dev.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 4f:ea:9f:f0:3c:bb:71:5e:63:c4:89:4e:21:72:6e:1f was issued on by Internet2.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:ea:9f:f0:3c:bb:71:5e:63:c4:89:4e:21:72:6e:1f
Serial Number (int): 106227253068587192749659492818302955039
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 24:25:89:a6:17:d8:e3:25:6f:a7:5b:99:3d:d9:79:85:d9:ef:63:45
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 81:97:5f:32:47:cc:26:c9:5d:51:16:f1:3d:79:26:a2:a1:0e:98:36
Fingerprint (sha256): df:0e:ed:23:50:b4:1b:4d:40:81:0a:20:f8:66:c2:a3:17:6d:73:c7:84:68:09:c4:73:76:5e:8b:d8:9b:a1:5b

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate dev.cumc.columbia.edu

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cumc.columbia.edu
dev.anesthesiology.cumc.columbia.edu
dev.biochem.cumc.columbia.edu
dev.brand.cumc.columbia.edu
dev.columbia-lyme.org
dev.columbiacardiology.org
dev.columbiaeye.org
dev.columbiaobgyn.org
dev.columbiapsychiatry.org
dev.columbiaradiology.org
dev.communications.cuimc.columbia.edu
dev.compliance.cumc.columbia.edu
dev.congenitalheart.cuimc.columbia.edu
dev.crr.columbia.edu
dev.cuimc.columbia.edu
dev.dental.columbia.edu
dev.derc.cumc.columbia.edu
dev.dermatology.columbia.edu
dev.epic.cumc.columbia.edu
dev.facultyclub.cumc.columbia.edu
dev.gca.cumc.columbia.edu
dev.generalmed.columbia.edu
dev.genetics.cumc.columbia.edu
dev.gsas.cuimc.columbia.edu
dev.hipaa.cumc.columbia.edu
dev.ihn.cumc.columbia.edu
dev.infectiousdiseases.cumc.columbia.edu
dev.irvinginstitute.columbia.edu
dev.nyonrc.cumc.columbia.edu
dev.pathology.columbia.edu
dev.physicianorganization.cumc.columbia.edu
dev.ps.columbia.edu
dev.rheumatologyatcolumbia.org
dev.stemcell.columbia.edu
dev.ws.cumc.columbia.edu
sandbox.ws.cumc.columbia.edu
stage.anesthesiology.cumc.columbia.edu
stage.biochem.cumc.columbia.edu
stage.brand.cumc.columbia.edu
stage.columbia-lyme.org
stage.columbiacardiology.org
stage.columbiaeye.org
stage.columbiaobgyn.org
stage.columbiapsychiatry.org
stage.columbiaradiology.org
stage.communications.cuimc.columbia.edu
stage.compliance.cumc.columbia.edu
stage.congenitalheart.cuimc.columbia.edu
stage.crr.columbia.edu
stage.cuimc.columbia.edu
stage.cumc.columbia.edu
stage.dental.columbia.edu
stage.derc.cumc.columbia.edu
stage.dermatology.columbia.edu
stage.epic.cumc.columbia.edu
stage.facultyclub.cumc.columbia.edu
stage.gca.cumc.columbia.edu
stage.generalmed.columbia.edu
stage.genetics.cumc.columbia.edu
stage.gsas.cuimc.columbia.edu
stage.hipaa.cumc.columbia.edu
stage.ihn.cumc.columbia.edu
stage.infectiousdiseases.cumc.columbia.edu
