prod.cumc.columbia.edu
- Columbia University -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number 01:d6:1d:c1:df:34:26:34:68:ee:52:cc:20:cd:39:80 was issued on by Internet2.
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Columbia University
Organization:
Columbia University
Organization unit: Information Technology
Organization unit: Information Technology
Address:
116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US
Postal code: 10027
State / Province: NY
Locality: New York
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:d6:1d:c1:df:34:26:34:68:ee:52:cc:20:cd:39:80Serial Number (int): 2440983073503441886366807082207623552
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 9f:e8:29:af:e7:97:50:17:f1:cd:a2:88:48:18:30:84:e0:b8:5f:05
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): bf:89:33:a7:52:c9:ba:d8:58:66:1f:1c:53:fe:d2:d8:02:fe:44:25
Fingerprint (sha256): f2:bd:9b:8b:16:9e:70:53:46:0a:70:cf:30:7e:d0:20:63:3d:26:e0:9e:f3:0f:b4:c4:dd:6b:0a:20:95:26:07
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate prod.cumc.columbia.edu
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prod.cumc.columbia.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prod.cumc.columbia.edu
prod.anesthesiology.cumc.columbia.edu
prod.biochem.cumc.columbia.edu
prod.brand.cumc.columbia.edu
prod.columbia-lyme.org
prod.columbiacardiology.org
prod.columbiaeye.org
prod.columbiaobgyn.org
prod.columbiapsychiatry.org
prod.columbiaradiology.org
prod.columbiastemcell.org
prod.communications.cumc.columbia.edu
prod.compliance.cumc.columbia.edu
prod.crr.columbia.edu
prod.cuimc.columbia.edu
prod.dental.columbia.edu
prod.derc.cumc.columbia.edu
prod.dermatology.columbia.edu
prod.epic.cumc.columbia.edu
prod.facultyclub.cumc.columbia.edu
prod.gca.cumc.columbia.edu
prod.genetics.cumc.columbia.edu
prod.hipaa.cumc.columbia.edu
prod.ihn.cumc.columbia.edu
prod.infectiousdiseases.cumc.columbia.edu
prod.nyonrc.cumc.columbia.edu
prod.pathology.columbia.edu
prod.physicianorganization.cumc.columbia.edu
prod.ps.columbia.edu
prod.rheumatologyatcolumbia.org
prod.stemcell.columbia.edu
prod.ws.cumc.columbia.edu
prod.anesthesiology.cumc.columbia.edu
prod.biochem.cumc.columbia.edu
prod.brand.cumc.columbia.edu
prod.columbia-lyme.org
prod.columbiacardiology.org
prod.columbiaeye.org
prod.columbiaobgyn.org
prod.columbiapsychiatry.org
prod.columbiaradiology.org
prod.columbiastemcell.org
prod.communications.cumc.columbia.edu
prod.compliance.cumc.columbia.edu
prod.crr.columbia.edu
prod.cuimc.columbia.edu
prod.dental.columbia.edu
prod.derc.cumc.columbia.edu
prod.dermatology.columbia.edu
prod.epic.cumc.columbia.edu
prod.facultyclub.cumc.columbia.edu
prod.gca.cumc.columbia.edu
prod.genetics.cumc.columbia.edu
prod.hipaa.cumc.columbia.edu
prod.ihn.cumc.columbia.edu
prod.infectiousdiseases.cumc.columbia.edu
prod.nyonrc.cumc.columbia.edu
prod.pathology.columbia.edu
prod.physicianorganization.cumc.columbia.edu
prod.ps.columbia.edu
prod.rheumatologyatcolumbia.org
prod.stemcell.columbia.edu
prod.ws.cumc.columbia.edu
