embed-tool.apps.cuonline.edu

- University of Colorado Denver -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 12:41:93:93:36:47:03:2f:c1:30:37:e6:00:4c:0e:60 was issued on by Sectigo Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Colorado Denver

Organization: University of Colorado Denver
Organization unit: OIT
Organization unit: Hosted by University of Colorado Denver
Organization unit: Unified Communications
Address: 13001 East 17th Place
Postal code: 80045
State / Province: Colorado
Locality: Aurora
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 12:41:93:93:36:47:03:2f:c1:30:37:e6:00:4c:0e:60
Serial Number (int): 24266596397482915212095336208361328224
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: dc:8c:53:81:95:51:3f:5a:57:db:01:98:1d:07:29:2c:a3:c2:09:96
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): f8:45:b5:f9:2b:28:c7:28:66:97:6b:5c:44:6e:7f:23:8c:52:16:32
Fingerprint (sha256): eb:75:58:19:f9:5c:65:b1:d6:50:fe:b9:6c:00:0f:f8:d6:7d:22:ca:f7:fd:25:4c:f1:54:65:9d:70:05:bd:e0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate embed-tool.apps.cuonline.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for embed-tool.apps.cuonline.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

embed-tool.apps.cuonline.edu

Other certificates including the domain name cuonline.edu

(limited to 100 certificates)
cuonline.edu
blackboard.cuonline.edu
mediu.cuonline.edu
cuonline.edu
www.connect-a.cuonline.edu
cuonline.edu
blackboard.cuonline.edu
www.connect-c.cuonline.edu
cuonline.edu
cuonline.edu
cuonline.edu
cuonline.edu
apps.cuonline.edu
cuonline.edu
cuonline.edu
cuonline.edu
apps.cuonline.edu
www.connect-b.cuonline.edu
hosting.cuonline.edu
connect.cuonline.edu
connect.cuonline.edu
www.connect-a.cuonline.edu
blackboard.cuonline.edu
cuonline.edu
www.connect-b.cuonline.edu
cuonline.edu
cuonline.edu
thewolf.cuonline.edu
thewolf.cuonline.edu
connect.cuonline.edu
thewolf-dev.cuonline.edu
cuonline.edu
embed-tool.apps.cuonline.edu
cuonline.edu
cuonline.edu
cuonline.edu
www.connect-c.cuonline.edu

Certificate

The complete raw certificate details for embed-tool.apps.cuonline.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyW1JAps7iU7jY6KNIWoy
GzTIUH1IzpeLJ14/cyku/Vf90yEKtoxSjt9yRpulYEkjSO8gUranH3/lrBzHYbxk
gD5yOfh2OVND2152e6G5lsr8IxO/6DlPhU7cxPdwlFHO3DtSv67IpcJBhvU6t05L
ejDdZXOLtJ11D6ggc2nOCOKfcOyGPmB2zigIMVHpvqHBnIg42EKigepEg1OvNMMx
VJ2thRG9ll3K2FWHUHygAprhmwG3KeeHaWwuTZQpjfqR3RBI3ukizeWSC+NUMZ7B
oHTVEpExlhAKDt7JB7auFPOLGt3TcVP3fim78KPRuRGg2DS1y3xjnJdf8e/SF1Ru
nlrVq6hVfyG07xb6ilJKKLg9XCUe/H2xSvcqLP6nN3z1Ud9DfN1m9Wjrr8Y8d3u9
+m+pJVDjQlZVLpYQzqIQpiCpbLuNHpPi/GxqnRKK59m09RkrsdbRVaeMt+cQH25Q
CIQqBkAhLw8s5EqW4JdjVWhvUzCySaWAaTkbWubO1N5hF3LKl0yixp6ZO8dehvae
G6O+39i2U2+/YMokv+6CXe677i1NTG/2rh4X+ThvnnQRce6eG7/1nm8DlsLlqgbZ
QSbOb4+BEid4yRM2e/vurcYnfmGNTrXaJPX3eiPeM2W+VCh11v0bOfUbhXU8G7zO
zkkW1u+UCz1ICKV2bAFo7nECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24266596397482915212095336208361328224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '80045'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aurora'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '13001 East 17th Place'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Colorado Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by University of Colorado Denver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'embed-tool.apps.cuonline.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821750038537928578873008950783431446932880364423754139934703704390688095884755099227740464194904484438614218918891981354439810552292098386552198745285955533599735691751002741435154844853768526682805470706879601635911786363101359067750877964852152345260902364638787412318282749151218175094621105865401976385398670206425466373088756855538134029154597156160354596256346898023487666205935848440819542419323672401632377004612227592809193115054880974490137860296178456870777879090288222131518678821762091953359573914034038881910293510025346909038008437991962275631232159012572932984278505146439894668929704293758032528702161221256432691747965743389045753870029784971290614779069207247682630846639109461154838247233396048233248710422943687215013606418901967025030739689765422174770955199872379669792918248652759559661947972811079232434034989985806932403555859999741232285445887753316149897253403253492179691145468659252577077012079788020392243731394463219983336245732072919234795962440128805609955941715440378746547060434748774465721239284521005102424824747539092305691470850293243121397285166500847944433496123550439407205842761710048251665830601492578446253261779585781467590948037484889260952219527096244749336763503913413126474609258097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc8c538195513f5a57db01981d07292ca3c20996
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed-tool.apps.cuonline.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016d894748310000040300473045022100e330a2bb08de07257b885ee5db3ab403dba3305ae32231605c03b6d137707b4c022058dd3e98d39dde579d0ee84aee2d4edbe5c0459da2f5b43d7239e9121a12cafb0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d89474854000004030047304502204514fc6a6d129377199192e932b9a6f8c075f158c52d800a9da85db84e210987022100d8c04affc241604c0113fcf1cbf6e4251527590043c00c4129b2f09613b221130077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016d894748580000040300483046022100934dcd71b49c55070f8544ab77208c879160fc7835111072ea8b6848e0908b730221008d547b2838d80eef8711c1b830670d5f414651f090e591f9cd544f7437d41012
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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