www.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 28:87:f2:76:86:c1:5a:b7:d4:97:50:33:37:ad:46:e7 was issued on by Internet2.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:87:f2:76:86:c1:5a:b7:d4:97:50:33:37:ad:46:e7
Serial Number (int): 53874997641050839436740617923843671783
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 96:9b:39:57:58:ae:6f:c6:1d:1d:7b:50:cc:03:c6:bd:7f:73:cb:4d
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 5e:9b:a6:89:e9:a1:f3:19:49:33:ff:d6:4f:2b:9c:9a:5e:70:1c:00
Fingerprint (sha256): 97:ae:e7:40:07:b3:73:22:dd:a8:2f:d5:75:88:27:ed:32:df:4a:21:a5:c1:c4:e5:65:e6:d5:e3:55:7f:b2:bd

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.cumc.columbia.edu

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cumc.columbia.edu
alscenter.cuimc.columbia.edu
anesthesiology.cumc.columbia.edu
biochem.cumc.columbia.edu
columbia-lyme.org
columbiacardiology.org
columbiaeye.org
columbiaobgyn.org
columbiaortho.org
columbiapsychiatry.org
columbiaradiology.org
columbiastemcell.org
communications.cuimc.columbia.edu
compliance.cumc.columbia.edu
congenitalheart.cuimc.columbia.edu
crr.columbia.edu
cuimc.columbia.edu
cumc.columbia.edu
dental.columbia.edu
derc.cumc.columbia.edu
dermatology.columbia.edu
emergencymedicine.columbia.edu
epic.cumc.columbia.edu
facultyclub.cumc.columbia.edu
gca.cumc.columbia.edu
genetics.cumc.columbia.edu
genmed.columbia.edu
giving.cuimc.columbia.edu
gsas.cuimc.columbia.edu
gsas.cumc.columbia.edu
hipaa.cumc.columbia.edu
ihn.cumc.columbia.edu
infectiousdiseases.cumc.columbia.edu
irvinginstitute.columbia.edu
it.cuimc.columbia.edu
nyonrc.cumc.columbia.edu
pathology.columbia.edu
pediatrics.columbia.edu
physicianorganization.cuimc.columbia.edu
ps.columbia.edu
rheumatologyatcolumbia.org
stemcell.columbia.edu
ws.cumc.columbia.edu
www.alscenter.cuimc.columbia.edu
www.anesthesiology.cumc.columbia.edu
www.biochem.cumc.columbia.edu
www.columbia-lyme.org
www.columbiacardiology.org
www.columbiaeye.org
www.columbiaobgyn.org
www.columbiaortho.org
www.columbiapsychiatry.org
www.columbiaradiology.org
www.columbiastemcell.org
www.communications.cuimc.columbia.edu
www.compliance.cumc.columbia.edu
www.congenitalheart.cuimc.columbia.edu
www.crr.columbia.edu
www.cuimc.columbia.edu
www.dental.columbia.edu
www.derc.cumc.columbia.edu
www.dermatology.columbia.edu
www.emergencymedicine.columbia.edu
www.epic.cumc.columbia.edu
www.facultyclub.cumc.columbia.edu
www.gca.cumc.columbia.edu
www.genetics.cumc.columbia.edu
www.genmed.columbia.edu
www.giving.cuimc.columbia.edu
www.gsas.cuimc.columbia.edu
www.gsas.cumc.columbia.edu
www.hipaa.cumc.columbia.edu
www.ihn.cumc.columbia.edu
www.infectiousdiseases.cumc.columbia.edu
www.irvinginstitute.columbia.edu
www.it.cuimc.columbia.edu
