test.fakesite.wisc.edu

- University of Wisconsin-Madison -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 1c:16:0c:52:11:83:95:02:1d:1f:cb:0b:c6:bd:84:9a was issued on by Internet2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Wisconsin-Madison

Organization: University of Wisconsin-Madison
Organization unit: OCIS
Address: 1210 West Dayton Street
Postal code: 53706
State / Province: WI
Locality: Madison
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:16:0c:52:11:83:95:02:1d:1f:cb:0b:c6:bd:84:9a
Serial Number (int): 37332864303910298759785476162292909210
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b5:be:ab:b3:fc:42:28:b3:52:4c:54:bd:8d:2e:b1:43:44:ea:3b:6e
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 4f:0e:67:fa:15:4b:5d:88:a6:e4:61:3d:b7:c1:7f:5d:d8:0e:3a:bb
Fingerprint (sha256): 00:39:4c:b6:e5:f0:5b:48:54:59:2b:bf:d5:24:9e:51:b3:bc:b0:09:6c:e4:a3:09:c9:b3:94:29:c7:56:e8:1a

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate test.fakesite.wisc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.fakesite.wisc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.fakesite.wisc.edu
www.test.fakesite.wisc.edu

Other certificates including the domain name wisc.edu

(limited to 100 certificates)
biologymajor.wisc.edu
www.wolmanlab.zoology.wisc.edu
ipib.wisc.edu
my.research.wisc.edu
hytalestatus.io
panther.engr.wisc.edu
idbee.ece.wisc.edu
werling.genetics.wisc.edu
wyso.music.wisc.edu
training.uwpd.wisc.edu
resources.recsports.wisc.edu
win2.dwht.doit.wisc.edu
ponto.discovery.wisc.edu
fluidmodules.engr.wisc.edu
s3.drive.wisc.edu
curbmag.com
test.fakesite.wisc.edu
www.net.wisc.edu
wwwtest.payseur.genetics.wisc.edu
instruction.bact.wisc.edu
hr.wisc.edu
wwwtest.paris.soc.wisc.edu
hipaa.wisc.edu
ourwisconsin.students.wisc.edu
artsticketing.wisc.edu
csd.wisc.edu
geoscience.wisc.edu
learningstore.extension.wisc.edu
animalresearch.wisc.edu
midus2-project5.ssc.wisc.edu
browlab.bmolchem.wisc.edu
cctaplogin.occfr.wisc.edu
paleobiodb.org
ncl.labs.wisc.edu
zendeskauth.medicine.wisc.edu
servercertificates.wisc.edu
aheadd.waisman.wisc.edu
louie.doit.wisc.edu
accessit.urp.wisc.edu
alps.cfli.wisc.edu
theatre.wisc.edu
hps.wisc.edu
volta.fammed.wisc.edu
parenthetical.wisc.edu
allofus.wisc.edu
roylab.discovery.wisc.edu
smnad.philosophy.wisc.edu
sustainability.wisc.edu
you.uhs.wisc.edu
mail.aims.wisc.edu
dc-1.neurosurgery.wisc.edu
test.udp.wisc.edu
cclab.neuro.wisc.edu
graphics.apl.wisc.edu
news.wisc.edu
webhosting.doit.wisc.edu
www.music.wisc.edu
cbitp.chem.wisc.edu
t32database.wisc.edu
franck.engr.wisc.edu
uhs.wisc.edu
deco-web.wipac.wisc.edu
wwwtest.authoring.learnuw.wisc.edu
spock.fammed.wisc.edu
helpnow.uwhealth.org
international.engr.wisc.edu
staff.ohr.wisc.edu
prod.uhs.wisc.edu
wwwtest.uwpolice.wisc.edu
wiser.wisc.edu
commarts.wisc.edu
trial.dwh.doit.wisc.edu
admissions.bus.wisc.edu
ericshusta.che.wisc.edu
idp.adtest.wisc.edu
asm.uwsc.wisc.edu
clipsheet.uc.wisc.edu
researchguides.ebling.library.wisc.edu
cvrc.wisc.edu
ehr.primate.wisc.edu
hittinger.genetics.wisc.edu
epw.polisci.wisc.edu
google.wisc.edu
automation-identity-a.cci.wisc.edu
weather.wisc.edu
textilecollection.wisc.edu
rdweb.athletics.wisc.edu
behavior.polisci.wisc.edu
npp.wisc.edu
mask14.classy.org
galipeau.medicine.wisc.edu
virus.che.wisc.edu
smrs.biostat.wisc.edu
ma.ece.wisc.edu
airwatch.ortho.wisc.edu
evm.doit.wisc.edu
testing.doit.wisc.edu
media.wcwpds.wisc.edu
medmicro.wisc.edu
advising.continuingstudies.wisc.edu

