werling.genetics.wisc.edu

- University of Wisconsin-Madison -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number ec:e8:39:8a:2f:29:e7:6c:49:21:e4:33:0b:71:55:94 was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Wisconsin-Madison

Organization: University of Wisconsin-Madison
Organization unit: OCIS
Address: 1210 West Dayton Street
Postal code: 53706
State / Province: Wisconsin
Locality: Madison
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ec:e8:39:8a:2f:29:e7:6c:49:21:e4:33:0b:71:55:94
Serial Number (int): 314903586921850515413193359098719065492
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0e:ee:ef:28:7e:6d:c6:37:5f:13:08:96:9c:07:9e:10:00:07:5b:e3
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): b6:52:59:2c:02:0d:4b:fe:8b:36:a3:31:ef:d1:a3:59:9f:05:13:73
Fingerprint (sha256): 00:15:7b:55:87:9f:14:3c:48:c4:8f:52:ec:30:af:2d:2b:78:98:07:1c:05:de:18:c7:d5:89:8c:20:65:54:7a

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate werling.genetics.wisc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for werling.genetics.wisc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

werling.genetics.wisc.edu
www.werling.genetics.wisc.edu

Other certificates including the domain name wisc.edu

(limited to 100 certificates)
biologymajor.wisc.edu
www.wolmanlab.zoology.wisc.edu
ipib.wisc.edu
my.research.wisc.edu
hytalestatus.io
panther.engr.wisc.edu
idbee.ece.wisc.edu
werling.genetics.wisc.edu
wyso.music.wisc.edu
training.uwpd.wisc.edu
resources.recsports.wisc.edu
win2.dwht.doit.wisc.edu
ponto.discovery.wisc.edu
fluidmodules.engr.wisc.edu
s3.drive.wisc.edu
curbmag.com
test.fakesite.wisc.edu
www.net.wisc.edu
wwwtest.payseur.genetics.wisc.edu
instruction.bact.wisc.edu
hr.wisc.edu
wwwtest.paris.soc.wisc.edu
hipaa.wisc.edu
ourwisconsin.students.wisc.edu
artsticketing.wisc.edu
csd.wisc.edu
geoscience.wisc.edu
learningstore.extension.wisc.edu
animalresearch.wisc.edu
midus2-project5.ssc.wisc.edu
browlab.bmolchem.wisc.edu
cctaplogin.occfr.wisc.edu
paleobiodb.org
ncl.labs.wisc.edu
zendeskauth.medicine.wisc.edu
servercertificates.wisc.edu
aheadd.waisman.wisc.edu
louie.doit.wisc.edu
accessit.urp.wisc.edu
alps.cfli.wisc.edu
theatre.wisc.edu
hps.wisc.edu
volta.fammed.wisc.edu
parenthetical.wisc.edu
allofus.wisc.edu
roylab.discovery.wisc.edu
smnad.philosophy.wisc.edu
sustainability.wisc.edu
you.uhs.wisc.edu
mail.aims.wisc.edu
dc-1.neurosurgery.wisc.edu
test.udp.wisc.edu
cclab.neuro.wisc.edu
graphics.apl.wisc.edu
news.wisc.edu
webhosting.doit.wisc.edu
www.music.wisc.edu
cbitp.chem.wisc.edu
t32database.wisc.edu
franck.engr.wisc.edu
uhs.wisc.edu
deco-web.wipac.wisc.edu
wwwtest.authoring.learnuw.wisc.edu
spock.fammed.wisc.edu
helpnow.uwhealth.org
international.engr.wisc.edu
staff.ohr.wisc.edu
prod.uhs.wisc.edu
wwwtest.uwpolice.wisc.edu
wiser.wisc.edu
commarts.wisc.edu
trial.dwh.doit.wisc.edu
admissions.bus.wisc.edu
ericshusta.che.wisc.edu
idp.adtest.wisc.edu
asm.uwsc.wisc.edu
clipsheet.uc.wisc.edu
researchguides.ebling.library.wisc.edu
cvrc.wisc.edu
ehr.primate.wisc.edu
hittinger.genetics.wisc.edu
epw.polisci.wisc.edu
google.wisc.edu
automation-identity-a.cci.wisc.edu
weather.wisc.edu
textilecollection.wisc.edu
rdweb.athletics.wisc.edu
behavior.polisci.wisc.edu
npp.wisc.edu
mask14.classy.org
galipeau.medicine.wisc.edu
virus.che.wisc.edu
smrs.biostat.wisc.edu
ma.ece.wisc.edu
airwatch.ortho.wisc.edu
evm.doit.wisc.edu
testing.doit.wisc.edu
media.wcwpds.wisc.edu
medmicro.wisc.edu
advising.continuingstudies.wisc.edu