stage.irvinginstitute.columbia.edu
stage.nyonrc.cumc.columbia.edu
stage.pathology.columbia.edu
stage.physicianorganization.cumc.columbia.edu
stage.ps.columbia.edu
stage.rheumatologyatcolumbia.org
stage.stemcell.columbia.edu
stage.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for dev.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPCDCCDfCgAwIBAgIQT+qf8Dy7cV5jxIlOIXJuHzANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA3MjAwMDAwMDBaFw0yMDA3MTky
MzU5NTlaMIHAMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTAwMjcxCzAJBgNVBAgT
Ak5ZMREwDwYDVQQHEwhOZXcgWW9yazEiMCAGA1UECRMZMTE2dGggU3RyZWV0IGFu
ZCBCcm9hZHdheTEcMBoGA1UEChMTQ29sdW1iaWEgVW5pdmVyc2l0eTEfMB0GA1UE
CxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEeMBwGA1UEAxMVZGV2LmN1bWMuY29s
dW1iaWEuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvxAxFbxD
fyXe0/v3ZhL50cGKmZoOIuKTIaGYN0dXhnl6cBur1t4j2Jk1FsWREmZWKxEH57Lp
wSzamisxQX5z5EPr4wAXAY5yx54UUXmA777FTdsezOC38lcxZO09ak4MX067VxqK
5m3fImX92PpH4u78GCSWTi21FDyoh99y7kn7OoLSzktJr9ZNs5s7y+yTP0XIzzq0
9A2A9hrQ/ErSPVsK0DrObd9KfgMJKY6iOzFUE9JWvOCRMw6pocqV9Ww7LR8WYJN9
fdgvQowHD1qb5wBSPCW/AqfKFR7qY9VyjWCWY1qQx3OUGRlhGVFm7N3QQHCrmMQZ
/IoDxGSzE1isVsm0dkmQI9TdhNxi/cnBsaenpy27x8AuDbGg9Ls+FMEXNT/Frho/
Vu13WVo9RqbijpWNuvXy1fAlRz+e6CGucyBqZYZjCmsVFeInIkqV/K1kRYn43EDX
mLx/7f6flxfgfHjy6lVdAwMc16He0Fsl6yN1iEc10gG15yiB/iqTo/yvLpnLOFud
ocvMKWDZanZt/Xp0VbpVNxYd7W542zRrFXrJ+sh6EQoeVS0VjS+5Y/pD2VRL4Sjw
ttwtAFfc4PIfdBxSpm1eEfR1ms4QDa7U5aAUTX9dMAxfTiXyZWHt/0VLGuYH/nLR
SL467M26o1p/xtYRUJ/VxGFyMiJ3DPSFJwcCAwEAAaOCCkUwggpBMB8GA1UdIwQY
MBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBQkJYmmF9jjJW+nW5k9
2XmF2e9jRTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQDAQEw
QjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQvcmVw
b3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5oDegNYYz
aHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2VydmVyQ0Eu
Y3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2NydC51c2Vy
dHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUHMAGG
GWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAw
ggiFBgNVHREEggh8MIIIeIIVZGV2LmN1bWMuY29sdW1iaWEuZWR1giRkZXYuYW5l
c3RoZXNpb2xvZ3kuY3VtYy5jb2x1bWJpYS5lZHWCHWRldi5iaW9jaGVtLmN1bWMu
Y29sdW1iaWEuZWR1ghtkZXYuYnJhbmQuY3VtYy5jb2x1bWJpYS5lZHWCFWRldi5j
b2x1bWJpYS1seW1lLm9yZ4IaZGV2LmNvbHVtYmlhY2FyZGlvbG9neS5vcmeCE2Rl
di5jb2x1bWJpYWV5ZS5vcmeCFWRldi5jb2x1bWJpYW9iZ3luLm9yZ4IaZGV2LmNv
bHVtYmlhcHN5Y2hpYXRyeS5vcmeCGWRldi5jb2x1bWJpYXJhZGlvbG9neS5vcmeC
JWRldi5jb21tdW5pY2F0aW9ucy5jdWltYy5jb2x1bWJpYS5lZHWCIGRldi5jb21w
bGlhbmNlLmN1bWMuY29sdW1iaWEuZWR1giZkZXYuY29uZ2VuaXRhbGhlYXJ0LmN1
