www.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 0b:2b:02:37:ab:40:8a:fb:03:d3:72:ce:cb:b2:81:1d was issued on by Internet2.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:2b:02:37:ab:40:8a:fb:03:d3:72:ce:cb:b2:81:1d
Serial Number (int): 14844821693919182026736536310621831453
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e8:9f:e3:98:9d:6c:d3:19:af:9a:17:5d:90:da:f0:84:26:c1:73:df
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e9:e7:d4:7d:2a:42:90:7d:97:0b:9a:62:3e:ec:40:10:ea:62:cf:6b
Fingerprint (sha256): 8f:a5:5e:6a:1a:b0:1d:f1:dc:9e:84:e2:60:a4:50:56:23:ad:4c:e9:20:df:2d:2f:77:75:0d:8b:d5:e4:75:27

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.cumc.columbia.edu

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cumc.columbia.edu
anesthesiology.cumc.columbia.edu
biochem.cumc.columbia.edu
brand.cumc.columbia.edu
columbia-lyme.org
columbiacardiology.org
columbiaeye.org
columbiaobgyn.org
columbiapsychiatry.org
columbiaradiology.org
columbiastemcell.org
communications.cumc.columbia.edu
compliance.cumc.columbia.edu
crr.columbia.edu
cuimc.columbia.edu
cumc.columbia.edu
dental.columbia.edu
derc.cumc.columbia.edu
dermatology.columbia.edu
epic.cumc.columbia.edu
facultyclub.cumc.columbia.edu
gca.cumc.columbia.edu
genetics.cumc.columbia.edu
hipaa.cumc.columbia.edu
ihn.cumc.columbia.edu
infectiousdiseases.cumc.columbia.edu
nyonrc.cumc.columbia.edu
pathology.columbia.edu
physicianorganization.cumc.columbia.edu
ps.columbia.edu
rheumatologyatcolumbia.org
stemcell.columbia.edu
ws.cumc.columbia.edu
www.anesthesiology.cumc.columbia.edu
www.biochem.cumc.columbia.edu
www.brand.cumc.columbia.edu
www.columbia-lyme.org
www.columbiacardiology.org
www.columbiaeye.org
www.columbiaobgyn.org
www.columbiapsychiatry.org
www.columbiaradiology.org
www.columbiastemcell.org
www.communications.cumc.columbia.edu
www.compliance.cumc.columbia.edu
www.crr.columbia.edu
www.cuimc.columbia.edu
www.dental.columbia.edu
www.derc.cumc.columbia.edu
www.dermatology.columbia.edu
www.epic.cumc.columbia.edu
www.facultyclub.cumc.columbia.edu
www.gca.cumc.columbia.edu
www.genetics.cumc.columbia.edu
www.hipaa.cumc.columbia.edu
www.ihn.cumc.columbia.edu
www.infectiousdiseases.cumc.columbia.edu
www.nyonrc.cumc.columbia.edu
www.pathology.columbia.edu
www.physicianorganization.cumc.columbia.edu
www.ps.columbia.edu
www.rheumatologyatcolumbia.org
www.stemcell.columbia.edu
www.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for www.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14844821693919182026736536310621831453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756854112430851064139666025764687444081063824386096933792767852335274162422555639392811162122847449219163862656102780991467993050089365616189004806635402949765657541538469057892142871936643627074733130000591211167250492717268121740540475415717264981281850396751889637245229517358991118312854431583641258591029077449678628077302770018704137384278362561152629633912249669496880209902534662002244606469696668418757524925775876244152492976217912348165847945022826105820124453556603964322425191653796455139667068354926059049731077582168848560815615497809553146887612447780327560181164472261945880656791348415426545422873045739938700151121126071500103972005703224969330507926805682605453122160060407107761289663543826673699184831612176760207225181078733734059527744181009194352389063166454473919617036639913636956001163039850871339894640122287379053662057027479718033254912805646241562277443156496500610671155064401025670739066636106407628921908361952377769567518202534218691021668966072475576695281318324712439941366206486812016818515465089639865819655369273941411261540907297219048972165410011522391484777211645171842513303463721077323714884903235804103023202060609713512287954558702960802878657420377791316718385369568781787125677182821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e89fe3989d6cd319af9a175d90daf08426c173df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws.cumc.columbia.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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