status.lt.ucsc.edu

- University of California, Santa Cruz -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number fc:03:3e:88:bc:0c:c6:94:2a:af:b9:38:eb:0d:b0:5b was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of California, Santa Cruz

Organization: University of California, Santa Cruz
State / Province: California
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fc:03:3e:88:bc:0c:c6:94:2a:af:b9:38:eb:0d:b0:5b
Serial Number (int): 334982300170998559516167028424942923867
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ff:ed:30:d2:f0:2f:ee:e3:70:ee:51:41:cc:73:7c:8b:bd:70:f0:b2
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): f1:7c:e2:64:f5:20:01:bd:03:fb:46:b7:e8:2f:30:e3:44:b8:c9:0d
Fingerprint (sha256): 7c:35:85:21:7a:d2:1a:b0:3b:4e:f0:28:b9:ab:23:99:9a:99:37:ca:5f:4c:45:64:60:f9:86:ed:89:90:28:c8

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate status.lt.ucsc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for status.lt.ucsc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

status.lt.ucsc.edu

Other certificates including the domain name ucsc.edu

(limited to 100 certificates)
farmandgardenwiki.ucsc.edu
5631986051842048-fe1.pantheonsite.io
it.uahs.arizona.edu
connect.ucsc.edu
wcms.ucsc.edu
cp-scanner.ucsc.edu
docker.eads.soe.ucsc.edu
calendar.sdzsafaripark.org
monitor.soe.ucsc.edu
applygrad.ucsc.edu
cscenter.pbsci.ucsc.edu
5707090131681280-fe3.pantheonsite.io
746f6675.ucsc.edu
wordpress.ucsc.edu
sho-prod-web-2.ad.ucsc.edu
banking-business-review.com
undergrad.pbsci.ucsc.edu
hyperion.ucsc.edu
ecommons.ucsc.edu
utility.lt.ucsc.edu
iacuc.ucsc.edu
stage.cghub.ucsc.edu
dunkin.eeb.ucsc.edu
campusrec.ucsc.edu
5684453372329984-fe2.pantheonsite.io
5638159220080640-fe2.pantheonsite.io
banking-business-review.com
my.prd.ais.aws.ucsc.edu
gradadmissions.ucsc.edu
pleiades.ucsc.edu
scalefunder.net
ugr.ue.ucsc.edu
noc-dev-vise-1.ucsc.edu
ur-tst-nav.ucsc.edu
5754079087165440-fe4.pantheonsite.io
scalefundercert.net
ecommons.ucsc.edu
5631986051842048-fe1.pantheonsite.io
208.lsnc.net
drs.sandbox.dev.singlecell.gi.ucsc.edu
wildlife.ucsc.edu
5679052450955264-fe2.pantheonsite.io
win-sys-mgr-1.lt.ucsc.edu
5682747733442560-fe3.pantheonsite.io
wcms-prod-web-5.ucsc.edu
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
its-prod-www2-2.ucsc.edu
5638159220080640-fe2.pantheonsite.io
5682747733442560-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
bsg-sandbox.ucsc.edu
drs.sandbox.dev.singlecell.gi.ucsc.edu
service.sandbox.dev.singlecell.gi.ucsc.edu
banking-business-review.com
urlogin.ucsc.edu
shs-prd-bkr1.au.ucsc.edu
genecats.gi.ucsc.edu
5156937704407040-fe1.pantheonsite.io
hyperion.ucsc.edu
5707090131681280-fe3.pantheonsite.io
csp.ucsc.edu
5156937704407040-fe1.pantheonsite.io
campusrec.ucsc.edu
ad-prod-rdcb-1.ad.ucsc.edu
vi-prod-vpsc-1.au.ucsc.edu
5156937704407040-fe1.pantheonsite.io
gitlab.soe.ucsc.edu
gradlab.ucsc.edu
pcr360-test.ucsc.edu
saturn.ucsc.edu
208.lsnc.net
pisa.tst.ais.aws.ucsc.edu
161511-web1.vilcek.org
*.courses.soe.ucsc.edu
libportal.ucsc.edu
5156937704407040-fe1.pantheonsite.io
scalefundercert.net
griffin.ucsc.edu
shs-prod-app-2.ad.ucsc.edu
hacking4oceans.ucsc.edu
pisa-dev.ucsc.edu
5638159220080640-fe2.pantheonsite.io
cf-prd-app-1.ucsc.edu
research-it.ucsc.edu
5717044213317632-fe3.pantheonsite.io
mmapl.ucsc.edu
*.ue.ucsc.edu
*.ucsc.edu
noc-prod-vise-2.ucsc.edu
hexcalc.gi.ucsc.edu
ppc-webdav.ucsc.edu
5679052450955264-fe2.pantheonsite.io
gradadmissions.ucsc.edu
sctv.ucsc.edu
ais-reports.rds.ucsc.edu
static.ucsc.edu
ccrec.ucsc.edu
gradadmissions.ucsc.edu

