www.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 0b:2b:02:37:ab:40:8a:fb:03:d3:72:ce:cb:b2:81:1d was issued on by Internet2.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:2b:02:37:ab:40:8a:fb:03:d3:72:ce:cb:b2:81:1d
Serial Number (int): 14844821693919182026736536310621831453
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e8:9f:e3:98:9d:6c:d3:19:af:9a:17:5d:90:da:f0:84:26:c1:73:df
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 79:14:2c:6f:e2:31:23:05:92:40:27:81:db:19:81:18:f2:b9:02:fa
Fingerprint (sha256): d0:23:12:9f:32:b0:f1:13:1f:c6:26:f9:c0:ca:54:19:ac:da:c0:78:64:59:49:18:fc:6e:8e:20:aa:75:88:35

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.cumc.columbia.edu

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cumc.columbia.edu
anesthesiology.cumc.columbia.edu
biochem.cumc.columbia.edu
brand.cumc.columbia.edu
columbia-lyme.org
columbiacardiology.org
columbiaeye.org
columbiaobgyn.org
columbiapsychiatry.org
columbiaradiology.org
columbiastemcell.org
communications.cumc.columbia.edu
compliance.cumc.columbia.edu
crr.columbia.edu
cuimc.columbia.edu
cumc.columbia.edu
dental.columbia.edu
derc.cumc.columbia.edu
dermatology.columbia.edu
epic.cumc.columbia.edu
facultyclub.cumc.columbia.edu
gca.cumc.columbia.edu
genetics.cumc.columbia.edu
hipaa.cumc.columbia.edu
ihn.cumc.columbia.edu
infectiousdiseases.cumc.columbia.edu
nyonrc.cumc.columbia.edu
pathology.columbia.edu
physicianorganization.cumc.columbia.edu
ps.columbia.edu
rheumatologyatcolumbia.org
stemcell.columbia.edu
ws.cumc.columbia.edu
www.anesthesiology.cumc.columbia.edu
www.biochem.cumc.columbia.edu
www.brand.cumc.columbia.edu
www.columbia-lyme.org
www.columbiacardiology.org
www.columbiaeye.org
www.columbiaobgyn.org
www.columbiapsychiatry.org
www.columbiaradiology.org
www.columbiastemcell.org
www.communications.cumc.columbia.edu
www.compliance.cumc.columbia.edu
www.crr.columbia.edu
www.cuimc.columbia.edu
www.dental.columbia.edu
www.derc.cumc.columbia.edu
www.dermatology.columbia.edu
www.epic.cumc.columbia.edu
www.facultyclub.cumc.columbia.edu
www.gca.cumc.columbia.edu
www.genetics.cumc.columbia.edu
www.hipaa.cumc.columbia.edu
www.ihn.cumc.columbia.edu
www.infectiousdiseases.cumc.columbia.edu
www.nyonrc.cumc.columbia.edu
www.pathology.columbia.edu
www.physicianorganization.cumc.columbia.edu
www.ps.columbia.edu
www.rheumatologyatcolumbia.org
www.stemcell.columbia.edu
www.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for www.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14844821693919182026736536310621831453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756854112430851064139666025764687444081063824386096933792767852335274162422555639392811162122847449219163862656102780991467993050089365616189004806635402949765657541538469057892142871936643627074733130000591211167250492717268121740540475415717264981281850396751889637245229517358991118312854431583641258591029077449678628077302770018704137384278362561152629633912249669496880209902534662002244606469696668418757524925775876244152492976217912348165847945022826105820124453556603964322425191653796455139667068354926059049731077582168848560815615497809553146887612447780327560181164472261945880656791348415426545422873045739938700151121126071500103972005703224969330507926805682605453122160060407107761289663543826673699184831612176760207225181078733734059527744181009194352389063166454473919617036639913636956001163039850871339894640122287379053662057027479718033254912805646241562277443156496500610671155064401025670739066636106407628921908361952377769567518202534218691021668966072475576695281318324712439941366206486812016818515465089639865819655369273941411261540907297219048972165410011522391484777211645171842513303463721077323714884903235804103023202060609713512287954558702960802878657420377791316718385369568781787125677182821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e89fe3989d6cd319af9a175d90daf08426c173df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiastemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communications.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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