www.columbiaradiology.org

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d7:f6:be:65:29:0f:7a:9d:23:4d:19:14:bd:cb:d0:20 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 612 W 115 St
Postal code: 10025
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d7:f6:be:65:29:0f:7a:9d:23:4d:19:14:bd:cb:d0:20
Serial Number (int): 287065185793533186346378480848806334496
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 68:f0:00:9b:cc:f7:e8:8f:51:7f:7c:cb:03:83:3b:6a:80:15:87:86
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 22:b3:b5:69:7a:23:e8:62:26:de:43:5c:cd:3a:12:8e:80:38:e0:86
Fingerprint (sha256): d4:4d:7a:23:be:3f:ea:6e:87:dd:bd:3c:08:a8:b5:0f:58:75:d6:bd:3c:25:66:fe:7e:dd:79:8c:1e:23:f8:49

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate www.columbiaradiology.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.columbiaradiology.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.columbiaradiology.org
columbiaradiology.org

Other certificates including the domain name columbiaradiology.org

(limited to 100 certificates)
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
www.cumc.columbia.edu
columbiaobgyn.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
columbiapsychiatry.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
columbiadoctors.org
dev.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
columbiapsychiatry.org
columbiadoctors.org
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.columbiaradiology.org
www.cumc.columbia.edu
www.cumc.columbia.edu
columbiadoctors.org
cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
www.cumc.columbia.edu
www.columbiaradiology.org
prod.cumc.columbia.edu
dev.cumc.columbia.edu
www.cumc.columbia.edu
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
columbiaobgyn.org
prod.cumc.columbia.edu
www.cumc.columbia.edu
dev.cumc.columbia.edu
cumc.columbia.edu
dev.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
dev.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
prod.cumc.columbia.edu
cumc.columbia.edu
prod.cumc.columbia.edu

Certificate

The complete raw certificate details for www.columbiaradiology.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287065185793533186346378480848806334496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10025'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '612 W 115 St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.columbiaradiology.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728395588274724019449687413569796026283687494974069221871978719250040678334835756969851387113719736121929697818592228341001615638937232097803584979428811385310542388886332407470106644116061224319487837070622112453442375206287874652957651454981417243615325900772870320789568888372590168531660651493500662679141491548566783867662514417581158565679071198266446283689155122450827548208227822278744366875983758886427116487127946738093165151266150163295611528756161162790176132354284963809233978861544399390134025511702021023151166034565871784143597783391293946760523469871723946829445831746662550978825214223455225621930236250514012712451410841901602256225284714330439037215886672284582262300827078142771320574683492752089052152535169594049509049393134259603035879804670896737312790612978803023011653584416913776710830361831884336609696210089713244875717344227732767048266486855432778473066360993465818528835551052653101308814546116655870086192681406204744504591434610108432403107027178335881607384958131885205637035118056374492340325232409749914681190071827995638780276143812334501470398694673998268805626449601804053519972446936351587521005857354866364402899040441266976206374309557720596038341353680394718799826593858437387294821654803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68f0009bccf7e88f517f7ccb03833b6a80158786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaradiology.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a7ffc469dd95ce598f1367b04f6bd8e894516fa6405e225d83f71a8c593ded18bd1c5849541d9cf4082aa7d293cac7a84109b58f25f9c6f3d1aa706493172d05bf3f9002f7c903db3d94de414ec2aaadbd06915ea7c105f3fbcd5259046e233da0a79b3f58f4de585958d377bccf01a4a8f1093d2d8020e2cfe6f8c499039f356e44f81d2732db8addb24567e04116d509ef63c02e9e707cd91d487c8acfd30d980370c2356bf22e48057d51d2e3948d78951ee8c3dd073a5728812a747b39d2d6030e65e97a8434101c6aedf94d5d0a9489236911c558f7e55f8479e43e1a38d7a6bb1169a6072690beadef36594aaa64d6fa2a18fe996e430ffe58f9f41ca