vpsim.pitt.edu

- University of Pittsburgh -

Issued by InCommon IGTF Server CA

About this certificate

This digital certificate with serial number 65:aa:51:a4:29:4f:1e:c6:c2:27:64:f3:78:0b:65:ae was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pittsburgh

Organization: University of Pittsburgh
Organization unit: Computing Services and Systems Development
State / Province: Pennsylvania
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:aa:51:a4:29:4f:1e:c6:c2:27:64:f3:78:0b:65:ae
Serial Number (int): 135136373921608507864655180503513261486
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cb:6d:7f:6e:87:82:2a:93:13:d6:36:fb:6b:16:98:3d:a3:a3:17:38
AuthorityKeyId: 61:e6:5f:c9:27:ba:40:f8:ec:28:06:f3:89:32:5a:56:5f:e2:8e:d1

Fingerprint (sha1): 9d:40:db:ff:72:84:31:5f:14:2c:5d:a1:1d:06:33:30:f9:f5:1f:37
Fingerprint (sha256): c8:39:ad:b5:00:8e:85:a6:3e:01:90:05:bd:9e:7b:f1:12:9a:50:4c:75:d6:d2:81:b1:2c:3b:0d:1b:58:b6:92

Issuing Certificate URL: http://crt.incommon-igtf.org/InCommonIGTFServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon-igtf.org
CRL Distribution Point: http://crl.incommon-igtf.org/InCommonIGTFServerCA.crl

Check the revocation status for certificate vpsim.pitt.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpsim.pitt.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpsim.pitt.edu

Other certificates including the domain name pitt.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
online.orientation.pitt.edu
www.wiser.pitt.edu
my.pulmonarytrials.pitt.edu
www.ctmhr.pitt.edu
www.chronicle.pitt.edu
pitt-dr-vcweb.cssd.pitt.edu
statuspage.io
www.diabetesprevention.pitt.edu
statuspage.io
aro.pitt.edu
services.rods.pitt.edu
statuspage.io
coi.hs.pitt.edu
cutislaxa.hgen.pitt.edu
www.medstudentaffairs.pitt.edu
www.cwscholars.blog.pitt.edu
my.education.pitt.edu
www.scholarlyproject.medschool.pitt.edu
go.innovation.pitt.edu
pjephl.law.pitt.edu
jmla.pitt.edu
telerehab.pitt.edu
tincture.pharmacy.pitt.edu
valet.haa.pitt.edu
www.games4socialimpact.pitt.edu
www.pts.pitt.edu
www.phdl.pitt.edu
omed.pitt.edu
www.collision.pitt.edu
www.upgservices.pitt.edu
clip.pharmacy.pitt.edu
eval.medschool.pitt.edu
fsc-bbm-fe01qa.fis.pitt.edu
www.roc.pitt.edu
www.iise.pitt.edu
navigator.medschool.pitt.edu
rms-pgaw-01.cssd.pitt.edu
5673649784750080-fe1.pantheonsite.io
*.tt.pitt.edu
dev-itbill.pitt.edu
www.rusfilm.pitt.edu
www.totalrewards.pitt.edu
statuspage.io
stage.fm.pitt.edu
ssoe-sp13-01.engr.pitt.edu
ewi-zweb-19.cssd.pitt.edu
passport.pitt.edu
securedns1.planmygift.org
scherlock.lrdc.pitt.edu
www.aspire.pitt.edu
shrsft6029himb.shrs.pitt.edu
www.ucisportfolios.pitt.edu
anthro-age.pitt.edu
durrantlab.bio.pitt.edu
www.collision.pitt.edu
scalefunder.net
overdrive.library.pitt.edu
katz-sepm.univ.pitt.edu
ppr.pitt.edu
www.gso.cs.pitt.edu
www.law.pitt.edu
rd-r9-26-cons-1.net.pitt.edu
www.ois.pitt.edu
www.ncbrr.pitt.edu
www.connect.pitt.edu
stage.lamp.pitt.edu
www.alumnionline.pitt.edu
moira.pitt.edu
oam.pitt.edu
www.exhibit.library.pitt.edu
data.act.pitt.edu
www.cba.pitt.edu
stage-pittdc-01.univad.stage.pitt.edu
www.publichealth.pitt.edu
www.osp.pitt.edu
contacts.katz.pitt.edu
50.shrs.pitt.edu
chassis.hsrdc.pitt.edu
www.japanstudies.pitt.edu
www.students.pharmacy.pitt.edu
5673649784750080-fe1.pantheonsite.io
www.hopeteam.pitt.edu
www.pediatrics.pitt.edu
www.medfaculty.pitt.edu
statuspage.io
statuspage.io
www.medadmissions.pitt.edu
www.cmh.pitt.edu
rms-sjaw-01.cssd.pitt.edu
statuspage.io
www.intranet.chem.pitt.edu
www.polyglot.pitt.edu
stage.gspia.pitt.edu
software.pitt.edu
www.pittcash.pitt.edu
www.borges.pitt.edu
statuspage.io
www.lgbthlres.pitt.edu

