columbiacardiology.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 30:db:15:3d:77:d2:66:10:13:41:44:59:12:94:1a:18 was issued on by Internet2.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Columbia University

Organization: Columbia University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 30:db:15:3d:77:d2:66:10:13:41:44:59:12:94:1a:18
Serial Number (int): 64940487610297751774010172185676880408
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 49:a0:19:70:a0:35:fb:84:be:08:2e:c0:c4:ef:ef:a4:47:f2:28:bc
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 6b:48:42:bd:c2:1c:ca:30:fb:58:9c:df:d7:28:7e:45:73:83:64:ef
Fingerprint (sha256): 9e:b3:e2:fc:6e:a5:9a:db:f5:de:40:be:1a:32:10:92:87:db:e6:fc:07:6d:91:6f:66:4b:d3:25:38:4c:22:5d

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate columbiacardiology.org

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiacardiology.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiacardiology.org
*.babiesheartfund.com
*.babiesheartfund.org
*.columbia-bassett.org
*.columbia-ocd.org
*.columbiacardiology.net
*.columbiacardiology.org
*.columbiacenterforeatingdisorders.org
*.columbiacfcm.org
*.columbiacrownawards.org
*.columbiaeatingdisorders.org
*.columbiagraymatters.org
*.columbiaheartsource.net
*.columbiaheartsource.org
*.columbiaheartvalve.org
*.columbiaicg.org
*.columbiamedicinemagazine.com
*.columbiamnc.org
*.columbianeurology.org
*.columbianeurosurgery.org
*.columbiaortho.org
*.columbiaot.org
*.columbiaphysicaltherapy.org
*.columbiapsychiatry.org
*.columbiapsychoanalytic.org
*.columbiaspine.org
*.columbiaurology.org
*.cussp.org
*.depression-nyc.org
*.eatingdisordercenterofexcellence.org
*.harrishalperinlecture.org
*.nbdiabetes.org
*.neurocharitysoftball.org
*.nynjaetc.org
*.qclinic.org
*.scid4.org
*.scid5.org
*.thebabiesheartfund.com
*.thebabiesheartfund.org
babiesheartfund.com
babiesheartfund.org
columbia-bassett.org
columbia-ocd.org
columbiacardiology.net
columbiacenterforeatingdisorders.org
columbiacfcm.org
columbiacrownawards.org
columbiaeatingdisorders.org
columbiagraymatters.org
columbiaheartsource.net
columbiaheartsource.org
columbiaheartvalve.org
columbiaicg.org
columbiamedicinemagazine.com
columbiamedicinemagazine.org
columbiamnc.org
columbianeurology.org
columbianeurosurgery.org
columbiaortho.org
columbiaot.org
columbiaphysicaltherapy.org
columbiapsychiatry.org
columbiapsychoanalytic.org
columbiaspine.org
columbiaurology.org
cumc.p.cumcweb.org
cussp.org
depression-nyc.org
eatingdisordercenterofexcellence.org
harrishalperinlecture.org
nbdiabetes.org
neurocharitysoftball.org
nynjaetc.org
qclinic.org
sackler-institute-columbia.org
scid4.org
scid5.org
thebabiesheartfund.com
thebabiesheartfund.org
www.columbiamedicinemagazine.org
www.sackler-institute-columbia.org

Other certificates including the domain name columbiacardiology.org

(limited to 100 certificates)
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
prod.columbiacardiology.org
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
columbiacardiology.org
5767874312404992-fe2.pantheonsite.io
prod.columbiacardiology.org
www.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiadoctors.org
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.columbiacardiology.org
www.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
columbiapsychiatry.org
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
columbiacardiology.org
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiacardiology.org
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io

Certificate

The complete raw certificate details for columbiacardiology.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLRYABWgZ6XBIBG6921i
fWokTGl2CIiHThh1SiKDgCjxTzRT3sOfHEDh3rbipfsL9YpgCFAm3MFTSMWA3Wir
Oeyh4xy9rODlCr41FCNOS8+zpQOpS6Kfi3CUfBoPlH2LRFhAEHwoj6T0JDIbswq0
cUUlibHBCbhAvWljkJVWJZ7i4WDM+dvzo71rK0fiOPmhzpCdCFp0EMSdILLqmqw6
+8M7cgKGkFebGyIOc5spKtjPI0uf75gPxcarXeYwm/DRgU67bVdxIw3XEarColPH
hk98bylchD16Z8riLvnz5YhBcDnnznGOHZjcSBtPAyddNXnLNnpwf04FwIeJwoJl
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64940487610297751774010172185676880408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiacardiology.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24831638591605105018860647915519647767772802365085016616004354509774915331092198524011493120142115345110448377522860910944147511027971797228933369247550130178771593858546939863265836085119243334166677085307177777457346381836264949578202145417797731243754057728077717004704237336871842403662840506987671940438641687916435985055854726192860265881020393120024301488549683498102888132133328764676352003028594563384228653432617600104977902179262504197405365944034294133775513222883594804203133482024173188838344840796693312454857763725143520686317027178892667764167935783586038711346653575208739495715110473674887855760843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49a01970a035fb84be082ec0c4efefa447f228bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-bassett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-ocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacenterforeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacfcm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacrownawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagraymatters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaicg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamedicinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbianeurosurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychoanalytic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaspine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingdisordercenterofexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrishalperinlecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurocharitysoftball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nynjaetc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebabiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebabiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-bassett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-ocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacenterforeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacfcm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacrownawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagraymatters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaicg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamedicinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamedicinemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianeurosurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychoanalytic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaspine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.p.cumcweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatingdisordercenterofexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrishalperinlecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurocharitysoftball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nynjaetc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sackler-institute-columbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiamedicinemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sackler-institute-columbia.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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