prod.cumc.columbia.edu
- Columbia University -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number d5:36:f3:f4:de:9f:1e:21:68:4a:86:10:e4:06:c3:7a was issued on by Internet2.
With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Columbia University
Organization:
Columbia University
Organization unit: Information Technology
Organization unit: Information Technology
Address:
116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US
Postal code: 10027
State / Province: NY
Locality: New York
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): d5:36:f3:f4:de:9f:1e:21:68:4a:86:10:e4:06:c3:7aSerial Number (int): 283410895158651336129772280801053295482
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 3a:51:47:c7:c7:e1:f5:91:58:ba:f2:70:46:98:8b:b9:ab:17:9e:25
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): 5f:96:0d:3b:ff:e5:89:06:9d:b4:4e:f4:2d:40:33:0f:c1:65:11:11
Fingerprint (sha256): 6f:01:c4:60:6c:42:8b:de:03:e3:ab:48:03:ce:28:88:3b:05:43:ce:28:aa:a9:7b:7d:75:f9:b5:fb:1c:0d:09
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate prod.cumc.columbia.edu
36
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prod.cumc.columbia.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prod.cumc.columbia.edu
prod.anesthesiology.cumc.columbia.edu
prod.biochem.cumc.columbia.edu
prod.columbia-lyme.org
prod.columbiacardiology.org
prod.columbiaeye.org
prod.columbiaobgyn.org
prod.columbiaortho.org
prod.columbiapsychiatry.org
prod.columbiaradiology.org
prod.communications.cuimc.columbia.edu
prod.compliance.cumc.columbia.edu
prod.congenitalheart.cuimc.columbia.edu
prod.crr.columbia.edu
prod.cuimc.columbia.edu
prod.dental.columbia.edu
prod.derc.cumc.columbia.edu
prod.dermatology.columbia.edu
prod.epic.cumc.columbia.edu
prod.facultyclub.cumc.columbia.edu
prod.gca.cumc.columbia.edu
prod.genetics.cumc.columbia.edu
prod.genmed.columbia.edu
prod.gsas.cuimc.columbia.edu
prod.hipaa.cumc.columbia.edu
prod.ihn.cumc.columbia.edu
prod.infectiousdiseases.cumc.columbia.edu
prod.irvinginstitute.columbia.edu
prod.it.cuimc.columbia.edu
prod.nyonrc.cumc.columbia.edu
prod.pathology.columbia.edu
prod.pediatrics.columbia.edu
prod.ps.columbia.edu
prod.rheumatologyatcolumbia.org
prod.stemcell.columbia.edu
prod.ws.cumc.columbia.edu
prod.anesthesiology.cumc.columbia.edu
prod.biochem.cumc.columbia.edu
prod.columbia-lyme.org
prod.columbiacardiology.org
prod.columbiaeye.org
prod.columbiaobgyn.org
prod.columbiaortho.org
prod.columbiapsychiatry.org
prod.columbiaradiology.org
prod.communications.cuimc.columbia.edu
prod.compliance.cumc.columbia.edu
prod.congenitalheart.cuimc.columbia.edu
prod.crr.columbia.edu
prod.cuimc.columbia.edu
prod.dental.columbia.edu
prod.derc.cumc.columbia.edu
prod.dermatology.columbia.edu
prod.epic.cumc.columbia.edu
prod.facultyclub.cumc.columbia.edu
prod.gca.cumc.columbia.edu
prod.genetics.cumc.columbia.edu
prod.genmed.columbia.edu
prod.gsas.cuimc.columbia.edu
prod.hipaa.cumc.columbia.edu
prod.ihn.cumc.columbia.edu
prod.infectiousdiseases.cumc.columbia.edu
