcpwWHIeHCBo8WsjinwTA8QCCGyn56Nj chxTQwFe6gBghT//wm862KwEN51qyTtFTB1OWUp2eCLWLJ9KeDJPXtQy93y23VVe TKgfYUVFhABLasCdcEUYsS0MhaIuIdTHjs7/d2WQnxx4WBHXjzBKxQ79v9NrRZwt bkMqB1QRfioFYT72/k1uGUqTWPDSHjSgpTKMEbTifINxaEwu8CewhYV7Qo2Tshzy WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309344866478094883819985182444777047730 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19104' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3141 Chestnut Street' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Drexel University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IRT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.dcollege.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24577698697014420436876307245703597944125888226198911372074767933170848855070819942505933270969692411297567460637804840662955219936611207060016534220187060698436843117850478260101412396672807026603251910264305567858035846250084463986480373892460105511782899238116178063105226940761538416007469789572390684505903630064200118049792409202924681354255832382991405592743090257625698041679953021734505131327592152162964204015857430949388231446947391773336902242010118918420658448771601320624594008912371487886755796405377037904960888963477439482486105120870078896330340155000338473499989113281757437289578757981305868972633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1ed58827006e9df9ed22799d9cff5435c8f5064 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.dcollege.net' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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