wech-cuclpvcsc01.lpch.org

- Stanford University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 78:c3:c3:26:94:ac:ac:65:07:3d:bb:8a:a2:5a:c8:ee was issued on by Internet2.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stanford University

Organization: Stanford University
Organization unit: Stanford Children's Hospital
State / Province: California
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:c3:c3:26:94:ac:ac:65:07:3d:bb:8a:a2:5a:c8:ee
Serial Number (int): 160523815508159614559008563035417266414
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:71:63:10:93:97:b0:32:9a:04:44:b7:fc:db:b1:82:99:34:44:5f
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): c0:23:9e:13:1c:dd:34:80:69:7f:31:91:42:13:77:a6:1f:7b:db:3f
Fingerprint (sha256): 70:a0:5b:e4:7a:f8:c0:e7:7a:89:60:ff:ed:b2:84:c7:d8:5c:04:56:fb:25:60:b6:39:98:d6:45:40:79:49:dd

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate wech-cuclpvcsc01.lpch.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wech-cuclpvcsc01.lpch.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wech-cuclpvcsc01.lpch.org
conference-2-standalonecluster4fbcc.lpch.org
conference-2-standalonecluster4fbcc.stanfordchildrens.org
conference-3-standalonecluster4fbcc.lpch.org
conference-3-standalonecluster4fbcc.stanfordchildrens.org
fors-cuclpvcsc01.lpch.org
fors-cuclpvcsc01.stanfordchildrens.org
mrac.lpch.org
mrac.stanfordchildrens.org
wech-cuclpvcsc01.stanfordchildrens.org

Other certificates including the domain name lpch.org

(limited to 100 certificates)
mcd.lpch.org
changepassword.stanfordchildrens.org
ifc.lpch.org
accesshr.lpch.org
myphone.lpch.org
insight.lpch.org
mccm.lpch.org
remote.lpch.org
lpch.org
hrprdwebext1.lpch.org
cernerwebviewdemo.lpch.org
accesshr.lpch.org
stanfordchildrens.org
wech-cuclpcup01.lpch.org
ottr.lpch.org
citrixportal.LPCH.ORG
epicnonprodce.lpch.org
NAM.LPCH.ORG
mccm.lpch.org
accesshr.lpch.org
mdportal.lpch.org
applyjobs.lpch.org
aweisdev.lpch.org
mediabin.lpch.org
peoplesoftfscm.lpch.org
epicnonprod.lpch.org
voltage-ps-0000.lpch.org
schvoicemail.lpch.org
stanfordchildrens.org
pbr.stanfordchildrens.org
remote.lpch.org
stanfordchildrens.org
mccm.lpch.org
lpch.org
accesshr.lpch.org
intranet.lpch.org
schvoicemail.lpch.org
capeevents.lpch.org
intranetdemo.stanfordchildrens.org
epicnonprodce.lpch.org
portal.stanfordchildrens.org
peoplesoftfscm.lpch.org
StanfordChildrens.org
lpchp-ironport2.lpch.org
peoplesoftfscm.lpch.org
NAS1.LPCH.ORG
NAM.LPCH.ORG
cardioaccesstest.lpch.org
mccm.lpch.org
intranetdemo.lpch.org
wech-cuclpvcsc01.lpch.org
AWEISPROD.lpch.org
StanfordChildrens.org
intranetdemo.lpch.org
gluvue.stanfordchildrens.org
analytics.stanfordchildrens.org
pres-cuclpvcse01.lpch.org
epicnonprodce.lpch.org
www.lpch.org
cernerwebview.lpch.org
intranet.stanfordchildrens.org
intranet.lpch.org
epicnonprodhc.lpch.org
applyjobs.lpch.org
hrprdwebext1.lpch.org
lpforpacs02.lpch.org
remote.lpch.org
epicprodce.lpch.org
dss.lpch.org
intranet.lpch.org
epicprodss.lpch.org
intranet.lpch.org
accesshrqa.lpch.org
mdemo.lpch.org
intranetdemo.stanfordchildrens.org
mcd.lpch.org
accesshrqa.lpch.org
admin.lpch.org
AWEISPROD.lpch.org
intranet.lpch.org
portal.stanfordchildrens.org
ews.lpch.org
ifc.lpch.org
stanfordchildrens.org
www.lpch.org
portal.stanfordchildrens.org
fs.stanfordchildrens.org
peoplesoftfscm.lpch.org
cardioaccesstest.lpch.org
accesshrqa.lpch.org
wech-cuclpvcsc01.lpch.org
sch-sts.lpch.org
calendar.lpch.org
SCH-Wireless.lpch.org
remote.lpch.org
teletracking.lpch.org
lyncweb.lpch.org
pres-cuclpvcse01.lpch.org
lpchp-ironport2.lpch.org
epicprodhc.lpch.org

