dev.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number f2:4a:21:cb:b3:32:3d:9a:84:01:a5:5c:89:c0:02:44 was issued on by Internet2.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f2:4a:21:cb:b3:32:3d:9a:84:01:a5:5c:89:c0:02:44
Serial Number (int): 322058090405773683351684693929869967940
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8e:dc:17:d0:cf:af:1d:13:1b:58:d2:94:94:5e:de:a6:43:61:c6:66
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): aa:07:51:d4:29:ca:30:f1:38:20:c1:d1:ba:cf:86:ef:61:e4:1a:1a
Fingerprint (sha256): d7:f4:68:e5:03:38:f6:3b:da:79:6f:4c:1f:f4:4b:24:e7:11:67:f8:c8:39:45:2d:74:b3:a7:9c:11:27:18:af

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate dev.cumc.columbia.edu

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cumc.columbia.edu
dev.anesthesiology.cumc.columbia.edu
dev.biochem.cumc.columbia.edu
dev.columbia-lyme.org
dev.columbiacardiology.org
dev.columbiaeye.org
dev.columbiaobgyn.org
dev.columbiaortho.org
dev.columbiapsychiatry.org
dev.columbiaradiology.org
dev.communications.cuimc.columbia.edu
dev.compliance.cumc.columbia.edu
dev.congenitalheart.cuimc.columbia.edu
dev.crr.columbia.edu
dev.cuimc.columbia.edu
dev.dental.columbia.edu
dev.derc.cumc.columbia.edu
dev.dermatology.columbia.edu
dev.epic.cumc.columbia.edu
dev.facultyclub.cumc.columbia.edu
dev.gca.cumc.columbia.edu
dev.genetics.cumc.columbia.edu
dev.genmed.columbia.edu
dev.gsas.cuimc.columbia.edu
dev.hipaa.cumc.columbia.edu
dev.ihn.cumc.columbia.edu
dev.infectiousdiseases.cumc.columbia.edu
dev.irvinginstitute.columbia.edu
dev.it.cuimc.columbia.edu
dev.nyonrc.cumc.columbia.edu
dev.pathology.columbia.edu
dev.pediatrics.columbia.edu
dev.ps.columbia.edu
dev.rheumatologyatcolumbia.org
dev.stemcell.columbia.edu
dev.ws.cumc.columbia.edu
sandbox.ws.cumc.columbia.edu
stage.anesthesiology.cumc.columbia.edu
stage.biochem.cumc.columbia.edu
stage.columbia-lyme.org
stage.columbiacardiology.org
stage.columbiaeye.org
stage.columbiaobgyn.org
stage.columbiaortho.org
stage.columbiapsychiatry.org
stage.columbiaradiology.org
stage.communications.cuimc.columbia.edu
stage.compliance.cumc.columbia.edu
stage.congenitalheart.cuimc.columbia.edu
stage.crr.columbia.edu
stage.cuimc.columbia.edu
stage.cumc.columbia.edu
stage.dental.columbia.edu
stage.derc.cumc.columbia.edu
stage.dermatology.columbia.edu
stage.epic.cumc.columbia.edu
stage.facultyclub.cumc.columbia.edu
stage.gca.cumc.columbia.edu
stage.genetics.cumc.columbia.edu
stage.genmed.columbia.edu
stage.gsas.cuimc.columbia.edu
stage.hipaa.cumc.columbia.edu
stage.ihn.cumc.columbia.edu
stage.infectiousdiseases.cumc.columbia.edu
stage.irvinginstitute.columbia.edu
stage.it.cuimc.columbia.edu
stage.nyonrc.cumc.columbia.edu
stage.pathology.columbia.edu
stage.pediatrics.columbia.edu
stage.ps.columbia.edu
stage.rheumatologyatcolumbia.org
stage.stemcell.columbia.edu
stage.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for dev.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322058090405773683351684693929869967940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743738277796568714645350810954623465972969189703929260476030280294084818704046777208381555454149841609038658904689836597637668859813370406969344636586903755251627435969568832867827742851780264286870713493026526717948537031093150536294346408675600924794195693592897724482881820565736695013472862683911423366747529077164389121531496281864620990484176213646741633379001209931025888667410163101192388460944575832065527686180335404700201639044744319899404155342342770814391797757403287689844209588472669206379661523663296057736130851671473726333503773605697206465161787530419678656735632862512869182282088266784542040151493015836292236960915955849215314216681765937979459373328272469379010516621608303796989097175134557560859431678499785527454330797109381289245496495107324315754203560396665664412090347590270390297885544640335161465972709576745765174395736896192753955668151305023108031270653176241186913627652930592451067439384129964647164534287128513755709703535496986738834298184886491631592836379671167557068772279666121100951533620318203312341913303880278883209446890106151452721729073398481246408288964221650182245663862969246476388822016713759580308699478272128215556828664833358772792857068369029243172243384729176264842955386181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8edc17d0cfaf1d131b58d294945edea64361c666
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.cumc.columbia.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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