Certificate

The complete raw certificate details for status.lt.ucsc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGczCCBNugAwIBAgIRAPwDPoi8DMaUKq+5OOsNsFswDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjEhMB8GA1UEAxMYSW5D
b21tb24gUlNBIFNlcnZlciBDQSAyMB4XDTI0MDYwNTAwMDAwMFoXDTI1MDcwNjIz
NTk1OVowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExLTArBgNV
BAoTJFVuaXZlcnNpdHkgb2YgQ2FsaWZvcm5pYSwgU2FudGEgQ3J1ejEbMBkGA1UE
AxMSc3RhdHVzLmx0LnVjc2MuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAzcm71b+6/LOyegS6ABSqfpWDlEoIOeOxo2et3T/TRpym2xId2Ejc/3Dl
y2/3BNcodJ95iHOetq0clj4F9domSkIvHixup0lbsxxj07ZfcSr8GY04lFWzVlY2
UgYmybqfRC2S6xa5sQY1VvVs78pI20w/StoEdtu3Fz36qGPxkk5RiUI2J/F5T0EM
LALUsRD+ea3I8c/KythGb/Etmdn9a1QJYVvu76XPmkIHhBfjw61V3dbHHwL6zyYk
zNpygjZ5X+y85yrHQRJxSlh1rrYJxzPUwIKF2lJtsqeFmtFc3jhZm4OnmWM/fvao
UtqxARBtVlTS8WcqXq3aSA59MKAzXuUj5Cd+PPNjF7/1+ApgQcAv924kGEiaP2KQ
Q9c0GsDY92xIs5wAOPYF2CYUQEc02qioMuRj5vL73TOBBrJZdu0wlCUQmP9rU5Oq
B7fRvcXzgH5+ED9+crxigI5LYnq4mZ0wcT4tNuWp1iDX1532Rb6kxs/wFRdI9wwz
6k99NbjZAgqRqByTJbevBGFI62CN315SgDKKnI+w1HYATOGIBy66uHqBh0ID+Xu1
48CAJ+MneuqDn9UykwAntKBIzIQ1F6I3XmJ3ZJcy4n4FjUdnGiZckbkeIQZr0/AX
6i2cGut94pq2z7c6IrO3LiihTz7YKa0MnBOM3WSpCkHN3+10iuECAwEAAaOCAbQw
ggGwMB8GA1UdIwQYMBaAFO9MAJKm+3YuXpXiyV+HGxnVTeLZMB0GA1UdDgQWBBT/
7TDS8C/u43DuUUHMc3yLvXDwsjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr
BgEEAbIxAQICZzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ
UzAIBgZngQwBAgIwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5zZWN0aWdv
LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBMi5jcmwwcAYIKwYBBQUHAQEEZDBiMDsG
CCsGAQUFBzAChi9odHRwOi8vY3J0LnNlY3RpZ28uY29tL0luQ29tbW9uUlNBU2Vy
dmVyQ0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20w
HQYDVR0RBBYwFIISc3RhdHVzLmx0LnVjc2MuZWR1MBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBDAUAA4IBgQBtNkA4edAZRy56hyiTnszs8hkAVr2HxzkN
MfcbXjAm4WBcRCsvVmzo2CskaiS3alowQIYRcrwLMtmQeK/PRrguInDlpjR4W66u
T797DnJsXUTW/tb9o04tg6AXoQZ2ugMD1B6+RajSthyC5/zFj01/4W7U4q5tS3g+
JOfwv/wScRIRf5FeexkIETn3Vi3dVBf29E584HZ0+oNiD2Sm8HayxVeSL7XVa0uL
ipG5jym4Novt6pLLss+1hMiVz2g3lzRNSam1LzJi2wKD9E2LS7uP7LbBVD5N1WOq
n6Xd+VIYW67D02yEPEy2/KChbOEOC/jTBne8vqQtTq2iFhPHKrDnnLjFuC8PWxWF
6ErlC+YtQephjUeSV/XgXQrpcKhz0em5MKlwn2GMwm3okcQN/w0KUgoSTiPeQPyz
68moxrZyZRxueUGGP1Pzg62GiIi9LRNBiQbKLOW/xwkqjYCDjv7gV5esvS1L6bxX
lLL54kmXptsZMrRmSo9r3jf0IgCOmZU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334982300170998559516167028424942923867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of California, Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.lt.ucsc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839541884788416459666600510868630084703539856688175181802122925647010401427324792595820172986033372689099019668166102001348330113257008884221199846521204101870090967469254563938051494590970425507054822018933688284356290483501089830756652209562220678743369140567127027191345294648627759583904608475654311203754776681568600007275857592399775717228407933388970606600913157160725446898108133626684508816364935951362827818902585414701793730030384313957315800688638751822275992870776411469311386126280593680111630037832893602940166455753018722916089076847012102577031858051663277955331074765840448938162974154006585176059635645227124664828367389318275338930819003729647026400007744884300447957082626101064338826869937269946568085607553088558373901505135685152750487212008740861617387236050956340388798800526741119389708507464491346434048195232728521290922273231132460259428247141425565645727078249834297184559434623116373898386336805437161826618702356799983949188861754413928588770706557354296789667065128671003605815615700025026153869041663880332071019458417611907523673963306798663291024828900550152277759819080940317921564329989978912306002149912806405338507233821298072744975013502958374127253604755071525480952436395818912345599806177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffed30d2f02feee370ee5141cc737c8bbd70f0b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lt.ucsc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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