Certificate

The complete raw certificate details for werling.genetics.wisc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIINjCCBx6gAwIBAgIRAOzoOYovKedsSSHkMwtxVZQwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTkxMjAyMDAwMDAwWhcNMjExMjAx
MjM1OTU5WjCBwjELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTUzNzA2MRIwEAYDVQQI
EwlXaXNjb25zaW4xEDAOBgNVBAcTB01hZGlzb24xIDAeBgNVBAkTFzEyMTAgV2Vz
dCBEYXl0b24gU3RyZWV0MSgwJgYDVQQKEx9Vbml2ZXJzaXR5IG9mIFdpc2NvbnNp
bi1NYWRpc29uMQ0wCwYDVQQLEwRPQ0lTMSIwIAYDVQQDExl3ZXJsaW5nLmdlbmV0
aWNzLndpc2MuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxUGR
Q8ksVeQUv9pvDupDcv1RtHj+vUIAL5jZm6wnMEtQovwMpJvk3i7F3a8uHZ+mtHzq
6SobSu4ihAaSFdh8cmKl26PiRbXCN68AajIRIA9n9HYJJ9VSvWWcMdvrtOd0cIiT
QdMcWomWV+TX4sWw3tsfHudZCZ9vFaYwoZDlmS/JxqD0mphLo3ATGzyz9aVPDYs7
uk4vPOYajHEcMIJUIx/nyU/lBQAdIse4tQxxMRG1HvnXhObGXyRGxY1LovZtD59s
swsR1BhiJtJXDX7KJx9TnQD4+3Nun5wkNUPCDOgllyagEaDtX2UCwA2VomGqRikP
NyY+E6EgHentIZHoXVlbbvfJYmT38yCE9X8jyHuK3DwsE8Ocv6BMNP5an/8AxxPr
XdQ+ZASHSA/MLQvH4AEeWGA82ZxEDLkyQ7fPJmKY/a0tr1Xs1e8zlOJwpDBaxEPy
lPP8PJkHi51XwMSMrElQFAB0zfmo/T4+C0WpHRCzGThgg10lusVA6HhtFe9PMqG7
0Te3dttINa6f8/504hhxu5Oxpr6SvOkfb+uXXU+CaJtrXxher9FXmeB1kUZvuRMQ
DSce96uR04dZnsTFl5ti8LWPBWqONfDoSNWurq+h6n3O+kclHQ8IEZLacBoojeJZ
HuUAnBAdxsXt3otAu12UcJyhVWct/bGQHnnnJxMCAwEAAaOCA3AwggNsMB8GA1Ud
IwQYMBaAFB4Fo3ePbJbiW4dLprSGrHEADOc4MB0GA1UdDgQWBBQO7u8ofm3GN18T
CJacB54QAAdb4zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZwYDVR0gBGAwXjBSBgwrBgEEAa4jAQQD
AQEwQjBABggrBgEFBQcCARY0aHR0cHM6Ly93d3cuaW5jb21tb24ub3JnL2NlcnQv
cmVwb3NpdG9yeS9jcHNfc3NsLnBkZjAIBgZngQwBAgIwRAYDVR0fBD0wOzA5oDeg
NYYzaHR0cDovL2NybC5pbmNvbW1vbi1yc2Eub3JnL0luQ29tbW9uUlNBU2VydmVy
Q0EuY3JsMHUGCCsGAQUFBwEBBGkwZzA+BggrBgEFBQcwAoYyaHR0cDovL2NydC51
c2VydHJ1c3QuY29tL0luQ29tbW9uUlNBU2VydmVyQ0FfMi5jcnQwJQYIKwYBBQUH
MAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wQwYDVR0RBDwwOoIZd2VybGlu
Zy5nZW5ldGljcy53aXNjLmVkdYIdd3d3LndlcmxpbmcuZ2VuZXRpY3Mud2lzYy5l
ZHUwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AH0+8viP/4hVaCTCwMqeUol5
K8UOeAl/LmqXaJl+IvDXAAABbsekd/UAAAQDAEgwRgIhAKWO/CFLtj4ELt0kSQBQ
D468YlAjNpbMWunj05xP80vjAiEA/4J5WdbRhrYKQZoDc4eLhsj7+0yTGVoWsIKv
3w5Qzt8AdwBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAW7HpHfh
AAAEAwBIMEYCIQDn9rW4A6slG6Bpr99oJ6ammHI1xg/zm++bg6dSiMtYQQIhAM95
YNAZOKowfuFHYs695asfKYdsTltoBsA0JhYfxHnCAHYAb1N2rDHwMRnYmQCkURX/
dxUcEdkCwQApBo2yCJo32RMAAAFux6R4IwAABAMARzBFAiEA3d2zbtH/SHdq7MZG
