columbiacardiology.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 95:dc:b2:d6:83:57:8c:4e:df:7f:74:ec:8b:c4:76:69 was issued on by Internet2.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
State / Province: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 95:dc:b2:d6:83:57:8c:4e:df:7f:74:ec:8b:c4:76:69
Serial Number (int): 199200903945214730610008704395960940137
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 75:14:52:9e:a1:b0:81:a4:da:23:81:79:05:24:05:36:68:95:fb:c6
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): e5:c4:3b:de:a2:f6:76:5b:a1:9a:3e:29:74:45:bd:72:c8:50:d7:c7
Fingerprint (sha256): a2:b1:a8:82:11:9e:0c:8e:7a:72:49:4d:05:51:f9:7b:e1:da:5f:38:ae:2f:e9:b1:fc:ba:3a:b6:d8:6b:23:d2

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate columbiacardiology.org

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiacardiology.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiacardiology.org
*.babiesheartfund.com
*.babiesheartfund.org
*.columbia-bassett.org
*.columbia-ocd.org
*.columbiacardiology.net
*.columbiacardiology.org
*.columbiacenterforeatingdisorders.org
*.columbiacfcm.org
*.columbiacrownawards.org
*.columbiaeatingdisorders.org
*.columbiagraymatters.org
*.columbiaheartsource.net
*.columbiaheartsource.org
*.columbiaheartvalve.org
*.columbiaicg.org
*.columbiamedicinemagazine.com
*.columbiamnc.org
*.columbianeurology.org
*.columbianeurosurgery.org
*.columbiaortho.org
*.columbiaot.org
*.columbiaphysicaltherapy.org
*.columbiapsychiatry.org
*.columbiapsychoanalytic.org
*.columbiaspine.org
*.columbiaurology.org
*.cussp.org
*.depression-nyc.org
*.eatingdisordercenterofexcellence.org
*.harrishalperinlecture.org
*.nbdiabetes.org
*.neurocharitysoftball.org
*.nynjaetc.org
*.qclinic.org
*.scid4.org
*.scid5.org
*.thebabiesheartfund.com
*.thebabiesheartfund.org
babiesheartfund.com
babiesheartfund.org
columbia-bassett.org
columbia-ocd.org
columbiacardiology.net
columbiacenterforeatingdisorders.org
columbiacfcm.org
columbiacrownawards.org
columbiaeatingdisorders.org
columbiagraymatters.org
columbiaheartsource.net
columbiaheartsource.org
columbiaheartvalve.org
columbiaicg.org
columbiamedicinemagazine.com
columbiamedicinemagazine.org
columbiamnc.org
columbianeurology.org
columbianeurosurgery.org
columbiaortho.org
columbiaot.org
columbiaphysicaltherapy.org
columbiapsychiatry.org
columbiapsychoanalytic.org
columbiaspine.org
columbiaurology.org
cumc.p.cumcweb.org
cussp.org
depression-nyc.org
eatingdisordercenterofexcellence.org
harrishalperinlecture.org
nbdiabetes.org
neurocharitysoftball.org
nynjaetc.org
qclinic.org
scid4.org
scid5.org
thebabiesheartfund.com
thebabiesheartfund.org
www.columbiamedicinemagazine.org

Other certificates including the domain name columbiacardiology.org

(limited to 100 certificates)
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
prod.columbiacardiology.org
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
prod.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
columbiacardiology.org
5767874312404992-fe2.pantheonsite.io
prod.columbiacardiology.org
www.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
dev.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5757126366461952-fe4.pantheonsite.io
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiadoctors.org
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.columbiacardiology.org
www.cumc.columbia.edu
5757126366461952-fe4.pantheonsite.io
prod.cumc.columbia.edu
columbiapsychiatry.org
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
www.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
5767874312404992-fe2.pantheonsite.io
columbiacardiology.org
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiacardiology.org
5757126366461952-fe4.pantheonsite.io
5767874312404992-fe2.pantheonsite.io

Certificate

The complete raw certificate details for columbiacardiology.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xwlO6HegOajsZUG8ftP
twbKVOTt8pexAdmG7LJcluLDgC8idUvofv+cgNCFX8ZOdzOFAQ1LCikMB6xOSn7s
AVzHHw0vw4uQ4hGpDpW9JqWLJ10IY4eHDpsSSxDYjDJU6xYGNfo1ll0ahxLOrJ2G
waAUYEAVrEjhB9G+ndLhkkDPtR5YoRUdd1juSUcTmrScpObgAQt6cTBhiypw1gqm
vb9N7grAbl1Witm0/9hpfZ/YPLxt3SIbu1GNmcrCUIuUGIlW+qGYJqled4NJlx98
Q9X2BvAxr84sANYcoc2RakaMCHCBGIGsUHa1aiJWRj333vver4o+jwQD2k09DNj+
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199200903945214730610008704395960940137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiacardiology.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31699693580798710916752034345447800711096451139842833941207865958467782489876805048631308996135666035133347665401882218578015706970229833972466143148780344966962838313458511177113710999594580058553242865676527776879962328297127534626335595629947265320309942071617244128318607821279256975622373023941259603189771240020269116158824292337702389923899415238044626152750746864653935352490561297628758623050171736467123605370603917147385883732984927853177896476239433670995503041546150586050283411993451605989175431550218473374888222038941346662672555267823797389896645503620103183234672885326943293135705018559693179125451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7514529ea1b081a4da238179052405366895fbc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188e03dac480000040300463044022065a936c5a724103308f5f6ea17acda1a65810607f74aa9674545cfd7d11c22c102201d597068646677b971e2ad0a11ecdfed1fdb34f4dd7b119049cd8b94e0969464007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188e03dac9c000004030047304502204666854a9a740f8d43ae7d819440aad355ae709bfded062f871a5053860d04d4022100b112ab7f141895d325909fbe8fa0bf51ea5cf85f6dd26e70d9930b623505d13f007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188e03dacbb000004030046304402204b18a0100014aa0677a9671349fb06794d4d9c0c68191c29d50b381a5749ad7e022043b41ff1f5192556d51854bc25c94de2f237a65400a5d53524b508f29283b541
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-bassett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-ocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacenterforeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacfcm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacrownawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagraymatters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaicg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamedicinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbianeurosurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychoanalytic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaspine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingdisordercenterofexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrishalperinlecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurocharitysoftball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nynjaetc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebabiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebabiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-bassett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-ocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacenterforeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacfcm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacrownawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeatingdisorders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagraymatters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaicg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamedicinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamedicinemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianeurosurgery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychoanalytic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaspine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.p.cumcweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatingdisordercenterofexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrishalperinlecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurocharitysoftball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nynjaetc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabiesheartfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabiesheartfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiamedicinemagazine.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00949b56eb6207ee26c7cbc2749aaa7deb871df78403780d016876166a37c1e92e6228e21b7f9ed20f428f3527703a45067f2a17fe774dfba21b2bdd6af8502de6e648c8d9816ddd62107bb9d08c304156521bdcc390c401984a03293c1b0e17ee3d3f5c95603f67cdc7275b54d5eb8cedcbfc6cb386a7374e4da957fd8ee3518a90aa148c2369550d8e4d0e4c3dcc6ef39e3a352d2eafeab8cd8f8cf51f3eb26df795e37257315724dc71b0da21f839cb3451f5096821cefcdc4a2c36a2c21dd01412c394bfe95013db668233eac96cca1df214d517201b279a574e15300daff7460ab55e896b4a4326693be80488ca6f227107fff7461c4266b3027903392aab