www.nyonrc.cumc.columbia.edu
www.pathology.columbia.edu
www.pediatrics.columbia.edu
www.physicianorganization.cuimc.columbia.edu
www.ps.columbia.edu
www.rheumatologyatcolumbia.org
www.stemcell.columbia.edu
www.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for www.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQ/DCCD+SgAwIBAgIQKIfydobBWrfUl1AzN61G5zANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xOTAzMDcwMDAwMDBaFw0yMTAzMDYy
MzU5NTlaMIHAMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTAwMjcxCzAJBgNVBAgT
Ak5ZMREwDwYDVQQHEwhOZXcgWW9yazEiMCAGA1UECRMZMTE2dGggU3RyZWV0IGFu
ZCBCcm9hZHdheTEcMBoGA1UEChMTQ29sdW1iaWEgVW5pdmVyc2l0eTEfMB0GA1UE
CxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEeMBwGA1UEAxMVd3d3LmN1bWMuY29s
dW1iaWEuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Zf3NiZb
1aYvhgnAfiv4AUb/apKTnSUijpUko3444D/RHZhAjOFLrGYJX7dcaMsKJPmTzc/R
Kmgf/VPCnBOFR/cjgyjnbuM63JawO0PezAhKXFGQOkxa3D6cvj/ySfAc6/0Os6z2
XZZZ6/4mDnP3Q+v85QZ889vgVYOuRzX4qGRjpllIWM05jB+A/uwUVl9NiQbO4ocf
ohIRQNhqer6zgcbb17nI918HMDEuh40KDf9s7q/D4MUpQEshi0dXpgIkuicsusM3
Lnv54B+0Lf8PTQsldFEflTHYpaFXVwZ+3E7/xpBH7GGn83gCHM6oDW8JsgCRzfrc
cRmu/9EBhjYWcJWC5X6n11PNIxJQ8eYriYK/8noG4GW4lXxsJjKqA7Y0itqZbFov
xROG463hLuamdCPOgre5IhRvZjv7C7ydfPutVVpofDCtNtYt0xteTUaVkVVc463x
/N7JBOvY5Q+baP0fI56QPVoWXrM25kAx7NfTW10pp+4D7t6pVJSaJVAgWm0k3Qlq
bWBQyPCHMUVgZfZgx/4G/4Z+gd4Wi5hwGQTyoXO39cTOKjr/mtpbFzzBe78Ag0KI
iaLg8alH5xPuO1blavuRn/joPXx6U2TH9I3aMskyioHSU+KtFHw1JaYCl4G4bxdy
kyifhKs49OeJIo3FGH7oaOW6uCzaTnVwwx8CAwEAAaOCDDkwggw1MB8GA1UdIwQY
MBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBSWmzlXWK5vxh0de1DM
A8a9f3PLTTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQDAQEw
QjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQvcmVw
b3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5oDegNYYz
aHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2VydmVyQ0Eu
Y3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2NydC51c2Vy
dHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUHMAGG
GWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wggkNBgNVHREEggkEMIIJAIIVd3d3
LmN1bWMuY29sdW1iaWEuZWR1ghxhbHNjZW50ZXIuY3VpbWMuY29sdW1iaWEuZWR1
giBhbmVzdGhlc2lvbG9neS5jdW1jLmNvbHVtYmlhLmVkdYIZYmlvY2hlbS5jdW1j
LmNvbHVtYmlhLmVkdYIRY29sdW1iaWEtbHltZS5vcmeCFmNvbHVtYmlhY2FyZGlv
bG9neS5vcmeCD2NvbHVtYmlhZXllLm9yZ4IRY29sdW1iaWFvYmd5bi5vcmeCEWNv
bHVtYmlhb3J0aG8ub3JnghZjb2x1bWJpYXBzeWNoaWF0cnkub3JnghVjb2x1bWJp
YXJhZGlvbG9neS5vcmeCFGNvbHVtYmlhc3RlbWNlbGwub3JngiFjb21tdW5pY2F0
aW9ucy5jdWltYy5jb2x1bWJpYS5lZHWCHGNvbXBsaWFuY2UuY3VtYy5jb2x1bWJp
YS5lZHWCImNvbmdlbml0YWxoZWFydC5jdWltYy5jb2x1bWJpYS5lZHWCEGNyci5j
b2x1bWJpYS5lZHWCEmN1aW1jLmNvbHVtYmlhLmVkdYIRY3VtYy5jb2x1bWJpYS5l
ZHWCE2RlbnRhbC5jb2x1bWJpYS5lZHWCFmRlcmMuY3VtYy5jb2x1bWJpYS5lZHWC
