web.uillinois.edu

- University of Illinois -

Issued by InCommon Server CA

About this certificate

This digital certificate with serial number f0:17:29:2d:ea:63:00:0c:d0:ee:ad:1e:dc:6e:93:3d was issued on by Internet2.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Illinois

Organization: University of Illinois
Organization unit: University Administration
Address: 506 S. Wright St.
Postal code: 61801
State / Province: IL
Locality: Urbana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f0:17:29:2d:ea:63:00:0c:d0:ee:ad:1e:dc:6e:93:3d
Serial Number (int): 319134977032726349583505153636449555261
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:f6:33:4d:54:fa:2d:1c:dc:64:5f:e6:16:4d:b5:3c:91:74:f1:b8
AuthorityKeyId: 48:4f:5a:fa:2f:4a:9a:5e:e0:50:f3:6b:7b:55:a5:de:f5:be:34:5d

Fingerprint (sha1): 28:a1:03:ec:40:0c:9d:7e:0c:57:53:14:f6:b9:1d:6a:73:4f:7e:2b
Fingerprint (sha256): 04:30:30:5f:aa:ab:84:21:58:de:cc:37:05:47:59:08:96:4c:45:73:2a:68:56:7c:9e:76:91:18:db:80:7c:91

Issuing Certificate URL: http://cert.incommon.org/InCommonServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon.org
CRL Distribution Point: http://crl.incommon.org/InCommonServerCA.crl

Check the revocation status for certificate web.uillinois.edu

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.uillinois.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.uillinois.edu
careers.scs.illinois.edu
dentistry.uic.edu
paymybill.illinois.edu
paymybill.uic.edu
paymybill.uillinois.edu
paymybill.uis.edu
uillinois.edu
web.admin.uillinois.edu
www.aits.uillinois.edu
www.audits.uillinois.edu
www.ccfd.illinois.edu
www.cio.uillinois.edu
www.datacenter.illinois.edu
www.ehso.uic.edu
www.ethics.uillinois.edu
www.flycmi.com
www.foia.uillinois.edu
www.hr.uic.edu
www.hr.uillinois.edu
www.icac.uillinois.edu
www.itpc.uillinois.edu
www.obfs.uillinois.edu
www.ois.uic.edu
www.ready.uic.edu
www.ssn.uillinois.edu
www.studentmoney.uillinois.edu
www.treasury.uillinois.edu
www.uillinois.edu
www.uocpres.uillinois.edu
www.utmt.uillinois.edu