prod.irvinginstitute.columbia.edu
prod.it.cuimc.columbia.edu
prod.nyonrc.cumc.columbia.edu
prod.pathology.columbia.edu
prod.pediatrics.columbia.edu
prod.ps.columbia.edu
prod.rheumatologyatcolumbia.org
prod.stemcell.columbia.edu
prod.ws.cumc.columbia.edu
Other certificates including the domain name columbia.edu
(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net
Certificate
The complete raw certificate details for prod.cumc.columbia.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKwTCCCamgAwIBAgIRANU28/Tenx4haEqGEOQGw3owDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTgxMDIyMDAwMDAwWhcNMjAxMDIx MjM1OTU5WjCBwTELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTEwMDI3MQswCQYDVQQI EwJOWTERMA8GA1UEBxMITmV3IFlvcmsxIjAgBgNVBAkTGTExNnRoIFN0cmVldCBh bmQgQnJvYWR3YXkxHDAaBgNVBAoTE0NvbHVtYmlhIFVuaXZlcnNpdHkxHzAdBgNV BAsTFkluZm9ybWF0aW9uIFRlY2hub2xvZ3kxHzAdBgNVBAMTFnByb2QuY3VtYy5j b2x1bWJpYS5lZHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1EtNo UYBphYV/KzyJ+M7WhnhZDKhQ2NxwDRlGWe9SexjCyBHPaOlljX0cF/vxXuZoOAkJ 7XSDDkn0myd4lJUtdV/YhxGb9gJvC01Es1BtSePRMLDU8jTsBxQXqQG9lG0Snw56 rkQxGmnxnZYxtV8sajMIOnNq0U/Uh2+zUe0FsJnXbZUFNbAao74a+S5wXNyl13qw DRdNMl/5BmWlrY8QdaEnjW2P6B5rdYdhH/VsTo47/4XjYWagHZTuSuSzweAiaWjf NHLoqiAmwnDP62NreuNI27KG/I9+yCTlT8mSTYqJKOVVWHDHe3oPHpSyLBjnXD6s lLtXjUOhX7bqUbgvnOu/WDf7fI54R3FP3tonRfOGfRVpULgOmUzOGJcs2s68UiqL T6uCQvMFxmfaVk9croTDyuzahpgfjM7+oNcIQN1CBUceBNdjvc8DOdIz3xvnGMpQ /qCUQvTPBpNDmHdWTLey9fbYgcH83bbgi82UtRcK0PyTIFMaJQPNB1T47+i6FLal gj2GFQjKrPFfvlrL2rOXUCiiNqglNnmuHowLg+uPL1P8vH/9udLhqA/coaL4haWC s4TzdipBMvgUjT/iWgpxscABXLjQJdGCB5Q3q3d8Wj8i2XUKqgwyUd6h7Jj8WjuS 0yD7qTzaHYvuKmLibu+N0GCzETOTSBanZK8eawIDAQABo4IF/DCCBfgwHwYDVR0j BBgwFoAUHgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYEFDpRR8fH4fWRWLry cEaYi7mrF54lMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMB ATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9y ZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1 hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJD QS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVz ZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcw AYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTATBgorBgEEAdZ5AgQDAQH/BAIF ADCCBDwGA1UdEQSCBDMwggQvghZwcm9kLmN1bWMuY29sdW1iaWEuZWR1giVwcm9k LmFuZXN0aGVzaW9sb2d5LmN1bWMuY29sdW1iaWEuZWR1gh5wcm9kLmJpb2NoZW0u Y3VtYy5jb2x1bWJpYS5lZHWCFnByb2QuY29sdW1iaWEtbHltZS5vcmeCG3Byb2Qu Y29sdW1iaWFjYXJkaW9sb2d5Lm9yZ4IUcHJvZC5jb2x1bWJpYWV5ZS5vcmeCFnBy b2QuY29sdW1iaWFvYmd5bi5vcmeCFnByb2QuY29sdW1iaWFvcnRoby5vcmeCG3By b2QuY29sdW1iaWFwc3ljaGlhdHJ5Lm9yZ4IacHJvZC5jb2x1bWJpYXJhZGlvbG9n eS5vcmeCJnByb2QuY29tbXVuaWNhdGlvbnMuY3VpbWMuY29sdW1iaWEuZWR1giFw cm9kLmNvbXBsaWFuY2UuY3VtYy5jb2x1bWJpYS5lZHWCJ3Byb2QuY29uZ2VuaXRh bGhlYXJ0LmN1aW1jLmNvbHVtYmlhLmVkdYIVcHJvZC5jcnIuY29sdW1iaWEuZWR1 ghdwcm9kLmN1aW1jLmNvbHVtYmlhLmVkdYIYcHJvZC5kZW50YWwuY29sdW1iaWEu ZWR1ghtwcm9kLmRlcmMuY3VtYy5jb2x1bWJpYS5lZHWCHXByb2QuZGVybWF0b2xv Z3kuY29sdW1iaWEuZWR1ghtwcm9kLmVwaWMuY3VtYy5jb2x1bWJpYS5lZHWCInBy b2QuZmFjdWx0eWNsdWIuY3VtYy5jb2x1bWJpYS5lZHWCGnByb2QuZ2NhLmN1bWMu