aW1jLmNvbHVtYmlhLmVkdYIUZGV2LmNyci5jb2x1bWJpYS5lZHWCFmRldi5jdWlt
Yy5jb2x1bWJpYS5lZHWCF2Rldi5kZW50YWwuY29sdW1iaWEuZWR1ghpkZXYuZGVy
Yy5jdW1jLmNvbHVtYmlhLmVkdYIcZGV2LmRlcm1hdG9sb2d5LmNvbHVtYmlhLmVk
dYIaZGV2LmVwaWMuY3VtYy5jb2x1bWJpYS5lZHWCIWRldi5mYWN1bHR5Y2x1Yi5j
dW1jLmNvbHVtYmlhLmVkdYIZZGV2LmdjYS5jdW1jLmNvbHVtYmlhLmVkdYIbZGV2
LmdlbmVyYWxtZWQuY29sdW1iaWEuZWR1gh5kZXYuZ2VuZXRpY3MuY3VtYy5jb2x1
bWJpYS5lZHWCG2Rldi5nc2FzLmN1aW1jLmNvbHVtYmlhLmVkdYIbZGV2LmhpcGFh
LmN1bWMuY29sdW1iaWEuZWR1ghlkZXYuaWhuLmN1bWMuY29sdW1iaWEuZWR1gihk
ZXYuaW5mZWN0aW91c2Rpc2Vhc2VzLmN1bWMuY29sdW1iaWEuZWR1giBkZXYuaXJ2
aW5naW5zdGl0dXRlLmNvbHVtYmlhLmVkdYIcZGV2Lm55b25yYy5jdW1jLmNvbHVt
YmlhLmVkdYIaZGV2LnBhdGhvbG9neS5jb2x1bWJpYS5lZHWCK2Rldi5waHlzaWNp
YW5vcmdhbml6YXRpb24uY3VtYy5jb2x1bWJpYS5lZHWCE2Rldi5wcy5jb2x1bWJp
YS5lZHWCHmRldi5yaGV1bWF0b2xvZ3lhdGNvbHVtYmlhLm9yZ4IZZGV2LnN0ZW1j
ZWxsLmNvbHVtYmlhLmVkdYIYZGV2LndzLmN1bWMuY29sdW1iaWEuZWR1ghxzYW5k
Ym94LndzLmN1bWMuY29sdW1iaWEuZWR1giZzdGFnZS5hbmVzdGhlc2lvbG9neS5j
dW1jLmNvbHVtYmlhLmVkdYIfc3RhZ2UuYmlvY2hlbS5jdW1jLmNvbHVtYmlhLmVk
dYIdc3RhZ2UuYnJhbmQuY3VtYy5jb2x1bWJpYS5lZHWCF3N0YWdlLmNvbHVtYmlh
LWx5bWUub3JnghxzdGFnZS5jb2x1bWJpYWNhcmRpb2xvZ3kub3JnghVzdGFnZS5j
b2x1bWJpYWV5ZS5vcmeCF3N0YWdlLmNvbHVtYmlhb2JneW4ub3JnghxzdGFnZS5j
b2x1bWJpYXBzeWNoaWF0cnkub3JnghtzdGFnZS5jb2x1bWJpYXJhZGlvbG9neS5v
cmeCJ3N0YWdlLmNvbW11bmljYXRpb25zLmN1aW1jLmNvbHVtYmlhLmVkdYIic3Rh
Z2UuY29tcGxpYW5jZS5jdW1jLmNvbHVtYmlhLmVkdYIoc3RhZ2UuY29uZ2VuaXRh
bGhlYXJ0LmN1aW1jLmNvbHVtYmlhLmVkdYIWc3RhZ2UuY3JyLmNvbHVtYmlhLmVk
dYIYc3RhZ2UuY3VpbWMuY29sdW1iaWEuZWR1ghdzdGFnZS5jdW1jLmNvbHVtYmlh
LmVkdYIZc3RhZ2UuZGVudGFsLmNvbHVtYmlhLmVkdYIcc3RhZ2UuZGVyYy5jdW1j
LmNvbHVtYmlhLmVkdYIec3RhZ2UuZGVybWF0b2xvZ3kuY29sdW1iaWEuZWR1ghxz
dGFnZS5lcGljLmN1bWMuY29sdW1iaWEuZWR1giNzdGFnZS5mYWN1bHR5Y2x1Yi5j
dW1jLmNvbHVtYmlhLmVkdYIbc3RhZ2UuZ2NhLmN1bWMuY29sdW1iaWEuZWR1gh1z
dGFnZS5nZW5lcmFsbWVkLmNvbHVtYmlhLmVkdYIgc3RhZ2UuZ2VuZXRpY3MuY3Vt
Yy5jb2x1bWJpYS5lZHWCHXN0YWdlLmdzYXMuY3VpbWMuY29sdW1iaWEuZWR1gh1z
dGFnZS5oaXBhYS5jdW1jLmNvbHVtYmlhLmVkdYIbc3RhZ2UuaWhuLmN1bWMuY29s
dW1iaWEuZWR1gipzdGFnZS5pbmZlY3Rpb3VzZGlzZWFzZXMuY3VtYy5jb2x1bWJp
YS5lZHWCInN0YWdlLmlydmluZ2luc3RpdHV0ZS5jb2x1bWJpYS5lZHWCHnN0YWdl
Lm55b25yYy5jdW1jLmNvbHVtYmlhLmVkdYIcc3RhZ2UucGF0aG9sb2d5LmNvbHVt
YmlhLmVkdYItc3RhZ2UucGh5c2ljaWFub3JnYW5pemF0aW9uLmN1bWMuY29sdW1i
aWEuZWR1ghVzdGFnZS5wcy5jb2x1bWJpYS5lZHWCIHN0YWdlLnJoZXVtYXRvbG9n
eWF0Y29sdW1iaWEub3JnghtzdGFnZS5zdGVtY2VsbC5jb2x1bWJpYS5lZHWCGnN0
YWdlLndzLmN1bWMuY29sdW1iaWEuZWR1MA0GCSqGSIb3DQEBCwUAA4IBAQCIcXX4
aUCDlz1O5XslXN8WSJRYT8M8Ysd3xlWO1G16OUlVD2oTB/c5hdKmAM4BSHvaC7Xd
S6PZqg3F3mECKMw8QV9rk0EGnjVEp1MqJdb1h48DzHLuHNsWnC4rrN71acUG+J0d