tkaFPpxsR/hKzniiJKd8eUI6ThcCIHPXEmrzu4/3lMvKKQEVWajTMsrokRqIDux4
J8PU1LqGMA0GCSqGSIb3DQEBCwUAA4IBAQBl2nmauKbv7RCV0+itp9ZQdAL65ab7
wlSJICkldMVqIO94SCxvk6236tXM7LzqJlEPnwoyYCppb7covyS2RDL4lDHv+ds2
zOzVXRGPUH4ro7JxIZE+EIpwUHTqLWbVmDwlqRdOEAIib+tG0cXz9Cty6WxCC96C
2mgRDvk6OtKnkwifZXJ7QxGXQg5i7BS0rg89hhFeaPSgusewZza+l2jlzIEnqr8W
olGQDeX7SYHZbm+3XX6wjYNaEyXIreLoW/QNc4x/Un6UOJBVOCDUCEKRIv2mdhaW
A9t0dtfOuSFsBlHJcRZf9/kqRj5pYOiHPxLtgMFvw5aMONwlFJNhbW1J
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314903586921850515413193359098719065492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '53706'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1210 West Dayton Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Wisconsin-Madison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'werling.genetics.wisc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804734771321903807652457342502345484139784563375460136041281463334714387248649771794101859096700072414275559088460792466304377119877972876744962392433309249959532449210943115189253153028055440829904909719737729963966161118683612293071070692989535505045672891867641973655451482702886446516158770098354582708385617236304618934501783876896079681869638221217175749241066833922872532867645038628680638364366867558384874188499695634251987788797910270425586216040070079219822903595835721575760538346155765562316653531350696557652832660159034241949648701865760601218681878366251851704369591074626234951449188581235811196237180473709195371828896086406735966129421500848596606303204732633010605743911812229652066986162499883321609618955920778424528415731564367777670698603034932376269887045845311055609631135029645072221927404157694041886940727440412323784133867693098502360141167214623605069286800794241382171102501595003087970140981871376833234655103331921188112157092359044467177197252473069132905503140466277257456380574196855204694148978345849736639872198782571192449430942029388935804680916988789244924796803106402268129382130649742533197994948144264152773844184382010242330863629335727076467457592457853221374027735509134774468767852307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0eeeef287e6dc6375f1308969c079e1000075be3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werling.genetics.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werling.genetics.wisc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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