prod.cumc.columbia.edu

- Columbia University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 3b:e1:d7:90:a7:d9:f2:57:b0:d3:63:4d:06:d2:27:71 was issued on by Internet2.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Columbia University

Organization: Columbia University
Organization unit: Information Technology
Address: 116th Street and Broadway
Postal code: 10027
State / Province: NY
Locality: New York
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:e1:d7:90:a7:d9:f2:57:b0:d3:63:4d:06:d2:27:71
Serial Number (int): 79597090723348037854267967188031907697
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 15:54:9b:df:7c:4b:c6:75:05:30:47:b6:ba:af:91:33:9e:00:bf:46
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 87:f0:5c:68:9c:0b:29:92:44:d2:c7:eb:f8:c7:63:8f:7f:e0:67:e0
Fingerprint (sha256): f4:a7:4a:e0:a0:a2:89:c7:90:0f:f8:3e:04:e1:99:38:b7:8a:f9:1b:2a:74:c5:08:cd:7f:f0:09:bd:af:f6:4d

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate prod.cumc.columbia.edu

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.cumc.columbia.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.cumc.columbia.edu
prod.alscenter.cuimc.columbia.edu
prod.anesthesiology.cumc.columbia.edu
prod.biochem.cumc.columbia.edu
prod.columbia-lyme.org
prod.columbiacardiology.org
prod.columbiaeye.org
prod.columbiaobgyn.org
prod.columbiaortho.org
prod.columbiapsychiatry.org
prod.columbiaradiology.org
prod.communications.cuimc.columbia.edu
prod.compliance.cumc.columbia.edu
prod.congenitalheart.cuimc.columbia.edu
prod.crr.columbia.edu
prod.cuimc.columbia.edu
prod.dental.columbia.edu
prod.derc.cumc.columbia.edu
prod.dermatology.columbia.edu
prod.emergencymedicine.columbia.edu
prod.epic.cumc.columbia.edu
prod.facultyclub.cumc.columbia.edu
prod.gca.cumc.columbia.edu
prod.genetics.cumc.columbia.edu
prod.genmed.columbia.edu
prod.giving.cuimc.columbia.edu
prod.gsas.cuimc.columbia.edu
prod.hipaa.cumc.columbia.edu
prod.igm.columbia.edu
prod.ihn.cumc.columbia.edu
prod.infectiousdiseases.cumc.columbia.edu
prod.irvinginstitute.columbia.edu
prod.it.cuimc.columbia.edu
prod.nyonrc.cumc.columbia.edu
prod.pathology.columbia.edu
prod.pediatrics.columbia.edu
prod.physicianorganization.cuimc.columbia.edu
prod.ps.columbia.edu
prod.rheumatologyatcolumbia.org
prod.stemcell.columbia.edu
prod.ws.cumc.columbia.edu