Other certificates including the domain name columbia.edu
(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net
Certificate
The complete raw certificate details for prod.cumc.columbia.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILvTCCCqWgAwIBAgIQAdYdwd80JjRo7lLMIM05gDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA2MjUwMDAwMDBaFw0yMDA2MjQy MzU5NTlaMIHBMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTAwMjcxCzAJBgNVBAgT Ak5ZMREwDwYDVQQHEwhOZXcgWW9yazEiMCAGA1UECRMZMTE2dGggU3RyZWV0IGFu ZCBCcm9hZHdheTEcMBoGA1UEChMTQ29sdW1iaWEgVW5pdmVyc2l0eTEfMB0GA1UE CxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEfMB0GA1UEAxMWcHJvZC5jdW1jLmNv bHVtYmlhLmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKy2wuwB VCXl1LL1Ejosv9dz5cnFd9AvLsfFBor47BBDxDcA/J8EvZpMUjQVwd2bcwGwEXmf 9E6NiT8/JZnUbKN4BAl/6xlXufx21ovVRzo9KxQX/htGRfe/FRNXnETyUtBqXEoW t1rXYPMSu0BcqwNC3+DG14OrXMuQ5xefaD66OPyt+YVkDrOGT/xGbtcuZdiWOFGU wvJ3b01rTnVlGB6O6KxEg7RZA+Rnnw1gq8m7D+NOr8XSHCNYj9Pl6X/ExxUTyGf3 kE0dizTpdrWarq1xIBWMGja9gWMuPsI1sN8Zwy/gRN6TffYQi5ZGpTX9wIQmGSV6 qFdrG+Mg19S6s/T+0MR4Va5vVRLOds0OyFfssWiRNYJH3VgzlQAyVAThMJ6hJps+ +IrfmNg7/gwSOTZBoUpNznywZ+WegVS3SRmLhObPEyzLKaHlFqCkNoSP1qwlBhbb mpW8A5rC9YifvUw3PaOCm9ByhU0lGNSo24yqeqkblJG9jubRBPPYgV1QSYm86Z9O fe5UQ3cZw/gQi63zavfHlkX1pld5FFMzdckouBJ3fIABSd3NriEqz/EhXayoDVDn P7thvsvcW2DWMztxkNHlJB0T7C5vk7s9xQr2VJ8e2of6DeROQYpnX2yLXWDUqgiB vYijJhxG21X5dkgxbngKCI1mqTt0ppOASjg5AgMBAAGjggb5MIIG9TAfBgNVHSME GDAWgBQeBaN3j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUn+gpr+eXUBfxzaKI SBgwhOC4XwUwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEB MEIwQAYIKwYBBQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3Jl cG9zaXRvcnkvY3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWG M2h0dHA6Ly9jcmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNB LmNybDB1BggrBgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNl cnRydXN0LmNvbS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzAB hhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMIIDzAYDVR0RBIIDwzCCA7+CFnBy b2QuY3VtYy5jb2x1bWJpYS5lZHWCJXByb2QuYW5lc3RoZXNpb2xvZ3kuY3VtYy5j b2x1bWJpYS5lZHWCHnByb2QuYmlvY2hlbS5jdW1jLmNvbHVtYmlhLmVkdYIccHJv ZC5icmFuZC5jdW1jLmNvbHVtYmlhLmVkdYIWcHJvZC5jb2x1bWJpYS1seW1lLm9y Z4IbcHJvZC5jb2x1bWJpYWNhcmRpb2xvZ3kub3JnghRwcm9kLmNvbHVtYmlhZXll Lm9yZ4IWcHJvZC5jb2x1bWJpYW9iZ3luLm9yZ4IbcHJvZC5jb2x1bWJpYXBzeWNo aWF0cnkub3Jnghpwcm9kLmNvbHVtYmlhcmFkaW9sb2d5Lm9yZ4IZcHJvZC5jb2x1 bWJpYXN0ZW1jZWxsLm9yZ4IlcHJvZC5jb21tdW5pY2F0aW9ucy5jdW1jLmNvbHVt YmlhLmVkdYIhcHJvZC5jb21wbGlhbmNlLmN1bWMuY29sdW1iaWEuZWR1ghVwcm9k LmNyci5jb2x1bWJpYS5lZHWCF3Byb2QuY3VpbWMuY29sdW1iaWEuZWR1ghhwcm9k LmRlbnRhbC5jb2x1bWJpYS5lZHWCG3Byb2QuZGVyYy5jdW1jLmNvbHVtYmlhLmVk dYIdcHJvZC5kZXJtYXRvbG9neS5jb2x1bWJpYS5lZHWCG3Byb2QuZXBpYy5jdW1j LmNvbHVtYmlhLmVkdYIicHJvZC5mYWN1bHR5Y2x1Yi5jdW1jLmNvbHVtYmlhLmVk dYIacHJvZC5nY2EuY3VtYy5jb2x1bWJpYS5lZHWCH3Byb2QuZ2VuZXRpY3MuY3Vt Yy5jb2x1bWJpYS5lZHWCHHByb2QuaGlwYWEuY3VtYy5jb2x1bWJpYS5lZHWCGnBy b2QuaWhuLmN1bWMuY29sdW1iaWEuZWR1gilwcm9kLmluZmVjdGlvdXNkaXNlYXNl cy5jdW1jLmNvbHVtYmlhLmVkdYIdcHJvZC5ueW9ucmMuY3VtYy5jb2x1bWJpYS5l