survey14.survey.psu.edu

- The Pennsylvania State University -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number 96:2f:6c:ec:98:bc:6e:a7:79:4f:31:be:04:0a:45:af was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Pennsylvania State University

Organization: The Pennsylvania State University
Organization unit: The Survey Research Center
Postal code: 16802
State / Province: PA
Locality: University Park
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 96:2f:6c:ec:98:bc:6e:a7:79:4f:31:be:04:0a:45:af
Serial Number (int): 199630446565441587677494087544447059375
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6a:24:48:eb:ed:3d:dc:47:35:4a:ae:17:17:5d:4c:ec:56:07:fa:ea
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): a4:ea:a7:88:f9:42:15:5d:19:3d:53:87:57:52:c2:5a:a1:65:b0:cc
Fingerprint (sha256): fc:b0:e3:be:e4:8d:a0:28:de:38:ba:fd:35:a7:64:ca:52:1e:fc:9e:9c:9c:59:5f:bc:3f:c4:4f:98:a6:4e:5f

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate survey14.survey.psu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for survey14.survey.psu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

survey14.survey.psu.edu

Other certificates including the domain name psu.edu

(limited to 100 certificates)
cds4.cvent.com
pennstatehealthnews.org
nemesis.vmhost.psu.edu
apply.psu.edu
d5-gogreenfront.ddar.psu.edu
vpfa.psu.edu
5693703389708288-fe3.pantheonsite.io
crmcn-prd-db.windom.outreach.psu.edu
apps.opp.psu.edu
prod-web10.lionpath.psu.edu
idashboard.hbg.psu.edu
svrp.psu.edu
www.causeweb.org
harrelllibcal.library.psu.edu
carpepm.almonds.com
webfiles.psu.edu
harrell.library.psu.edu
fandb.psu.edu
coaction.psu.edu
us.prod.campusgroups.com
qaauth.libraries.psu.edu
online.ist.psu.edu
morph-331.vmhost.psu.edu
angelshibaccept.ais.psu.edu
schoolresources.militaryfamilies.psu.edu
hrservdc.ohrrider.psu.edu
ssc1.wpsu.psu.edu
watchdog.vmhost.psu.edu
mkt-prod-db.windom.outreach.psu.edu
scholarsphere-qa.dlt.psu.edu
secure.smeal.psu.edu
collegian.psu.edu
www.ems.psu.edu
www.solutions2wxrisk.psu.edu
ucdc.edu
methodology.psu.edu
us.prod.campusgroups.com
ezaccess.libraries.psu.edu
usegalaxy.org
apps.tlt.psu.edu
alumni.libraries.psu.edu
exchange.ag.psu.edu
nartc.fcm.arizona.edu
egsc.psu.edu
calendar.sdzsafaripark.org
grafana.ais.psu.edu
artedu.vmhost.psu.edu
com-ce.vmhost.psu.edu
www.engr.psu.edu
webdev.research.psu.edu
mrsec.psu.edu
isserv83.psuas.psu.edu
nrotc.psu.edu
www.bookrequest.psu.edu
ocaltest.aset.psu.edu
courses.schoolresources.militaryfamilies.psu.edu
5693703389708288-fe3.pantheonsite.io
openid.et-test.psu.edu
f1adp-smartpark.ad.psu.edu
current.it.psu.edu
cas-cp-01.ag.psu.edu
inclusivity.psu.edu
vivid.cse.psu.edu
morgancenter.psu.edu
www.vmhost.psu.edu
www.studentloans.psu.edu
cds4.cvent.com
math.science.psu.edu
uconnectlabs.com
chat.pshs.psu.edu
cpy-web1.lionpath.psu.edu
campusmap.psu.edu
www.opia.psu.edu
science.aws.science.psu.edu
genuinerisk.bmb.psu.edu
delta.csec-cra.psu.edu
cdn-test.battlefields.org
psualert-test.iam.psu.edu
e8-pnc-sep.ad.psu.edu
staging.aws.science.psu.edu
test.eis.uw.edu
dev.e-education.psu.edu
admissions.med.psu.edu
etda-explore-prod.libraries.psu.edu
secure.wpsu.psu.edu
www2.ems.psu.edu
admin.hhdev.psu.edu
citeak.multidevcom.uaf.edu
newton.vmhost.psu.edu
5693703389708288-fe3.pantheonsite.io
www.design-engineering.princeton.edu
latinocaucus.psu.edu
jupyterhub.ist.psu.edu
uconnectlabs.com
thrive.psu.edu
admin.odiapp-d01.lionpath.psu.edu
richc.et-test.psu.edu
qa.libraries.psu.edu
elections.psu.edu
sni.cloudflaressl.com