Gy9b++wTd+Fh5VVYZUo1aJirpTNNDaLUX5WsmgSeKzjM+Q725wi7rOyLb0AaQLHw
y+9nn7QOH0jETCRbOTr2/mJJnw1E4MLbYHGQVzgQZ/4wsOmD7txWhbiD3T4DrA3v
8BBZo0pubkJlLdVaI3TVAFwgLf7rTqDLT9C7ae0jBxcmf1RYILvgLsIPnSuw55Xs
PP4sOOnMhBYD1uCN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106227253068587192749659492818302955039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779470050302387149711467984070243692984983556328148392784747101762057599876222311298905988818129765963805961725573946982689065624707450288686620463666082746980443922154591720753885663523575189467344430119100460747847243286579703426514549932521431440208410444951058433106192223748623497617721722788468870152130304699570094195525143438226879006784500677920044700182735442769714874783325322519798215723476379963508327484679183287494998471249114580839183094887154792277835351658297131483813927198093197892190091114225771458121624526894432144869300812365293691192329315511295952036064636947933492455843840267633880592162918161641465422044585660732170375063516481444022427754076672300540948168417732373536362486149377871382687888726174237898065059845172597478744393649402943590681810730482695303327391606614230462090199934540833995063963350977923685389473088988405486927417378251612692536872211007537204150746938529318218747539063689418511862404421739573774307771010109451572411518498830845117185213691585337270325623326971022052447394605224372295274061979399210402929324902864537238049649200825657458771123463403505732624896237552092970760052697040644295579106046592725240262032205701903914613588178227751732646617597015429149655466059527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							242589a617d8e3256fa75b993dd97985d9ef6345
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.generalmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.brand.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.generalmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.physicianorganization.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ws.cumc.columbia.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00887175f8694083973d4ee57b255cdf164894584fc33c62c777c6558ed46d7a3949550f6a1307f73985d2a600ce01487bda0bb5dd4ba3d9aa0dc5de610228cc3c415f6b9341069e3544a7532a25d6f5878f03cc72ee1cdb169c2e2bacdef569c506f89d1d1b2f5bfbec1377e161e55558654a356898aba5334d0da2d45f95ac9a049e2b38ccf90ef6e708bbacec8b6f401a40b1f0cbef679fb40e1f48c44c245b393af6fe62499f0d44e0c2db60719057381067fe30b0e983eedc5685b883dd3e03ac0deff01059a34a6e6e42652dd55a2374d5005c202dfeeb4ea0cb4fd0bb69ed230717267f545820bbe02ec20f9d2bb0e795ec3cfe2c38e9cc841603d6e08d