Certificate

The complete raw certificate details for vpsim.pitt.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Bo1CR2l4V1WfR+fm1n5
AMoXIgY3DsH1gAlqJ5TF9eVdFwqwz6LGL9rxsLWXdLlQEobxAUCpdYPTy97970mp
qYpfPlsW9NSYjIVFUamY9lE8JHGF+O1KNcxRtvstdGGfmtr5cVexdZU3ZGvZs7kC
ToWdgwxZtbre0hG+x5u7YebsffR5HbqmtRCYRvW99DKs8+G5dqO3PwbB+ulE0nKx
DRcsiUR1reil8TnKlj30/mfc6+LiEWJV6IgHMW4ixIEJXasqDFutiY2oWeeFb8YM
8Y5I7o6Uzjdge67cP2dwq8LMWQwWdr0T11fUKxOVDPWNyroCFKM+GTnNDZ6hhTiH
O9gXAGaRiLA6m1ZpqRUIx/CJnJqVo8n9Zh+hr+DTZZAMazlqffidQzefsJ0SyEhQ
aUZaI9vek9jiSzPVdgJiPp2ocI4KW6UvF7fgtVYI/uUucYrNYEaMlc9Y5UstvckV
k/YUQLy0F2CAAnswqyPeoYna6BYkB2k1IXpmcaGezQj15hrYCM0I6lqK5nLqTPDd
spv/PdTgup/+8GovGtU2EGIqrscOdwip1YOEtQc3ZRuCwoDnDcKDL1xRWpcP207u
IdiW0SjXwit4NNiTZCMLfH4ZItOELUdH6XReCAdaDzlkIYIPYpSzWXFt026Fgh8D
7uzRoyT7oWv7mDJjTnsw1bkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135136373921608507864655180503513261486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon IGTF Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'incommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Services and Systems Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpsim.pitt.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881620759032357996232014922632458673506783512779518460303705644093368236927796422378162375468318436412655010312964676638861379421597751190882270676699708839667877751711499968878477606555005407947590727938769938507078371537407976340215299102415440029064174891456468756357022490709117754507723169601925338606763572009681404422301737090350329828661097848437134400782014122269028419351929541956033373422752664102878654656319946491507371507237527614182574534034555278299295937695337451411294116393335505622044506150610036180731326515267484424275865069745625123855979583809784454328669714674557196394531039226336780783307080196448959728808965580926711946280404160436870239999243075558528867610475977392767598688186190580178499837342072088087434257708995298131159426301871620276117348218596819052588504650202071375659026202541936919641722855125509047011630952372897373531256836199846921350678915754452971436168789228006387226820781956687746853537261048595500302664244227971087791337150731152034721759627424748264525642656495267551599978354720864447249859128773617270294215693421819357067162684068414848718495998135191519555321600373296081984881191132486882000256173157369457821141008026131040639284001564786278867774721580974517424688780729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61e65fc927ba40f8ec2806f389325a565fe28ed1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb6d7f6e87822a9313d636fb6b16983da3a31738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.4.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-igtf.org/InCommonIGTFServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.incommon-igtf.org/InCommonIGTFServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon-igtf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpsim.pitt.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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