GGRlcm1hdG9sb2d5LmNvbHVtYmlhLmVkdYIeZW1lcmdlbmN5bWVkaWNpbmUuY29s
dW1iaWEuZWR1ghZlcGljLmN1bWMuY29sdW1iaWEuZWR1gh1mYWN1bHR5Y2x1Yi5j
dW1jLmNvbHVtYmlhLmVkdYIVZ2NhLmN1bWMuY29sdW1iaWEuZWR1ghpnZW5ldGlj
cy5jdW1jLmNvbHVtYmlhLmVkdYITZ2VubWVkLmNvbHVtYmlhLmVkdYIZZ2l2aW5n
LmN1aW1jLmNvbHVtYmlhLmVkdYIXZ3Nhcy5jdWltYy5jb2x1bWJpYS5lZHWCFmdz
YXMuY3VtYy5jb2x1bWJpYS5lZHWCF2hpcGFhLmN1bWMuY29sdW1iaWEuZWR1ghVp
aG4uY3VtYy5jb2x1bWJpYS5lZHWCJGluZmVjdGlvdXNkaXNlYXNlcy5jdW1jLmNv
bHVtYmlhLmVkdYIcaXJ2aW5naW5zdGl0dXRlLmNvbHVtYmlhLmVkdYIVaXQuY3Vp
bWMuY29sdW1iaWEuZWR1ghhueW9ucmMuY3VtYy5jb2x1bWJpYS5lZHWCFnBhdGhv
bG9neS5jb2x1bWJpYS5lZHWCF3BlZGlhdHJpY3MuY29sdW1iaWEuZWR1gihwaHlz
aWNpYW5vcmdhbml6YXRpb24uY3VpbWMuY29sdW1iaWEuZWR1gg9wcy5jb2x1bWJp
YS5lZHWCGnJoZXVtYXRvbG9neWF0Y29sdW1iaWEub3JnghVzdGVtY2VsbC5jb2x1
bWJpYS5lZHWCFHdzLmN1bWMuY29sdW1iaWEuZWR1giB3d3cuYWxzY2VudGVyLmN1
aW1jLmNvbHVtYmlhLmVkdYIkd3d3LmFuZXN0aGVzaW9sb2d5LmN1bWMuY29sdW1i
aWEuZWR1gh13d3cuYmlvY2hlbS5jdW1jLmNvbHVtYmlhLmVkdYIVd3d3LmNvbHVt
YmlhLWx5bWUub3Jnghp3d3cuY29sdW1iaWFjYXJkaW9sb2d5Lm9yZ4ITd3d3LmNv
bHVtYmlhZXllLm9yZ4IVd3d3LmNvbHVtYmlhb2JneW4ub3JnghV3d3cuY29sdW1i
aWFvcnRoby5vcmeCGnd3dy5jb2x1bWJpYXBzeWNoaWF0cnkub3Jnghl3d3cuY29s
dW1iaWFyYWRpb2xvZ3kub3Jnghh3d3cuY29sdW1iaWFzdGVtY2VsbC5vcmeCJXd3
dy5jb21tdW5pY2F0aW9ucy5jdWltYy5jb2x1bWJpYS5lZHWCIHd3dy5jb21wbGlh
bmNlLmN1bWMuY29sdW1iaWEuZWR1giZ3d3cuY29uZ2VuaXRhbGhlYXJ0LmN1aW1j
LmNvbHVtYmlhLmVkdYIUd3d3LmNyci5jb2x1bWJpYS5lZHWCFnd3dy5jdWltYy5j
b2x1bWJpYS5lZHWCF3d3dy5kZW50YWwuY29sdW1iaWEuZWR1ghp3d3cuZGVyYy5j
dW1jLmNvbHVtYmlhLmVkdYIcd3d3LmRlcm1hdG9sb2d5LmNvbHVtYmlhLmVkdYIi
d3d3LmVtZXJnZW5jeW1lZGljaW5lLmNvbHVtYmlhLmVkdYIad3d3LmVwaWMuY3Vt
Yy5jb2x1bWJpYS5lZHWCIXd3dy5mYWN1bHR5Y2x1Yi5jdW1jLmNvbHVtYmlhLmVk
dYIZd3d3LmdjYS5jdW1jLmNvbHVtYmlhLmVkdYIed3d3LmdlbmV0aWNzLmN1bWMu
Y29sdW1iaWEuZWR1ghd3d3cuZ2VubWVkLmNvbHVtYmlhLmVkdYIdd3d3Lmdpdmlu
Zy5jdWltYy5jb2x1bWJpYS5lZHWCG3d3dy5nc2FzLmN1aW1jLmNvbHVtYmlhLmVk
dYIad3d3LmdzYXMuY3VtYy5jb2x1bWJpYS5lZHWCG3d3dy5oaXBhYS5jdW1jLmNv
bHVtYmlhLmVkdYIZd3d3Lmlobi5jdW1jLmNvbHVtYmlhLmVkdYIod3d3LmluZmVj
dGlvdXNkaXNlYXNlcy5jdW1jLmNvbHVtYmlhLmVkdYIgd3d3LmlydmluZ2luc3Rp
dHV0ZS5jb2x1bWJpYS5lZHWCGXd3dy5pdC5jdWltYy5jb2x1bWJpYS5lZHWCHHd3
dy5ueW9ucmMuY3VtYy5jb2x1bWJpYS5lZHWCGnd3dy5wYXRob2xvZ3kuY29sdW1i
aWEuZWR1ght3d3cucGVkaWF0cmljcy5jb2x1bWJpYS5lZHWCLHd3dy5waHlzaWNp
YW5vcmdhbml6YXRpb24uY3VpbWMuY29sdW1iaWEuZWR1ghN3d3cucHMuY29sdW1i
aWEuZWR1gh53d3cucmhldW1hdG9sb2d5YXRjb2x1bWJpYS5vcmeCGXd3dy5zdGVt
Y2VsbC5jb2x1bWJpYS5lZHWCGHd3dy53cy5jdW1jLmNvbHVtYmlhLmVkdTCCAX0G
CisGAQQB1nkCBAIEggFtBIIBaQFnAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga
kJZkNo4e0YUAAAFpWSW45gAABAMARzBFAiEAqoBQU5KqQ/WNfJfkQMUu8e9tbls0
tNYK8NWnIAaQ33sCIG8URFpcGjhfCP6sTAb9mE3OvRgNAFbxGG7daEMk2K3fAHUA
RJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFpWSW5JwAABAMARjBE