Certificate

The complete raw certificate details for wech-cuclpvcsc01.lpch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0YvkhdHjKcJKtLO2rjH5
2t6dYX7a8WxQHcF5kN2+Cc6Rk+l+HsmE8KmsCnseY7tT4bc6qHgd1SIyvpXRxWK7
HVUrNR+mTYiHtv6JYgWwTXM+eWF9COryWbHU/8XhGQGHmx4rJd+TIYpyBHhTcSH+
2XFGZResMB+4QcxoHvXuBzNzYnN724CZX4GPBun5IN5AOiGX3Lw/B/xaqVYOtxrf
rw3ePxdc+XxoNWIz5xH0ctMG0s60YXSL0ssDNBd3QeaUSGhvj8Z+EkJCVIW8k//u
8gREqHCqNg+aPz8CwtXs2jIu2hetnYqBU4j45VkXVOMXvcJSvm+lB4Z33IGXrynq
HKxqn36Res+wpZdK9/R6jJuvN5OmQfljoP5VCrvG7qjL4ej95dpo9dUBbKUZJiQJ
lDPevr4O1/nGrbmV80yMNFf41yt/vhtM36HiEuJqybjYW+f1EoVSFI4YbHMkQZl2
oMTJNaBon9XIch5/pqZ71guK7Dyx+NOoDVCXdDSkv7OZGmllwbF7mJ5n21bTJKKQ
z4wkC3mJiGdv9UD3Y3eK3IPvc+LFii09JrJnFzt+yQr8PUXeSgUEfpxYKaOUY9X5
YUKv6X74E1e0ACXcl/k7AuTrGpLhlv/88PzGxxFCCP3iztmUJg88EqKYdmoUkO79
zj5MJosY7AiWZtPpHKbViZcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160523815508159614559008563035417266414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stanford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stanford Children's Hospital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wech-cuclpvcsc01.lpch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854874955094320808681102618741171837717848767289126881151744395410617180028012437409603595682317363815470326600322987749150717208407680863039092767324836130031587690736317586630316443246061735579418578349733230451710066244652679550393885108240353457338139212577077404194100790402709217944981039992517223787444655419987152715647507195744985660626958406331072614182370690021637421272810210963923460431276906956183118734916993243765854140838737490916317630574149133618711377910238375132792819816974354599918513394317622227805738908796814858407344126018471672145473224087079027606540605671098122882134969638087031423416162907422563305516923314719031787216346578851044747415087377938796645373599133781308969229762251059232929973186183997346273305258982148651613317874550315111878463736907574866958338223082499767056425104259069162113650636874177885659134428308996292218701037163190329696615539187766885474324670885296649704431648763359728534464664829660611860764855403778039689037506510546843265868163874996446059502040080514985048618566860709786012893626215893176674392224388522099503491716240135032089713754785308609464545063464034746753515067432953170192631016041333095029269152558279632238140249620593174693852754321225866835544869271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							867163109397b0329a0444b7fcdbb1829934445f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wech-cuclpvcsc01.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standalonecluster4fbcc.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standalonecluster4fbcc.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standalonecluster4fbcc.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standalonecluster4fbcc.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fors-cuclpvcsc01.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fors-cuclpvcsc01.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrac.lpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrac.stanfordchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wech-cuclpvcsc01.stanfordchildrens.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001b586366ba2c87c05e0b794177eec7a932b18829a58b7f8017233e6837825977a8bd9f51a81033917628e5a59852815a4854a5bf68addc3a4833911a7f5b9b4c72e92981c6e1337b1a3a610ffb077db4f7f4deb73086f3a2487e69658779d368e8c7c3ed4a290fcd33b5048d2ed17bdd55cca9b73f8fcf82a4de41fd39c232e27e167225f976f9d66200f1bd35a40fee25c878f0f570116573235d2e2ea38c72fcef8593d367aaff47e2a0f3cc527320c58b626589664b74c1f646f8d2da234b6795c848ab8f2b25c8cae60bddddaba00cea7034a00d22df734149c5061614f608692c2ff8c686f1dab4bec600adc28beffff4d10126cb7b39cc7473b2df9a95