columbiapsychiatry.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f3:79:d1:21:f3:68:21:f9:de:af:72:6c:01:a7:e1:e1 was issued on by Internet2.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: New York
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f3:79:d1:21:f3:68:21:f9:de:af:72:6c:01:a7:e1:e1
Serial Number (int): 323634912609084543547725203258244325857
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ba:4b:20:14:fc:23:7a:5b:21:f3:63:bf:79:e4:0c:4c:6c:00:7a:ec
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 0c:5f:1a:38:6f:df:37:df:24:aa:f0:f8:13:81:c7:17:6d:90:78:fa
Fingerprint (sha256): a6:f1:ad:d2:c7:f0:55:f4:01:ef:cc:4b:de:65:e6:23:db:ca:60:49:39:bb:a8:63:da:e6:c9:c0:ed:ef:2f:cf

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate columbiapsychiatry.org

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiapsychiatry.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

columbiapsychiatry.org
*.childrensorthopaedics.com
*.columbia-lyme.org
*.columbiaals.org
*.columbiacardiology.org
*.columbiadoctors.org
*.columbiaeye.org
*.columbiafertility.org
*.columbiagi.org
*.columbiaheartsource.org
*.columbiaheartvalve.org
*.columbiamnc.org
*.columbianeurology.org
*.columbiaobgyn.org
*.columbiaortho.org
*.columbiaot.org
*.columbiaphysicaltherapy.org
*.columbiapsychiatry.org
*.columbiaradiology.org
*.columbiastemcell.org
*.columbiaurology.org
*.cussp.org
*.depression-nyc.org
*.entcolumbia.org
*.legacygirlsstudy.org
*.narrativemedicine.org
*.nbdiabetes.org
*.prenatalpediatrics.org
*.raraf.org
*.rheumatologyatcolumbia.org
*.scid4.org
*.scid5.org
*.transplantforum.org
childrensorthopaedics.com
columbia-lyme.org
columbiaals.org
columbiacardiology.org
columbiadoctors.org
columbiaeye.org
columbiafertility.org
columbiagi.org
columbiaheartsource.org
columbiaheartvalve.org
columbiamnc.org
columbianeurology.org
columbiaobgyn.org
columbiaortho.org
columbiaot.org
columbiaphysicaltherapy.org
columbiaradiology.org
columbiastemcell.org
columbiaurology.org
cussp.org
depression-nyc.org
entcolumbia.org
legacygirlsstudy.org
narrativemedicine.org
nbdiabetes.org
prenatalpediatrics.org
raraf.org
rheumatologyatcolumbia.org
scid4.org
scid5.org
transplantforum.org

Other certificates including the domain name columbiapsychiatry.org

(limited to 100 certificates)
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
columbiacardiology.org
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiadoctors.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiacardiology.org
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiacardiology.org
prod.cumc.columbia.edu
columbiapsychiatry.org
columbiadoctors.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
www.cumc.columbia.edu
columbiadoctors.org
cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu

Certificate

The complete raw certificate details for columbiapsychiatry.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQJvzw1eCcL3wSiahfSz
cXSzICawUm1eIn5xm1SFOpy4h/lh97RE9r+Y/m0qxSIv/iGfJKA3WGaG5HEtJXkr
/h22oaN/uFCcqtjjpeQs1fcBjJP/mt5cZId2PAwQYTOnO1Qzy59/TPvooowveuRr
fe/do+0O7QAXeSnpxBA121Fncx6z/Eqp8qdNlVMvMYLQ13YC2yNta+kIqriJ79zM
r1hS4Pdas/RSmtVUqRS17ZeGcC6/DkRXNryIT2YsL+nC/TfRNoRP2YfKOhC6AGPQ
5XAptmp/IO9bizso3DtsMjWjuUtUxyZfAK2ag7l8Xhpd6nUPjmYfMkbtQv3G2gFM
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323634912609084543547725203258244325857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiapsychiatry.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24870147686059627197922677982920331754049553066874335948022238757662640675724370332146235977006826321237206759176978189637731527566530614514475424915599363836597743858045933131868199866709659253322115680183785479368741192995769173224376145883682144930895401785815508213260056185906457619576622609127997317218438812019836376858941391599112716115250992607930205427188476560772061302293789353838601193749967941948452537186239148503774888520329531504832371097006930606001530032814368742259287896587652137430708113289967995870530143715751031084366134452427108291351084901141379154548069628424528875875093825649177044012241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba4b2014fc237a5b21f363bf79e40c4c6c007aec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiagi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narrativemedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transplantforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensorthopaedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiafertility.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiagi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartsource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaheartvalve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbianeurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaphysicaltherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaurology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cussp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depression-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygirlsstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narrativemedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenatalpediatrics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raraf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scid5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transplantforum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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