Certificate

The complete raw certificate details for survey14.survey.psu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIRAJYvbOyYvG6neU8xvgQKRa8wDQYJKoZIhvcNAQEFBQAw
UTELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5D
b21tb24xGzAZBgNVBAMTEkluQ29tbW9uIFNlcnZlciBDQTAeFw0xNDAzMTEwMDAw
MDBaFw0xNzAzMTAyMzU5NTlaMIG3MQswCQYDVQQGEwJVUzEOMAwGA1UEERMFMTY4
MDIxCzAJBgNVBAgTAlBBMRgwFgYDVQQHEw9Vbml2ZXJzaXR5IFBhcmsxKjAoBgNV
BAoTIVRoZSBQZW5uc3lsdmFuaWEgU3RhdGUgVW5pdmVyc2l0eTEjMCEGA1UECxMa
VGhlIFN1cnZleSBSZXNlYXJjaCBDZW50ZXIxIDAeBgNVBAMTF3N1cnZleTE0LnN1
cnZleS5wc3UuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtH2g
iygBiJM3MBCjAuRpNbBO1YLl/MEccNWhrKl7OeTXQJ701mvbVxKzckjpqX46Ou7w
eej1EjtSaawegBKiVhzt+fsHRyyvbwbKMbT/sF/448m18FRCBNro1TUgHwBSCzOo
2cjtaRQUx2kefDTnjnV8YSqQzdlzprO5loWwnVCe3fye3BRDSmuU80Je7vb8YMeM
s3i6CiKZTOc5tcIjRWL0MHzijcrIFUQtYpcmOOHLcnql1thmtCvZHN+sjFmhNnPF
bP5Uf9ynhMS5bS1wJEg08MnmOZl/p69JymWb004KCjQcF8XY3pnWvAZWMnrMrIkX
mU0LPXknHtMA4QDEHUEdFki4VGRoqS/N4aB3ghX/a7YXI4YAkar7i2a2/867tqAx
PTWiZfSTMEhgLRVz1x3O0TCOo12FgnBlZf8Lxr9GxRy4sjjrMkRWUK7TK1mIP2mP
8D5sYf2l/+0ZGnlpY01ku9n2GW+VRYVShSx/t3OYyAyGZkkSTtapGYT0dzJsaQok
lP9eCo+UeQaCGX9YJmgkItDr9+1HnGHKKOoZthP2OszTJdg+IrFg0Mef8Y0ql3TE
EHe52kkKCZ+RONj5+Gc2+vIBtrYaDpXEI/1H/QsOcwtZv9YUAOYnxFirPt0bQDtc
kwq04K15SagbbsnDKiXs9bbjJTzvI+nQRTMBhVsCAwEAAaOCAb4wggG6MB8GA1Ud
IwQYMBaAFEhPWvovSppe4FDza3tVpd71vjRdMB0GA1UdDgQWBBRqJEjr7T3cRzVK
rhcXXUzsVgf66jAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQD
AQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQv
cmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwPQYDVR0fBDYwNDAyoDCg
LoYsaHR0cDovL2NybC5pbmNvbW1vbi5vcmcvSW5Db21tb25TZXJ2ZXJDQS5jcmww
bwYIKwYBBQUHAQEEYzBhMDkGCCsGAQUFBzAChi1odHRwOi8vY2VydC5pbmNvbW1v
bi5vcmcvSW5Db21tb25TZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmluY29tbW9uLm9yZzAiBgNVHREEGzAZghdzdXJ2ZXkxNC5zdXJ2ZXkucHN1
LmVkdTANBgkqhkiG9w0BAQUFAAOCAQEAVYJ35/Tk/svA4mBlqGimV0La5YhIUZHs
rWoKxlIMwBrj/6jNJC5KfaUVtFFmhip4zUvcEdwgWIBCT/yqd/MvDYlPLpnR9pBe
MNn8NTUK5/OFgSv3neVC6uZOr1W9rwbrg+r1eK2iz5PfCVnDk4SgawvAlGfCYhjg
5gsJadDKi2FqlG2BTBpcsNyeEXpCIaH3fl01F8KxH2RrWQUZNG6FLSQSxjb54sTp
SoMFZBnUxaqo8AxyhwOTDfSyQOP/xuueGVUzKta0cKzf3EZIOza8sEpSbkipPGAM
Wu9V0Ydfu23LUW5PZUXHxPLJY79DUfw7AEFNLOjVSemx1/zCfm9h8A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199630446565441587677494087544447059375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '16802'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pennsylvania State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Survey Research Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'survey14.survey.psu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736337939855273817061396404446663236520899919745256732885962248962293663528935022870214730332542567857568243532564685355331613121822350162909529999608260341243785536182904965468803387169428803221347560014137694671869257404787629755973005460822312424504008957406687005164915260240729753402572255417367555002043277965183629702225024998448774281541144712298160928510723728862503992009475932000767103119029594804047095253448021941718813009659978293438168786541881497773250048299796658829188371477908314601210658368957005659487444314485751775217543970149557350273469363182744958374090047813563273378690830821151471832974500893305822724453437660049762186592465325207246080940346269468971849316441873311412611242967898818597798799527625827520707991892206760021526422249812336540346412741887378798003557610411853487689658912305349696696471045943437099064156525635007205281427898729920516016315096284432197866294384457751140945586043980349127610645571049656411053635449337766571060800441530345808517498961144141174588580792086104019781660535958195124090653216296342046738009818632992726056220477484493230644078735119076715972257658777124525601856064620549213842822826912928152509936450265223268183563065805137921945956616903507772397643203931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a2448ebed3ddc47354aae17175d4cec5607faea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey14.survey.psu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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