Y29sdW1iaWEuZWR1gh9wcm9kLmdlbmV0aWNzLmN1bWMuY29sdW1iaWEuZWR1ghhw cm9kLmdlbm1lZC5jb2x1bWJpYS5lZHWCHHByb2QuZ3Nhcy5jdWltYy5jb2x1bWJp YS5lZHWCHHByb2QuaGlwYWEuY3VtYy5jb2x1bWJpYS5lZHWCGnByb2QuaWhuLmN1 bWMuY29sdW1iaWEuZWR1gilwcm9kLmluZmVjdGlvdXNkaXNlYXNlcy5jdW1jLmNv bHVtYmlhLmVkdYIhcHJvZC5pcnZpbmdpbnN0aXR1dGUuY29sdW1iaWEuZWR1ghpw cm9kLml0LmN1aW1jLmNvbHVtYmlhLmVkdYIdcHJvZC5ueW9ucmMuY3VtYy5jb2x1 bWJpYS5lZHWCG3Byb2QucGF0aG9sb2d5LmNvbHVtYmlhLmVkdYIccHJvZC5wZWRp YXRyaWNzLmNvbHVtYmlhLmVkdYIUcHJvZC5wcy5jb2x1bWJpYS5lZHWCH3Byb2Qu cmhldW1hdG9sb2d5YXRjb2x1bWJpYS5vcmeCGnByb2Quc3RlbWNlbGwuY29sdW1i aWEuZWR1ghlwcm9kLndzLmN1bWMuY29sdW1iaWEuZWR1MA0GCSqGSIb3DQEBCwUA A4IBAQBz53HMMswjI7Jk02WgaaWMhzodHWMTWvu+MurRyF8OEjHL2sX+sx++2KOC mn+HcqrqBkx5QIdfz0XwLHSR19SdtaNac8x2OLgDImoyEznLrnKdXg9q4LkkqwaX bKe028yF83A0gTifTCldCK0eiSgKprp/c/gQQ/YD2N0lw1Pq1KV6GvFXWMi9tQqW uDjBrL33zYMD6Mte1eHzHYJrHNjuZf0Ol40CzJfxTEDiJZjKDXx1WQ3W3SI6MVb1 ip++RMTVxJPDR0Qaan1RfhcA4IDNeWLwfKxIcJOQ1HWAECFR2qbNh56jGiP7jLeR slIPVfJOJ1ng1fJoitLeLrpl79IB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtRLTaFGAaYWFfys8ifjO 1oZ4WQyoUNjccA0ZRlnvUnsYwsgRz2jpZY19HBf78V7maDgJCe10gw5J9JsneJSV LXVf2IcRm/YCbwtNRLNQbUnj0TCw1PI07AcUF6kBvZRtEp8Oeq5EMRpp8Z2WMbVf LGozCDpzatFP1Idvs1HtBbCZ122VBTWwGqO+GvkucFzcpdd6sA0XTTJf+QZlpa2P EHWhJ41tj+gea3WHYR/1bE6OO/+F42FmoB2U7krks8HgImlo3zRy6KogJsJwz+tj a3rjSNuyhvyPfsgk5U/Jkk2KiSjlVVhwx3t6Dx6UsiwY51w+rJS7V41DoV+26lG4 L5zrv1g3+3yOeEdxT97aJ0Xzhn0VaVC4DplMzhiXLNrOvFIqi0+rgkLzBcZn2lZP XK6Ew8rs2oaYH4zO/qDXCEDdQgVHHgTXY73PAznSM98b5xjKUP6glEL0zwaTQ5h3 Vky3svX22IHB/N224IvNlLUXCtD8kyBTGiUDzQdU+O/ouhS2pYI9hhUIyqzxX75a y9qzl1AoojaoJTZ5rh6MC4Prjy9T/Lx//bnS4agP3KGi+IWlgrOE83YqQTL4FI0/ 4loKcbHAAVy40CXRggeUN6t3fFo/Itl1CqoMMlHeoeyY/Fo7ktMg+6k82h2L7ipi 4m7vjdBgsxEzk0gWp2SvHmsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283410895158651336129772280801053295482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.cumc.columbia.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738715586492195683466656739648322775963686272766473267476731998816110949303169160458598466794098133969837017864468371621632375965471379892504444329822237384055725700440704225291351717901011763495723579221998407883531846154309353157080308315018525244199573070587930338153152494900921545384711208043741843014414739877459448290541980056122943255586271903253482444177727874013452637326442273337853799134593710998510296683837543761379993382713154114989127368858361598342943018969048714993718547800934951145685565255283504748308525784866267438287044668593742558391298727949794385044725241294747144216320907749136616101367065440255196069866304807553722226701384008534397672958251350327415418354015083097776703091609430702086953377270120493780641957758214837411376068346162279485828577257670702660794556847975769956411722253603295944923563044580666615169449121590514801924429032756141904794485777041490692698272821364299320269955596290155558206972008640130822963652725562487457785468481176386053936573824642531931729746474597024935100624938550794312495370649876656256380533231827031181898159056184935227741373838113098628796454305791991566881834535663676404726698283721420505162481716500677781782656409251690504628402467555982258970918067819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a5147c7c7e1f59158baf27046988bb9ab179e25 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1075 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.anesthesiology.