usegalaxy.org

- The Pennsylvania State University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 30:e1:55:ae:10:8a:09:27:38:75:25:95:a2:ad:34:c1 was issued on by Internet2.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Pennsylvania State University

Organization: The Pennsylvania State University
Organization unit: Center for Comparative Genomics and Bioinformatics
Address: 229 Computer Building
Postal code: 16802
State / Province: PA
Locality: University Park
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:e1:55:ae:10:8a:09:27:38:75:25:95:a2:ad:34:c1
Serial Number (int): 64972948386481521134820781150731842753
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c2:80:ed:6f:c3:89:25:d6:1e:34:f6:e6:7a:97:74:b0:f6:03:9a:ab
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 32:c3:7a:f2:d0:cb:21:ff:c2:09:eb:9e:c3:d7:65:10:90:94:23:07
Fingerprint (sha256): 8c:be:6c:f1:3e:9c:76:ac:af:b8:83:90:81:58:03:fd:98:ab:74:50:ed:1c:ed:06:0f:87:a6:3a:cd:d4:38:ce

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate usegalaxy.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usegalaxy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usegalaxy.org
galaxy-web-01.galaxyproject.org
galaxy-web-02.galaxyproject.org
main.g2.bx.psu.edu
test.g2.bx.psu.edu
www.usegalaxy.org

Other certificates including the domain name usegalaxy.org

(limited to 100 certificates)
usegalaxy.org
galaxyproject.org
galaxyproject.org
status.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
galaxyproject.org
usegalaxy.org
galaxyproject.org
athena.galaxyproject.org
usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
artifact.galaxyproject.org
clone-test.usegalaxy.org
artifact.galaxyproject.org
artifact.galaxyproject.org
status.galaxyproject.org
galaxyproject.org
biostar.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
usegalaxy.org
usegalaxy.org
beta.launch.usegalaxy.org
beta.launch.usegalaxy.org
artifact.galaxyproject.org
launch.usegalaxy.org
biostar.galaxyproject.org
beta.launch.usegalaxy.org
artifact.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
usegalaxy.org
usegalaxy.org
launch.usegalaxy.org
athena.galaxyproject.org
usegalaxy.org
status.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
athena.galaxyproject.org
usegalaxy.org
status.galaxyproject.org
launch.usegalaxy.org
athena.galaxyproject.org
usegalaxy.org
usegalaxy.org
artifact.galaxyproject.org
galaxy-web-04.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
launch.usegalaxy.org
launch.usegalaxy.org
launch.usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
galaxyproject.org
biostar.galaxyproject.org
galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
usegalaxy.org
artifact.galaxyproject.org
clone-test.usegalaxy.org
artifact.galaxyproject.org
usegalaxy.org
workshop.usegalaxy.org
galaxyproject.org
usegalaxy.org
biostar.galaxyproject.org
usegalaxy.org
status.galaxyproject.org
launch.usegalaxy.org
launch.usegalaxy.org
workshop.usegalaxy.org
athena.galaxyproject.org
usegalaxy.org
launch.usegalaxy.org
biostar.galaxyproject.org
biostar.galaxyproject.org
usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
athena.galaxyproject.org
athena.galaxyproject.org
usegalaxy.org
launch.usegalaxy.org
status.galaxyproject.org
usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
workshop.usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
launch.usegalaxy.org
usegalaxy.org
status.galaxyproject.org
biostar.galaxyproject.org
launch.usegalaxy.org
artifact.galaxyproject.org
launch.usegalaxy.org
galaxyproject.org
usegalaxy.org
galaxy-web-03.galaxyproject.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
*.interactivetoolentrypoint.interactivetool.usegalaxy.org
launch.usegalaxy.org
launch.usegalaxy.org
galaxyproject.org

Certificate

The complete raw certificate details for usegalaxy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fPXYAQIPXv4NtLYMS5/
vQ4aXBiwIXs6pXX9RSuBrfKM9u+ozuLlGkn7+RiXXhVhemLOt1m+xu0sj7XP0eG5
juUSPSZ0jF3aaieRd77cGUD4VOALQfbLeinFZV8WgaThTizFrHYxS6MnJYZtIsiX
sU6E+flkcmPHhcSnH/vJ2GTrZ+mxXeMQpKCh4Dc8dBrzwstUDiIwaIFzd1Ho7TVg
2QGafyOmXbkLd+F6/rNh5MlGj82rk2F1uKT/ZQKKXoodrJelvlU+OYlAusKBbzNQ
mPh1pkHFRqSk6l0yPZw4LAKF4bOWI6QRsC9tIDXeh2RVOUwuSz5k4oL1O5sZc7e8
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64972948386481521134820781150731842753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '16802'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '229 Computer Building'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pennsylvania State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Center for Comparative Genomics and Bioinformatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usegalaxy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30543674127710441940489307260556589085708843448456926418195575278583286915218708004995771671206311320531839637646087635425480713836683019081505589584170942234860723251399591006918844519738711367641589134223428045751329924367550902768214638815363512564425552908415120003995408278632275909192734517444656806551069876174079701948171039861076495680589801101596933161686145543315361741871796409313344524581314602465991778020865263956252521973325388088779454094329010204346659994931196446459417530479440020926395821113658953181578413329325034881853695547558413251620560327357165466254805315941181465207654578922318686829577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c280ed6fc38925d61e34f6e67a9774b0f6039aab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usegalaxy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxy-web-01.galaxyproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxy-web-02.galaxyproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.g2.bx.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.g2.bx.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usegalaxy.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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