Other certificates including the domain name columbia.edu

(limited to 100 certificates)
coursewebs.law.columbia.edu
mcftp.mc.cumc.columbia.edu
diamond.law.columbia.edu
classics.columbia.edu
tsividis.ee.columbia.edu
frontend.sisfrontend-uat.sis-r53.cuit.columbia.edu
povertycenter.columbia.edu
invest-serv2.ooi.columbia.edu
test-web-lws.edu.help
exprodmail01.cuit.columbia.edu
ssl.procurement.columbia.edu
nursingvolunteer.givingday.columbia.edu
*.hr.columbia.edu
5697124062724096-fe2.pantheonsite.io
us.prod.campusgroups.com
unleashing.tc.columbia.edu
www.mailman.columbia.edu
secure5bb5ec4d4764e8eaa9667dce.nationbuilder.com
wikischolars.columbia.edu
incapsula.com
nano.columbia.edu
emeritus.gsb.columbia.edu
courseworks2.columbia.edu
admissions.emeritus.org
video.engineering.columbia.edu
cluster3.technolutions.net
aspirerefugees.columbia.edu
cluster.technolutions.net
cluster3.technolutions.net
globalreports.columbia.edu
wwws-db.law.columbia.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
califano.c2b2.columbia.edu
dev.cumc.columbia.edu
amploadvance.com
www.icap.columbia.edu
icccr.tc.columbia.edu
guestaccess.law.columbia.edu
giving.columbia.edu
www.incite.columbia.edu
ad01.gsb.columbia.edu
thelowdown.alumni.columbia.edu
mail.biology.columbia.edu
*.isso.columbia.edu
digitaltutorials.jrn.columbia.edu
pawprtprodmprt1.cuit.columbia.edu
incapsula.com
5727389891952640-fe2.pantheonsite.io
columbia.edu
pawprtprodprt02.adcu.columbia.edu
stat.columbia.edu
palestine.mei.columbia.edu
m.lawnet.law.columbia.edu
abate-shen.cumc.columbia.edu
jira.columbia.edu
incite.columbia.edu
portal.neuro.columbia.edu
idmapp.cc.columbia.edu
incapsula.com
haywire.college.columbia.edu
sustainability.ei.columbia.edu
lockers-dev.paas.cc.columbia.edu
connect.woodstockacademy.org
indianeconomy.columbia.edu
ias-drupal6-test.cc.columbia.edu
mail-in.cc.columbia.edu
beisdev1.tc.columbia.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
tls.automattic.com
chagall.tc.columbia.edu
prod.25.slot.cdn.salesforce-communities.com
5691420614590464-fe3.pantheonsite.io
act.dbmi.columbia.edu
www.cser.columbia.edu
5703702744662016-fe4.pantheonsite.io
soc.cs.columbia.edu
sni.cloudflaressl.com
amploadvance.com
sslvs03.igloosoftware.com
cluster3.technolutions.net
sustainability.ei.columbia.edu
stat.columbia.edu
library.columbia.edu
pistars1.cpmc.columbia.edu
nxterra.ucop.edu
*.journalism.columbia.edu
portal.studenthealth.cuimc.columbia.edu
cice-dev.paas.cc.columbia.edu
www.ffworkshop.columbia.edu
shoreline.ncdp.columbia.edu
dev-gfs2.api.columbia.edu
hudson.jrn.columbia.edu
enhants.ee.columbia.edu
p-ctx-dc-02.mc.cumc.columbia.edu
admissions.nursing.columbia.edu
realrisks.dbmi.columbia.edu
*.gsas.columbia.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for prod.cumc.columbia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApbtoJK4RV8EM/wipqVRA
gP1ub7qK2xyQuT2n4Zr5d6jjZwvIe+MZQx99ukS8uKUcC6hZGaiYJMreJkNEeTQQ
db99OgceFhRGxm/pc9RcS3xYxYJOxPCxGUzE48RW4dXVgKvB+6+SW0hnnehkT7Ps
b2dyNEfGTlgVWjlh2/69eMOYy/OrrswR/+RIudpT3XKGvpG5j6W5qLnC2VccS3wz
QAohkGL1eg/SkCuo76sDi3NmL8Hp27TXH9EbpBP5WN0jOfMkOUJJcoYtqtWJoGY6
t1ae0u2Ip0bEPGeI/NxsN8EOQwBFlSHEutQK4RTTVD/41CzgC/ZCj0Ru1ELD22qS
+Byvl4htN6YL+Yc4MqRSe1EoTZ8Z3QdfwHyPZDoVrMgzAXY/UN2NigNhFnpiuT5Y
T5Dst+hVg2TBYgeYU1lje6SVXtTGxB1qGkWldMut5aLLUJD8h1oQZknlB3oGXhzH
WqqHngJO1Q/DRDbeQQ/KC6RdZzr9awYmDaOqDiJxLorBc7cw0AgZbHsE2cMkPiG8
Bt6sSqmwRIjMyx9p5+lw9UJyi3ORoM7LwU13fYy1zQzbRbbzOoCzwwFnnZCo8+I5
sqAa00Y3jFtSgnkzbnzkWKIBvA+9hB6lBjeajDJLoUJKVpjpvh8EjAmtyzLyLe9Y
E33vYYg1cXjNzu0I2ISmLoMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79597090723348037854267967188031907697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10027'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '116th Street and Broadway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.cumc.columbia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676127806689981601768798562271955131530562797146796712353153246391758303064178380921193064797592828697496720064282990536141580878847103135430973842939974446216583166394929862904026106882517724051273206111233468869168875581670358396609995751679105725045576543404385738426890427697302425653896867430401425873728020427162136508839623628693890130671475486807618895076292494398834973032078776745942109013788814291892260656155063528691375409349042564253243110888423981972536989667533502917051812047670833996003263844594946848698046532187148437368947006607645158847734524044528126661528836625236075232103014152511215476115846858857643076071300398519643734367223611277377919141549646415607196305638831522827920454964695786654806121739363735805870304410969726769619379392937515560670424407024743034810579762621689827427538340079160983207858415642380742645278504489313011853744866126049473227121650222613161486631116960283004524307044766007465223653067815685603351500033768239171228362343625052743113875287640548442565219859628165158971559597971610099781981739102803981185269349163306678684864136947318415318482830014045539712591838628487681709723674838762370360249893157937880547685588474214110879558361659664488933760463414992226611808841347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15549bdf7c4bc675053047b6baaf91339e00bf46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.alscenter.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.anesthesiology.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.biochem.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbia-lyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiacardiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaeye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaobgyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaortho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiapsychiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.columbiaradiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.communications.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.compliance.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.congenitalheart.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.crr.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dental.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.derc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dermatology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.emergencymedicine.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.epic.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.facultyclub.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gca.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.genetics.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.genmed.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.giving.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.gsas.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.hipaa.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.igm.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ihn.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.infectiousdiseases.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.irvinginstitute.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.it.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nyonrc.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pathology.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pediatrics.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.physicianorganization.cuimc.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.rheumatologyatcolumbia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.stemcell.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ws.cumc.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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