Certificate

The complete raw certificate details for test.fakesite.wisc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtjCCBZ6gAwIBAgIQHBYMUhGDlQIdH8sLxr2EmjANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0xODA0MDgwMDAwMDBaFw0yMDA0MDcy
MzU5NTlaMIG4MQswCQYDVQQGEwJVUzEOMAwGA1UEERMFNTM3MDYxCzAJBgNVBAgT
AldJMRAwDgYDVQQHEwdNYWRpc29uMSAwHgYDVQQJExcxMjEwIFdlc3QgRGF5dG9u
IFN0cmVldDEoMCYGA1UEChMfVW5pdmVyc2l0eSBvZiBXaXNjb25zaW4tTWFkaXNv
bjENMAsGA1UECxMET0NJUzEfMB0GA1UEAxMWdGVzdC5mYWtlc2l0ZS53aXNjLmVk
dTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK7U3VuJemmgKgp2OpXq
haeXy0Uh39cK6St/iIKocMC9H6aBZ+fL8OXtXlgV9NFQJ3xgTLRj8C7K7Q8W/w29
JiWaiyEAuOJKkjsP6oSPUpnlbwQTRx8hIH7Y/4olvyX7gNUnvMrRpJaF+EhfeR/q
DNjuv2eLiQYbIK1ytcKEzslNJWsS7xgM/3sQexk1RcgdHd0dv/TchALawcy07aq9
zw+43oDgxySBl8Gtk+KOzCq3in1RFbqMBdIuJecd0Xhw/WwuE7Shl16keAjMmARM
1asNliSEIy57/4oxNNvNFgRzTdRFmEU02ogqxxx8PlRoWyoEvQzm49ulqg/dVSU9
t3p4UQhLzlr1Jq7oacYQCLKoomJA2534y99MOndnNHkNbYZK1u6/7gQvwmfcU887
/CJ8LeAFQiBL3aSYyHZ+b9D54M2TYTHvStUFna566LpoxnYDS3r27ssbQv0U9m5m
dnKUR8M/2Cay94ST/W2mB1V93bHmduuFUoYYg0YGc6F16zMP4dXi1ClshCVldCm5
Ihp5sxTjqQlee2VoNykb5N8SixAVgjDOF0vCdhOP9YML8ocnJB1QsQRPwKKizQ4i
tq56pGc2YGJ3QzOqUxSk5Re65w3j6d1c2nLl2HjsmjTtjx/JeChPUcYJYs29vMjZ
GIC9MNPsf7W7mFr8BnvYoL95AgMBAAGjggH7MIIB9zAfBgNVHSMEGDAWgBQeBaN3
j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUtb6rs/xCKLNSTFS9jS6xQ0TqO24w
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYB
BQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkv
Y3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9j
cmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1Bggr
BgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNv
bS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8v
b2NzcC51c2VydHJ1c3QuY29tMBMGCisGAQQB1nkCBAMBAf8EAgUAMD0GA1UdEQQ2
MDSCFnRlc3QuZmFrZXNpdGUud2lzYy5lZHWCGnd3dy50ZXN0LmZha2VzaXRlLndp
c2MuZWR1MA0GCSqGSIb3DQEBCwUAA4IBAQBBs8g2KzLB27ga54XlcBgCep3wLAmV
7l3W9ex8+HDzQ1G+aoJxLjKrA+yzt2jV7SxsH9Wqokw7fhLGMEDtYyKDhRJjOojl
va14RvYVuUO+dskfkYmBPOHYKnML4Qh+uywSqspbTSbPn4nZYU0UoMhabtg4u8lv
7EBxQiv7FhefpWkNYB3GHdHKMj904Q4os8Q7iOpXu2b4crA7sXFd63cZ4XmXIZJz
hA5hUguF0sK9q0nAcwL2zRA9WbwVTLYElbEgh6S0pMt/TaxWzYAyPdrNnsWIX7fT
ShHpKZXyU4PtobyQSUsjzHY3Bj6CUgbRVX6Axaj2Rtl3Zx5dq3hN1cbl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArtTdW4l6aaAqCnY6leqF
p5fLRSHf1wrpK3+IgqhwwL0fpoFn58vw5e1eWBX00VAnfGBMtGPwLsrtDxb/Db0m
JZqLIQC44kqSOw/qhI9SmeVvBBNHHyEgftj/iiW/JfuA1Se8ytGkloX4SF95H+oM
2O6/Z4uJBhsgrXK1woTOyU0laxLvGAz/exB7GTVFyB0d3R2/9NyEAtrBzLTtqr3P
