dev.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 8f:8d:bb:d0:53:cc:04:73:b5:46:cc:9a:a7:6f:42:26 was issued on by Internet2.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:8d:bb:d0:53:cc:04:73:b5:46:cc:9a:a7:6f:42:26
Serial Number (int): 190815526570283964056495584940458459686
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e4:c4:4c:29:07:14:c3:9b:2a:db:35:20:2a:3a:8d:a3:6b:0b:0f:18
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 93:b3:aa:ce:f7:e6:e4:47:59:ab:b9:5a:d9:17:42:43:54:34:46:48
Fingerprint (sha256): 9f:44:fa:69:21:9c:53:7b:6b:1e:6f:40:0f:37:0e:de:07:aa:1b:f7:45:dd:13:4e:f4:78:22:f3:aa:95:80:de

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate dev.cumc.columbia.edu

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cumc.columbia.edu
dev.anesthesiology.cumc.columbia.edu
dev.biochem.cumc.columbia.edu
dev.columbia-lyme.org
dev.columbiacardiology.org
dev.columbiaeye.org
dev.columbiaobgyn.org
dev.columbiaortho.org
dev.columbiapsychiatry.org
dev.columbiaradiology.org
dev.communications.cuimc.columbia.edu
dev.compliance.cumc.columbia.edu
dev.congenitalheart.cuimc.columbia.edu
dev.crr.columbia.edu
dev.cuimc.columbia.edu
dev.dental.columbia.edu
dev.derc.cumc.columbia.edu
dev.dermatology.columbia.edu
dev.epic.cumc.columbia.edu
dev.facultyclub.cumc.columbia.edu
dev.gca.cumc.columbia.edu
dev.genetics.cumc.columbia.edu
dev.genmed.columbia.edu
dev.giving.cuimc.columbia.edu
dev.gsas.cuimc.columbia.edu
dev.hipaa.cumc.columbia.edu
dev.ihn.cumc.columbia.edu
dev.infectiousdiseases.cumc.columbia.edu
dev.irvinginstitute.columbia.edu
dev.it.cuimc.columbia.edu
dev.nyonrc.cumc.columbia.edu
dev.pathology.columbia.edu
dev.pediatrics.columbia.edu
dev.ps.columbia.edu
dev.rheumatologyatcolumbia.org
dev.stemcell.columbia.edu
dev.ws.cumc.columbia.edu
sandbox.ws.cumc.columbia.edu
stage.anesthesiology.cumc.columbia.edu
stage.biochem.cumc.columbia.edu
stage.columbia-lyme.org
stage.columbiacardiology.org
stage.columbiaeye.org
stage.columbiaobgyn.org
stage.columbiaortho.org
stage.columbiapsychiatry.org
stage.columbiaradiology.org
stage.communications.cuimc.columbia.edu
stage.compliance.cumc.columbia.edu
stage.congenitalheart.cuimc.columbia.edu
stage.crr.columbia.edu
stage.cuimc.columbia.edu
stage.cumc.columbia.edu
stage.dental.columbia.edu
stage.derc.cumc.columbia.edu
stage.dermatology.columbia.edu
stage.epic.cumc.columbia.edu
stage.facultyclub.cumc.columbia.edu
stage.gca.cumc.columbia.edu
stage.genetics.cumc.columbia.edu
stage.genmed.columbia.edu
stage.giving.cuimc.columbia.edu
stage.gsas.cuimc.columbia.edu
stage.hipaa.cumc.columbia.edu
stage.ihn.cumc.columbia.edu
stage.infectiousdiseases.cumc.columbia.edu
stage.irvinginstitute.columbia.edu
stage.it.cuimc.columbia.edu
stage.nyonrc.cumc.columbia.edu
stage.pathology.columbia.edu
stage.pediatrics.columbia.edu
stage.ps.columbia.edu
stage.rheumatologyatcolumbia.org
stage.stemcell.columbia.edu
stage.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for dev.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0IpZhC7o0Vhg7YABxpha
4uITk4wws5ylL03otqKFJ4jUJoQIi8iwW8pN9++rPdh+LuglJRqOmxSCAeiQ098p
/9Lnx2VdmOTdUrbUrqHJcvtIzPLXUJ/oQVS3LssF89/MnyS4ofXlAh4mZHjOICwH
AiMJ30wViEN45DQM2mBL+mcAjuTLREsZF6MfJ4ogOy68AsMdcdJD7MmOMHMb5CNu
t/png/5cB2oEtQ6umssTzuUyvSzhoJWEWZLKX9D1h0IDCYBdIjWNbubqWRPxkL7x
gOA6FONeXiX6tAJOG/7yqIG7CsY8EShqjCmyoIOHmUzzPBKa/mpz06ay156D41Vg
LyRonX93LkAOpy7/GatHaWhWTrnx5wLhlju1vKckMSDEThzi8nxcrqwlySbk92/5
6965H3RTKtJ0LGk8DYv/P6U064dyDA0LS/ac+MgSi3lrBYMlVo1B4JzFZPJ0jwK+
+lxLTYxnCQ/UNPdFdhGhnhvfjmt0LkPQDnCIRWWTyw9TvSOR7psOcVZN69tRcE05
E2RZe4Mmh8leMqS367iqKD/gGT6ZXjbSdo9RrZ5oiSmpzFrc5dGI529jVwuHLvml
USchWADHIttG3XiIa44dlcgWtT0med/aR95ksbFkoE9uEdrNcWrXGUR3kBF/DU6F
rdZxnoxlq/2kPSDrwc1IyHUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190815526570283964056495584940458459686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850770721709155564698317286986152185747720081198877105280202688027693589663422841203867982465547272116256769432455385598026948710611684674044975920588568696326426610082752012193886058557716033563031839035096262093961825365831663556461080144096664592881561123137883674933562199211448541786734578476076321757537052275858601813182029316074018594554038865716272658229869265627231700931783935856879728835994725894409072601224475567246800462807025918413017033663532304511665247532158342878618557975876592342991833642766879374969278861391644832677169781743165940170696872867890964172702645127547089874311692938658002444970665728243546031823969229335174078136734544295099258261069368208875950892185951954935954452606319400723231833302027749760347735365694609122842838398801361853507489224476581422640980489829756374517872141336986718358571472896212368681602384570653640796975365748789555909616606706299787872257855593177697952886786166771254801655514217528812137296569465275269173781950754733994849684043124512204978377035320046653131878842576302436867055516511278881512922630923646270506527843239973502039532740220738523906375166689331034161575019356698202922738755059933248672733155301124616770388205183703841305125205093856014334371088501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4c44c290714c39b2adb35202a3a8da36b0b0f18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.cumc.columbia.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00659e88bb803c6d1988beebb1d067c00fcd49c13285c14e2a438ebd88eaf28a5f2ede219328a730cdf93160d8a3fd3e5e8620424abed70752e2ba1c652ea14956537e10dfaf4cda7194c9296019785dae15221a91927e347d20f339d47e5bc5ad65a0f65d57198c9604a04133a370d14e2d1ecdcaf08640a4c7c570a7c434bb5cbcb9f26f21a4a8acdd1ad8e5a245f2322616f5347cb96b95c38e59b6d53c9b05835873fbc50db61f1e9f06d3d24c59974d9d23736e1f07b9e33f654816da2d8f908e7ff722e8bfb8021faab9ff9af591e4b041c8a125797b3b4b916c43d4dca3f67ee6102a353da24d78f9ff58e02bb3d525bc8016df2b05023fde9f6822cc26