asa-is-web-01.asa.uw.edu

- University of Washington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number cd:bf:f8:22:af:e9:2f:7d:14:a9:5c:77:19:f7:18:15 was issued on by Internet2.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Washington

Organization: University of Washington
State / Province: Washington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): cd:bf:f8:22:af:e9:2f:7d:14:a9:5c:77:19:f7:18:15
Serial Number (int): 273488500621668917814844511785156286485
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ba:54:11:bc:8c:24:2d:75:f4:c0:a0:a4:12:1e:49:bd:2e:a4:cb:c1
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 48:1e:e7:0e:d3:97:81:10:17:7d:6f:b2:ea:b0:81:67:e9:be:74:61
Fingerprint (sha256): 02:4f:3d:b8:04:91:78:38:76:1c:eb:14:99:62:80:b8:58:ab:81:bf:38:28:69:bb:43:11:45:20:62:ef:41:47

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate asa-is-web-01.asa.uw.edu

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asa-is-web-01.asa.uw.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asa-is-web-01.asa.uw.edu
cdn.doem.washington.edu
cdn.registrar.washington.edu
constitution.uw.edu
constitution.washington.edu
datagov.uw.edu
datagov.washington.edu
datagovernance.uw.edu
datagovernance.washington.edu
doem.uw.edu
doem.washington.edu
emfinadmin.uw.edu
emfinadmin.washington.edu
eoss.uw.edu
eoss.washington.edu
eventservices.uw.edu
huskycardprogram.uw.edu
huskycardprogram.washington.edu
iship.uw.edu
iship.washington.edu
iss.uw.edu
iss.washington.edu
kb.registrar.uw.edu
kb.registrar.washington.edu
osfa.uw.edu
osfa.washington.edu
privacy.uw.edu
privacy.washington.edu
registrar.uw.edu
registrar.washington.edu
studentdata.uw.edu
studentdata.washington.edu
teaching.uw.edu
teaching.washington.edu
teachingremotely.uw.edu
teachingremotely.washington.edu

Other certificates including the domain name uw.edu

(limited to 100 certificates)
cds4.cvent.com
omiist3.dom.washington.edu
test-web-lws.edu.help
mail.radonc.washington.edu
carpepm.almonds.com
mx11.s.uw.edu
it.uahs.arizona.edu
rayleigh.ece.uw.edu
saml.nkrumm.me
cmms.admin.washington.edu
myuw.washington.edu
climatevideo.uw.edu
5654617534758912-fe3.pantheonsite.io
www.collaborate-uw.org
nartc.fcm.arizona.edu
mphpublichealthpractice.uw.edu
calendar.sdzsafaripark.org
uwir.org
hyak.uw.edu
pfinder.apl.uw.edu
*.app.foster.uw.edu
*.sandbox.iam.s.uw.edu
leekvbuild.s.uw.edu
www.tacoma.uw.edu
wetestag11.s.uw.edu
bioengineering.uw.edu
cds4.cvent.com
uconnectlabs.com
webhost.ischool.uw.edu
cdn-test.battlefields.org
academics.ischool.uw.edu
test.eis.uw.edu
unite.uw.edu
digitalcommons.law.uw.edu
help.evans.uw.edu
citeak.multidevcom.uaf.edu
tls.automattic.com
uconnectlabs.com
cne.nursing.uw.edu
keeplearning.uw.edu
info343.ischool.uw.edu
maebenne.ischool.uw.edu
*.event.uw.edu
scout-rest01.s.uw.edu
abc.washington.edu
chns120.courseresource.yale.edu
*.mediaamp.uw.edu
asa-is-web-01.asa.uw.edu
gradepage-test.s.uw.edu
gamer.ischool.uw.edu
*.ischool.uw.edu
uwpctc.org
www.labmed.uw.edu
sni.cloudflaressl.com
youth-teen.uw.edu
bootcamp.uw.edu
psc.apl.uw.edu
wario.s.uw.edu
fsb-vrops.foster.uw.edu
remote.dental.uw.edu
sdb.admin.washington.edu
humanities.washington.edu
stage.dance.uw.edu
facweb01.s.uw.edu
ws.admin.washington.edu
aca-jobs.s.uw.edu
enroll31.s.uw.edu
myplan-eval.washington.edu
mail.radonc.washington.edu
tegrity-test.s.uw.edu
hepatitisc.uw.edu
uconnectlabs.com
fs-connection.sefs.uw.edu
psc502.s.uw.edu
5631131353350144-fe1.pantheonsite.io
equip.uw.edu
www.labmed.uw.edu
hub.meed.com
uwhs.uw.edu
dev.medicine.uw.edu
sustainability.uw.edu
uconnectlabs.com
sycorax.labmed.uw.edu
magazine.foster.uw.edu
yakamafish-star.net
speedtest.s.uw.edu
peach-test.s.uw.edu
eliza.ischool.uw.edu
apps.grad.uw.edu
uconnectlabs.com
crust01.s.uw.edu
ws.admin.washington.edu
cmts.aims.uw.edu
exchange.washington.edu
myuw.uw.edu
uwksdev.cac.washington.edu
brite.uw.edu
my.dental.washington.edu
scanreview.cpd.uw.edu
grad.uw.edu