AiAqXo5RHa0vavIHbUEmwv7pFlFFwjypr3itKrE8XndeRgIgBj1YTrb0hb8oiOt1
LLkfZLqF0dThvqPTjnbdhHstijoAdgBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOU
sl7m9scOygAAAWlZJbk1AAAEAwBHMEUCIGYF4BHM8qZO6ttDgA50ffhraqIU3VZF
/GQiSo8nBizmAiEAl2Oyi3QCHcbTOlZABy2do0GlXar9yJMS07zPZYkvID8wDQYJ
KoZIhvcNAQELBQADggEBABd/CGuc02Eepl55HBvQ/EmYpDUYcKNRUeuiMuuqg3JM
009QiAh0rXLpS1g3xPLGMKPvFPy4Q07/3BNm9W6GtAHbD5yBPSj9Kpd66Cmo3Kap
f8o8R8PB2hq7+ADSVe7hyD57fsywD5Qajg9yyuvMiAT46jI/XzQiDej1dXf5ZsW/
WjHXCJjqueYeuz8C6w8fbxH/XbvO5s1XszB34JGMAxHztKeo33r14bXj0+3tXzV3
ZQ8rtgG2wwEvylnGAePwObJEJ/ShHLVwK9CSvQUHXWjCdzPvgb/1utawDhbuTb6n
Y836kGkxxtl/3lSUfiD5v4/rlEmPmLW+WU9/FZAYzf4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53874997641050839436740617923843671783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871385928067204815331836932209158714777328211021986833998827562478869983442192670275584277254126657016382148014462388717267273999020297912483184226764298890490221217823532490076805125086385734383086169664067029379434090991123699737158489370185343973838128766326436239617325900503699217740313446473685771083722383783500470139212806441898526221866480694709816832637461966648141932840201348850885388572667831174248049096063100335627357519671554282911291451918028736361368432962455292500875297298563300469794280404714373050477012043501462044002882396496219433485740795002233492222841480614675166284922784374070780009311228078299042758651266728531846379358390238833715327732480464454740228926727454435066172849945323057793707238509218118486620261202228792541803792967193915210146987446148932489272249860601755581672492142793000307853650103508593172007004222046959856533847551745805555445327976507521263789380937311246179333199066803739388721112831118868318455217329970737768044074999069172081545740758321184313281307290219711904219937685456388626480145244997690367056993811538502648295584262669934905187567086873493327836705351081165646230774838985428706569361232497652441069007527001689954258450609760264848642308360137182271545663341343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							969b395758ae6fc61d1d7b50cc03c6bd7f73cb4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alscenter.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencymedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsas.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicianorganization.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alscenter.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergencymedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsas.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physicianorganization.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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