D7jegODHJIGXwa2T4o7MKreKfVEVuowF0i4l5x3ReHD9bC4TtKGXXqR4CMyYBEzV
qw2WJIQjLnv/ijE0280WBHNN1EWYRTTaiCrHHHw+VGhbKgS9DObj26WqD91VJT23
enhRCEvOWvUmruhpxhAIsqiiYkDbnfjL30w6d2c0eQ1thkrW7r/uBC/CZ9xTzzv8
Inwt4AVCIEvdpJjIdn5v0PngzZNhMe9K1QWdrnroumjGdgNLevbuyxtC/RT2bmZ2
cpRHwz/YJrL3hJP9baYHVX3dseZ264VShhiDRgZzoXXrMw/h1eLUKWyEJWV0Kbki
GnmzFOOpCV57ZWg3KRvk3xKLEBWCMM4XS8J2E4/1gwvyhyckHVCxBE/AoqLNDiK2
rnqkZzZgYndDM6pTFKTlF7rnDePp3VzacuXYeOyaNO2PH8l4KE9Rxglizb28yNkY
gL0w0+x/tbuYWvwGe9igv3kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37332864303910298759785476162292909210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '53706'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1210 West Dayton Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Wisconsin-Madison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.fakesite.wisc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713250302682649819434307519131841244113887864632927177318310601552053322195470545071065276257477843234297826115553252961840981634775454253782162695965228695473768747988096036866938773763814112548820019442642509917572583162126718590248409765853364156769120085984906085933739245032117194111328540646227013176937476303585321982338511305746126665201534434154367293955268212771364520956164459187273666596091966980608877948016182723334205293620937136262857963619812918808038750753725352292878197453896273546672692849841031545039829930572494327954323640974968256599210498366590762500259289849969944795727725065200574986825152049504884561792112712367816970969128801876265037822565144306321555571704453343749127913515032532199143886335893874890011760857267015681910787473247650552608362445471217857734111359803382589218362933486313298596733314683040903020365991943654102217747838120165310556381924715454343625874838617362838414257031092314308429106352525869024929772770126523305460897273685163149216153646650436606720200322053263119267839049624211414202438440634104612551002678313509198175980357266022954221695067248110783283583638976843777425342448582033613130618343311928221224890006131564434947163602848561828584836859779712091384763694969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5beabb3fc4228b3524c54bd8d2eb14344ea3b6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.fakesite.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.fakesite.wisc.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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