Other certificates including the domain name uillinois.edu

(limited to 100 certificates)
atlasweb16dev.ad.uillinois.edu
nessie.uihr.uillinois.edu
my.engr.illinois.edu
my.uillinois.edu
uifcrmdb03.ad.uillinois.edu
calendars.illinois.edu
dev.auth.uillinois.edu
calendars.illinois.edu
chipbsql2.admin.uillinois.edu
appserv5.admin.uillinois.edu
illinois.edu
liblapfac04.ad.uillinois.edu
tracker-test.admin.uillinois.edu
chiedwebwin1.ad.uillinois.edu
appserv7.admin.uillinois.edu
banneradmintc.apps.uillinois.edu
chiconf1.admin.uillinois.edu
uajobs.hr.uillinois.edu
urbskypeccapp.ad.uillinois.edu
helpdesk.ahs.illinois.edu
vetmedtest1.admin.uillinois.edu
web.uillinois.edu
www.wcms.uillinois.edu
www.wcms.uillinois.edu
lib-sccm-pdp02.library.illinois.edu
techreadyprod.web.illinois.edu
lists.illinois.edu
chioid.admin.uillinois.edu
www2.wcms.uillinois.edu
blogs.illinois.edu
illinois.edu
faa-www-rori.ad.uillinois.edu
illinois.edu
uicplacement.uillinois.edu
rdpgateway.illinois.edu
exchange.uillinois.edu
hrnetptest.uihr.uillinois.edu
remote.uillinois.edu
pcard.apps.uillinois.edu
tracker.admin.uillinois.edu
hrnet.uihr.uillinois.edu
online.uif.uillinois.edu
darsweb.admin.uillinois.edu
wac.atlas.illinois.edu
ui2web4.apps.uillinois.edu
webprod.admin.uillinois.edu
ossswebcs.admin.uillinois.edu
online.uif.uillinois.edu
blogs.illinois.edu
www.ipay.uillinois.edu
chipbweb1.ad.uillinois.edu
project.ui-integrate.uillinois.edu
training.obfs.uillinois.edu
hipaa.uillinois.edu
my.engr.illinois.edu
urbbannerofmws.admin.uillinois.edu
xml.admin.uillinois.edu
urbskypeccapp.ad.uillinois.edu
inquiry.global.uillinois.edu
auth.uillinois.edu
myuicdev.admin.uillinois.edu
chiisgsapp2.ad.uillinois.edu
illinois.edu
support.uillinois.edu
obfsappsprod2.ui.uillinois.edu
www.icard.uillinois.edu
appsobfs-cf11prod.obfs.uillinois.edu
atlas-cplan03.atlas.illinois.edu
www.isws.illinois.edu
www-s.usp.uillinois.edu
ss.global.uillinois.edu
mobiusview.apps.uillinois.edu
www2.wcms.uillinois.edu
ui2web1.apps.uillinois.edu
sts.addev.uillinois.edu
isgs-zinc.isgs.illinois.edu
uifcrmdb03.ad.uillinois.edu
appserv4.admin.uillinois.edu
remote.uillinois.edu
eddie.ds.uillinois.edu
ilearn.uif.uillinois.edu
newhire.uihr.uillinois.edu
banneradmintc.apps.uillinois.edu
data.isgs.illinois.edu
illinois.edu
uifcrmdb01.ad.uillinois.edu
appserv5.admin.uillinois.edu
lyncfepool3.lync.uillinois.edu
login.uillinois.edu
blogs.illinois.edu
bxsprod.apps.uillinois.edu
lyncpchatpool.lync.uillinois.edu
mosssecure.obfs.uillinois.edu
chiconf1.admin.uillinois.edu
learn.obfs.uillinois.edu
smart.physics.illinois.edu
www.ds.uillinois.edu
liblaplbo02.ad.uillinois.edu
www.uif.uillinois.edu
urbasdev6.admin.uillinois.edu

Certificate

The complete raw certificate details for web.uillinois.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQpIA1dYK7ol2aMnrhX8
49tQt3xadnI3T+3Fxgz2DX/5nXBxL2r+EH4NDDyGqJOCFIw5zZDI4/it2fswr9lN
hi8cOsddA9GZqdVhv5lRJxCx+VaAnIOIoBlkGkfpIA6l0pA+kPlFAKR1/xXqo2zR
JzvEpfkY8k3K34FBISq04mGbIjy42+U+Trgyx8Z9Q79TFMHgKlNDPL+NrekgIZcW
4juPQuJQi8x1S1sYxtGZQeVvBDwCAPnoaFFgLK9L5MV9VOu4E5TDtbu4RP7+FVUv
Qh56lQiuuXsBUeTGtHHAky7F89e95TZqvOu8uQoMsgOfrZa+xG7roBR0NS2mt3nC
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319134977032726349583505153636449555261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '61801'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urbana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '506 S. Wright St.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.uillinois.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22349249877464550719546534113577870901393501122816751129461443268076091973705762816497255169570043014727949759112878829951431378200567029333979893754421626465627366722452312583011973702419845576562890292059033748265366719636027440156446862732763539340478754053348189509387359851998520242544600330354510183804314539781416967105607026436440935830081584731970219367239503341751439903985006665722690735971543734209692407879634462422069043210120505182513078871656739644362103134060194152400515603686736206511784285054593460233938923911351401485022398019587024267355209617674781349471135787018547969578016529492823821107743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 484f5afa2f4a9a5ee050f36b7b55a5def5be345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbf6334d54fa2d1cdc645fe6164db53c9174f1b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon.org/InCommonServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon.org/InCommonServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (703 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.scs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistry.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymybill.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymybill.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymybill.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymybill.uis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.admin.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aits.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audits.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccfd.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cio.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datacenter.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehso.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethics.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flycmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foia.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icac.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itpc.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obfs.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ois.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ready.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssn.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmoney.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasury.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uocpres.uillinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utmt.uillinois.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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