Certificate

The complete raw certificate details for asa-is-web-01.asa.uw.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJxjCCCK6gAwIBAgIRAM2/+CKv6S99FKlcdxn3GBUwDQYJKoZIhvcNAQELBQAw
djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjMwNTEwMDAwMDAwWhcNMjQwNTA5
MjM1OTU5WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEhMB8G
A1UEChMYVW5pdmVyc2l0eSBvZiBXYXNoaW5ndG9uMSEwHwYDVQQDExhhc2EtaXMt
d2ViLTAxLmFzYS51dy5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCZGfU4UDYOgJWma+biqKKPSYYIFwcNIzRoIqe5+dJX4agOGobDZM9dHRyKua9
lAvlS5OEfFvAQ8SKIXrpiZCZ/FWYwUJsOOWMvItkhOqf8hbkpEs1N57k5oL0fPbZ
UgVwX9Ppccban+bD9P/6szSUlE9BcPm5j9L+NNfLBxfO3JwegOdIpIUQEAy5Di4S
RamMLQRmZJ7Xo4DMPiR5aMf29YKbCSrWyQIsD0KVwUDTYGhCqe9r5Zs8mBFB2/Kd
oue2xuAqBksk082mbd8nl2V2hlnhEsj1JC57wuuqcYCw6/TijH4tSnlYtgS76Q/+
ktBpiPPadA+BkzgM0M7+FjtvAgMBAAGjggZbMIIGVzAfBgNVHSMEGDAWgBQeBaN3
j2yW4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUulQRvIwkLXX0wKCkEh5JvS6ky8Ew
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYB
BQUHAgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkv
Y3BzX3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9j
cmwuaW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1Bggr
BgEFBQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNv
bS9JbkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8v
b2NzcC51c2VydHJ1c3QuY29tMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQB2
/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYgGRFE2AAAEAwBGMEQC
IE5rpupLZB7v04/wEL/axMMHIXgTGa4OYnbCNeh+ma96AiA0NCrO7D6/qzW91zZ/
qdIdOtatFcatma32kSAqgJJenQB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABiAZEUYwAAAQDAEYwRAIgfSrrJ6NEbxKtnDTuU/xNPyJBKBFtQZT9
E0F37zstQnsCIEM+0HxQ9nz3s9G5X7JkQm28oE4u019z9Sb5ZRdPssrCAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGIBkRRrgAABAMARzBFAiEA
jtNRUjO7lUSEzRUPRai+ME9wfT4NL2NvTxnOUrj9KNoCIDmbUzzmhoLdRPV4wf6C
ku+d0K7Z5F1Hc541uTshGGnCMIIDMAYDVR0RBIIDJzCCAyOCGGFzYS1pcy13ZWIt
MDEuYXNhLnV3LmVkdYIXY2RuLmRvZW0ud2FzaGluZ3Rvbi5lZHWCHGNkbi5yZWdp
c3RyYXIud2FzaGluZ3Rvbi5lZHWCE2NvbnN0aXR1dGlvbi51dy5lZHWCG2NvbnN0
aXR1dGlvbi53YXNoaW5ndG9uLmVkdYIOZGF0YWdvdi51dy5lZHWCFmRhdGFnb3Yu
d2FzaGluZ3Rvbi5lZHWCFWRhdGFnb3Zlcm5hbmNlLnV3LmVkdYIdZGF0YWdvdmVy
bmFuY2Uud2FzaGluZ3Rvbi5lZHWCC2RvZW0udXcuZWR1ghNkb2VtLndhc2hpbmd0
b24uZWR1ghFlbWZpbmFkbWluLnV3LmVkdYIZZW1maW5hZG1pbi53YXNoaW5ndG9u
LmVkdYILZW9zcy51dy5lZHWCE2Vvc3Mud2FzaGluZ3Rvbi5lZHWCFGV2ZW50c2Vy
dmljZXMudXcuZWR1ghdodXNreWNhcmRwcm9ncmFtLnV3LmVkdYIfaHVza3ljYXJk
cHJvZ3JhbS53YXNoaW5ndG9uLmVkdYIMaXNoaXAudXcuZWR1ghRpc2hpcC53YXNo
aW5ndG9uLmVkdYIKaXNzLnV3LmVkdYISaXNzLndhc2hpbmd0b24uZWR1ghNrYi5y
ZWdpc3RyYXIudXcuZWR1ghtrYi5yZWdpc3RyYXIud2FzaGluZ3Rvbi5lZHWCC29z
ZmEudXcuZWR1ghNvc2ZhLndhc2hpbmd0b24uZWR1gg5wcml2YWN5LnV3LmVkdYIW
cHJpdmFjeS53YXNoaW5ndG9uLmVkdYIQcmVnaXN0cmFyLnV3LmVkdYIYcmVnaXN0
cmFyLndhc2hpbmd0b24uZWR1ghJzdHVkZW50ZGF0YS51dy5lZHWCGnN0dWRlbnRk
YXRhLndhc2hpbmd0b24uZWR1gg90ZWFjaGluZy51dy5lZHWCF3RlYWNoaW5nLndh
c2hpbmd0b24uZWR1ghd0ZWFjaGluZ3JlbW90ZWx5LnV3LmVkdYIfdGVhY2hpbmdy
ZW1vdGVseS53YXNoaW5ndG9uLmVkdTANBgkqhkiG9w0BAQsFAAOCAQEAiTo9F7Kc
K9p/ByfpkdAtEHpHZDTvIU7ocLI7c0UTwoAAfyjOD20rZxi5D1hXYPcTrAbpEVsU
2HennILiQN+BN/UZMqufLW3oBBQ8dMh9T4+i/ZN6gUrOlylf28quul6zP0MYVE68
H2AOH243koOm4lcETzCf/QKQqqD/OiGMuL72eC7SL3A+a04+yyWVu03d98EUOZ6N
gPGHEJKH23H9BcqNLRIKAnigO/el3SSqxEZBQJTVYJuRQCJe9clVd4UuNI3pQVWX