ZHWCG3Byb2QucGF0aG9sb2d5LmNvbHVtYmlhLmVkdYIscHJvZC5waHlzaWNpYW5v cmdhbml6YXRpb24uY3VtYy5jb2x1bWJpYS5lZHWCFHByb2QucHMuY29sdW1iaWEu ZWR1gh9wcm9kLnJoZXVtYXRvbG9neWF0Y29sdW1iaWEub3Jnghpwcm9kLnN0ZW1j ZWxsLmNvbHVtYmlhLmVkdYIZcHJvZC53cy5jdW1jLmNvbHVtYmlhLmVkdTCCAX4G CisGAQQB1nkCBAIEggFuBIIBagFoAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiD AMR7iXqo/csAAAFkN7SzqAAABAMARjBEAiAL664h7+Bp1G3eD2GC9jMmKfGHunRK k8KW8mawJ+q+xwIgbciSiuRhS+oqqNzrhY/O0u9MdCmp9Hxlg/BPphRt8j8AdgBe p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWQ3tLQBAAAEAwBHMEUC IAQH/xli9BDm+QRYlAb0scVPLYrso0Ujfe1WLZC1mNOXAiEA/5/wjt6bxuUS/l/y cqxMoEnhm9enRz2tAOSI11o9wbEAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcv o6odBxPTDAAAAWQ3tLPMAAAEAwBIMEYCIQCeggQDKMJDkBspZZvMQYX8Ybd9EPq7 V2g4AYxjtq14CQIhAID8kI5CK0JLBMWNV6rUNVO2W4yr7VMFsKq/jf00UIK5MA0G CSqGSIb3DQEBCwUAA4IBAQAq6cJqA97WMLe6TOJ7Q25Lab2OGEaHqtNCol5kHoqE sItz1a57Z7nQr40UwA/Yq4bavQDK0g3W6cNTHdy2hgsmW2srGtCpl+amwXYLmJQg l4Hc8/iFif9BzgxhxTG3pL0pX3ee8mntVT+k1/KklR6JmFIg8NjKxeO4u1WvgLrP lcXaljGlrfP0ogIKpOZRGUwkMtbsjATUVTHUiKwDNJfgnq7s8868zPcOlo3P8wMa LgQeo5mbONQNm2wQHzvPWKPSa2Y+Bso1Wg6RDB2574ko0jL8nLemd6fnH5naChYA vo0WF1tjuHbNHGXAtZgnxgVwxPc1Ltd/ZKa8V6s6KCm8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArLbC7AFUJeXUsvUSOiy/ 13PlycV30C8ux8UGivjsEEPENwD8nwS9mkxSNBXB3ZtzAbAReZ/0To2JPz8lmdRs o3gECX/rGVe5/HbWi9VHOj0rFBf+G0ZF978VE1ecRPJS0GpcSha3Wtdg8xK7QFyr A0Lf4MbXg6tcy5DnF59oPro4/K35hWQOs4ZP/EZu1y5l2JY4UZTC8ndvTWtOdWUY Ho7orESDtFkD5GefDWCrybsP406vxdIcI1iP0+Xpf8THFRPIZ/eQTR2LNOl2tZqu rXEgFYwaNr2BYy4+wjWw3xnDL+BE3pN99hCLlkalNf3AhCYZJXqoV2sb4yDX1Lqz 9P7QxHhVrm9VEs52zQ7IV+yxaJE1gkfdWDOVADJUBOEwnqEmmz74it+Y2Dv+DBI5 NkGhSk3OfLBn5Z6BVLdJGYuE5s8TLMspoeUWoKQ2hI/WrCUGFtualbwDmsL1iJ+9 TDc9o4Kb0HKFTSUY1KjbjKp6qRuUkb2O5tEE89iBXVBJibzpn0597lRDdxnD+BCL rfNq98eWRfWmV3kUUzN1ySi4End8gAFJ3c2uISrP8SFdrKgNUOc/u2G+y9xbYNYz O3GQ0eUkHRPsLm+Tuz3FCvZUnx7ah/oN5E5BimdfbItdYNSqCIG9iKMmHEbbVfl2 SDFueAoIjWapO3Smk4BKODkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2440983073503441886366807082207623552 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.cumc.columbia.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704611285625532659750943913492739103633747743639587905045242563203004428245131641549876364851551169452762667660581122575226476684832082249863293702016503954587731494568664892148106131233023570030309628555847886365760888718790861505513988456759871281199186574567068294850789424576828359671642053767951468810833563054946235202205975576744476445497761544840052903485391347326944415717659688659374838523924744082446517631597487684575929988840456302792179620378177726381854938059618410346539005038150429868896066730427710035223972459287460070390760688016001645638018458251942303730832773540148682930800273110965504373481212809832751863232092587544145728514583902498370547422147034489162181240120391490219429620883249228553893884630691544439555356524559825991253094447288424452581116342358439373702451761918567498364383003098698116927182502004105584562455430667363866557358833512613296952391213718832109338231938846123132233051334289049247087153807485146893154961608789869309494919159678836280135437691205054545661922841044339466472875340351003342784997862956543587302105250981226964424646074934445202751399398476402258430167620832917267269183397190392800370421636694444058926122884133488620000476263887056674069843092762906563756964853817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9fe829afe7975017f1cda28848183084e0b85f05 