columbiadoctors.org

- Columbia University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number cf:90:54:97:f5:55:0e:57:c8:eb:8a:d0:89:34:89:c7 was issued on by Internet2.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Columbia University

Organization: Columbia University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): cf:90:54:97:f5:55:0e:57:c8:eb:8a:d0:89:34:89:c7
Serial Number (int): 275899601636892501097199139104241256903
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5a:80:e8:1f:5b:b3:6e:9a:76:87:80:fd:09:af:fd:13:5b:f4:fe:2f
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 13:0f:ea:68:a7:e6:f3:d3:06:bc:0e:0b:d0:0b:c4:8c:33:cf:fc:1c
Fingerprint (sha256): 5f:02:6e:5c:0e:42:3d:90:83:00:52:a0:b0:5d:23:b1:f5:3e:54:f0:20:28:ad:26:d7:a3:27:73:72:64:ce:e9

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate columbiadoctors.org

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiadoctors.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiadoctors.org
*.columbiachildrenshealth.org
*.columbiadoctors-columbuscircle.com
*.columbiadoctors-columbuscircle.org
*.columbiadoctors.com
*.columbiadoctors.org
*.columbiadoctorsmidtown.com
*.columbiadoctorsmidtown.net
*.columbiadoctorsmidtown.org
*.columbiagynsurgery.org
*.columbialasik.org
*.columbiapresbyterian.com
*.columbiapresbyterian.net
*.legacygirlsstudy.org
*.midtownpeds.com
*.mycolumbiadoctors.com
*.mycolumbiadoctors.net
*.mycolumbiadoctors.org
*.pediatricsofnyc.com
*.westsidepeds.com
columbiachildrenshealth.org
columbiadoctors-columbuscircle.com
columbiadoctors-columbuscircle.org
columbiadoctors.com
columbiadoctorsmidtown.com
columbiadoctorsmidtown.net
columbiadoctorsmidtown.org
columbiagynsurgery.org
columbialasik.org
columbianps.com
columbianps.net
columbianps.org
columbianursepractitionergroup.com
columbiapresbyterian.com
columbiapresbyterian.net
equiplearninghealth.org
harlempeds.org
legacygirlsstudy.org
midtownpeds.com
mycolumbiadoctors.com
mycolumbiadoctors.net
mycolumbiadoctors.org
pediatricsofnyc.com
westsidepeds.com
www.columbianps.com
www.columbianps.net
www.columbianps.org
www.columbianursepractitionergroup.com
www.equiplearninghealth.org
www.harlempeds.org

Other certificates including the domain name columbiadoctors.org

(limited to 100 certificates)
forms.columbiadoctors.org
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
www.columbiadoctors.org
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
www.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
columbiapsychiatry.org
5709198289534976-fe4.pantheonsite.io
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
5711507908198400-fe1.pantheonsite.io
stage.forms.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
forms.columbiadoctors.org
5709198289534976-fe4.pantheonsite.io
columbiapsychiatry.org
5680163505307648-fe4.pantheonsite.io
columbiadoctors.org
columbiadoctors.org
www.columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
columbiadoctors.org
5680163505307648-fe4.pantheonsite.io
columbiadoctors.org
www.columbiadoctors.org
columbiadoctors.org
5711507908198400-fe1.pantheonsite.io
5680163505307648-fe4.pantheonsite.io
5680163505307648-fe4.pantheonsite.io

Certificate

The complete raw certificate details for columbiadoctors.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi34kfg3lnPJMQSlzEWw
DI8+d37ZcXWRWqJrSxIyCmkZL0ZppRxO1tnbPca0gowTYNHPWocx7yqGS+DSIpUn
4iDNS/wVD817jbnvpzXPb1MXZZuLVZEWPcOXOQGT+vXVOrC+4BpnZK7/+cBW9J4H
h6BrkshI2VCktbRh+5EAa/fRRDssk35+66jlvuCJLOkX1F/Et9/49kyjmPnX81dj
8nZa/uunbJ7Jvv5WaE/9TrRbJAs0gvpC5QgeZCE/xAcJoDj1hC6yX0OC0CU2QiSm
UkVbPlXSyvo0S7wgUm061iTBNObw80HC4sMhxXo5xO6kMB6XGkLJNsOEIbRSG01y
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275899601636892501097199139104241256903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiadoctors.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20473274538307835201861391834845973300858337212302286712923339330345560276871678250523916763438693985880269394434484203712225731383796092801800007030420376073281770574832915500008904623670668734407297651278678317402416829323435654753393486874259987579483328461816149777858817513555419795790994946385542456618058994582223121030025848805865147712688051921352617177679024970487545786900034528054712137191627892601354285866019576048560771294405392978654288229726798997298133980644505859786726336166919172346740641311713482655713425690970005368307173467853400614258837885468441180625947840256250227095204990656449505751753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a80e81f5bb36e9a768780fd09affd135bf4fe2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018dae0f44b00000040300483046022100b4a2fb2c9db61fa01f6c98d3ccbaa120ac7dedab134477ad4063905000b7e68d0221009c02523355248139e95d952589f803023c04d46afa3bb4acb115bb63b4b908ba007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018dae0f4582000004030047304502205f938e8b095b000fe53ac92a07479edded21c6996b031450f9be5a8bdea2a236022100cba57e94284c78789f0b5b98b459d8d1007b6f74a0ea7659ea31da189e0b71120076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018dae0f44e30000040300473045022100bd48c476921fd2566ffaac1f47847694d475c3546d7bb8d8a7530e4d07e67ac6022043d5e149ce415284f04ed34ee21499ec01e84d0b7f2c1782f18e04ae500a8ce6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1260 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiachildrenshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors-columbuscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors-columbuscircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctorsmidtown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagynsurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbialasik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapresbyterian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapresbyterian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midtownpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycolumbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pediatricsofnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westsidepeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiachildrenshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors-columbuscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors-columbuscircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctorsmidtown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagynsurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbialasik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianursepractitionergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapresbyterian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapresbyterian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equiplearninghealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harlempeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midtownpeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycolumbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatricsofnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsidepeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbianursepractitionergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equiplearninghealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harlempeds.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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