tYhZQj4wbAYigqiIr0dIFcEjD9Fsin3XYJYhGEs/f/1Smt7v/2rygaAkIKmapTvw
6vVBQq09jT+Gwg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmRn1OFA2DoCVpmvm4qi
ij0mGCBcHDSM0aCKnufnSV+GoDhqGw2TPXR0cirmvZQL5UuThHxbwEPEiiF66YmQ
mfxVmMFCbDjljLyLZITqn/IW5KRLNTee5OaC9Hz22VIFcF/T6XHG2p/mw/T/+rM0
lJRPQXD5uY/S/jTXywcXztycHoDnSKSFEBAMuQ4uEkWpjC0EZmSe16OAzD4keWjH
9vWCmwkq1skCLA9ClcFA02BoQqnva+WbPJgRQdvynaLntsbgKgZLJNPNpm3fJ5dl
doZZ4RLI9SQue8LrqnGAsOv04ox+LUp5WLYEu+kP/pLQaYjz2nQPgZM4DNDO/hY7
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273488500621668917814844511785156286485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asa-is-web-01.asa.uw.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24539743006181663707621438989954052944580757037155791795593619687696802395583352246786654329634486556210176516324940984951111861346433657153599996827050858807661394563118427705926445711931349399637400933552730789773044888673820316293039326193737876002474622986981388259651945691033417806581122910952776154630382741042135821283414744174464467580893032829185967247959982018841700371332152217621908027349292431372181299537806444306371326619668569138861991981174564673002808398957716716418314814583583489063878501016073697380329954307891592043334076475459297178495306897735210141861094785526727518590860330891553866660719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba5411bc8c242d75f4c0a0a4121e49bd2ea4cbc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (807 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa-is-web-01.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.doem.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.registrar.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constitution.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constitution.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datagov.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datagov.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datagovernance.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datagovernance.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doem.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doem.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emfinadmin.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emfinadmin.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoss.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoss.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventservices.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huskycardprogram.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huskycardprogram.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iship.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iship.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.registrar.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.registrar.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osfa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osfa.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentdata.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentdata.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachingremotely.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachingremotely.washington.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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