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (963 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.anesthesiology.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.biochem.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.brand.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbia-lyme.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiacardiology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaeye.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaobgyn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiapsychiatry.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaradiology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiastemcell.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.communications.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.compliance.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.crr.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cuimc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dental.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.derc.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dermatology.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.epic.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.facultyclub.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gca.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.genetics.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.hipaa.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ihn.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.infectiousdiseases.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nyonrc.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pathology.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.physicianorganization.cumc.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ps.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.rheumatologyatcolumbia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.stemcell.columbia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ws.cumc.columbia.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002ae9c26a03ded630b7ba4ce27b436e4b69bd8e184687aad342a25e641e8a84b08b73d5ae7b67b9d0af8d14c00fd8ab86dabd00cad20dd6e9c3531ddcb6860b265b6b2b1ad0a997e6a6c1760b9894209781dcf3f88589ff41ce0c61c531b7a4bd295f779ef269ed553fa4d7f2a4951e89985220f0d8cac5e3b8bb55af80bacf95c5da9631a5adf3f4a2020aa4e651194c2432d6ec8c04d45531d488ac033497e09eaeecf3cebcccf70e968dcff3031a2e041ea3999b38d40d9b6c101f3bcf58a3d26b663e06ca355a0e910c1db9ef8928d232fc9cb7a677a7e71f99da0a1600be8d16175b63b876cd1c65c0b59827c60570c4f7352ed77f64a6bc57ab3a2829bc