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.biochem.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbia-lyme.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiacardiology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaeye.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaobgyn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaortho.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiapsychiatry.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaradiology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.communications.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.compliance.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.congenitalheart.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.crr.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dental.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.derc.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dermatology.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.epic.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.facultyclub.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gca.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.genetics.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.genmed.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gsas.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.hipaa.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ihn.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.infectiousdiseases.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.irvinginstitute.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.it.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nyonrc.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pathology.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pediatrics.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ps.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.rheumatologyatcolumbia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.stemcell.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ws.cumc.columbia.edu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0073e771cc32cc2323b264d365a069a58c873a1d1d63135afbbe32ead1c85f0e1231cbdac5feb31fbed8a3829a7f8772aaea064c7940875fcf45f02c7491d7d49db5a35a73cc7638b803226a321339cbae729d5e0f6ae0b924ab06976ca7b4dbcc85f3703481389f4c295d08ad1e89280aa6ba7f73f81043f603d8dd25c353ead4a57a1af15758c8bdb50a96b838c1acbdf7cd8303e8cb5ed5e1f31d826b1cd8ee65fd0e978d02cc97f14c40e22598ca0d7c75590dd6dd223a3156f58a9fbe44c4d5c493c347441a6a7d517e1700e080cd7962f07cac48709390d47580102151daa6cd879ea31a23fb8cb791b2520f55f24e2759e0d5f2688ad2de2eba65efd201