www.uchicagomedicine.org

- The University of Chicago -

Issued by InCommon ECC Server CA

About this certificate

This digital certificate with serial number 13:3b:c2:55:78:1c:85:a9:e7:9a:a7:95:f3:d9:b1:4d was issued on by Internet2.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The University of Chicago

Organization: The University of Chicago
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:3b:c2:55:78:1c:85:a9:e7:9a:a7:95:f3:d9:b1:4d
Serial Number (int): 25565618993596560862227998261986832717
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 2e:e4:99:b6:3d:65:c1:9c:88:a5:99:5e:9a:b5:63:6f:14:22:51:4a
AuthorityKeyId: e4:b7:cf:cb:0a:94:74:a7:9c:ad:a8:12:04:3a:d0:29:5d:2e:fc:ee

Fingerprint (sha1): 19:ca:9b:11:f5:73:3e:14:e2:02:55:9b:20:a3:62:3d:b0:67:37:b4
Fingerprint (sha256): b2:72:0c:29:7f:8a:6c:d1:ac:47:72:80:a5:72:65:76:d3:cd:64:aa:23:2a:bd:a8:c4:5e:02:76:a1:57:60:5e

Issuing Certificate URL: http://cert.incommon-ecc.org/InCommonECCServerCA.crt

Revocation information

OCSP Server: http://ocsp.incommon-ecc.org
CRL Distribution Point: http://crl.incommon-ecc.org/InCommonECCServerCA.crl

Check the revocation status for certificate www.uchicagomedicine.org

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.uchicagomedicine.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.uchicagomedicine.org
app.m.uchicagomedicine.org
birthcenter.uchospitals.edu
cancer.uchicago.edu
community.uchicagomedicine.org
healthlibrary.uchicagomedicine.org
healthlibrary.uchospitals.edu
images.m.uchicagomedicine.org
ingalls.org
kovlerdiabetescenter.org
m.uchicagomedicine.org
m.uchospitals.edu
pages.uchicagomedicine.org
prod.uchicagomedicine.org
riskonnect.uchospitals.edu
sciencelife.uchospitals.edu
stage.uchicagomedicine.org
trauma.uchospitals.edu
uchicagokidshospital.org
uchicagomedicine.org
uchicagomedicine.pharmacy
uchospitals.edu
ucmleave.uchospitals.edu
www.ingalls.org
www.kovlerdiabetescenter.org
www.uchicagokidshospital.org
www.uchicagomedicine.pharmacy
www.uchospitals.edu

Other certificates including the domain name uchicagomedicine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.uchicagomedicine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N+lrnw4U4kVSZeh+fcI
+HySrVX5FIYVQoIl6rlsgRNx6J7TB68pMirLaoxbOL1k2nkf0x0OZpQBS/TTPhpD
f1GwBGwZzPfuIM/mUgtemGUPBilAhyjnOxZisj7rOBpHjvv0Ogr73Z3tooyLA+Qo
5m4N5e8D3pSEKni8RnlfPLPECcdWMlCeTjcoimczTkfrKRW09EgsWDHStyk76t/y
ig/Oi6nkucWwH/2a4VICpYOavYDblyih7QVEXvmbdDNdg9TJhk7pEbBQWaB0Du6/
ANY7zxCFahcfwlgS19ny4fC6ehvH1TZGd6vn6wVX4pg56sGLL8o9rf+y9tOrovcm
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25565618993596560862227998261986832717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon ECC Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.uchicagomedicine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26872805194370860060894925219862126341634637269717930161717562948065395996307381405951072173867589787543793468291131334443765012310301533041371362358018973409838343393521541372338599378661072355957566946341508185312906496300998615997273674579807610723505587579535440402934704633286244890645789321971034185558052546351409470530239654542231942350501497649889772689997305186496126690228889074880024531419904063867994457244961808614246011570715717876649242450874377934475209877340856440950735794033453672816951358384948026877091778205447869167955336167990207419196070363793501647901762863348583266433845837190263599474249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e4b7cfcb0a9474a79cada812043ad0295d2efcee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ee499b63d65c19c88a5995e9ab5636f1422514a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-ecc.org/InCommonECCServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.incommon-ecc.org/InCommonECCServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.incommon-ecc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183ccdd6758000004030046304402201e45ef0bbf8b1ab0f18dc10a5754767a18522c35d3326849e620c1c7f5aeffa102202a5144fad15084077c775a7528a7dbc475ad87c18359467a20fa3640116f0dc80077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183ccdd67290000040300483046022100e01f7f5ce9e84e9459fb6c569c1806da2f1eca3a7cf6bb297ae6963c352c7fb0022100994afa4fb9297d080852d44c34503f04a2558d62b4ef7616a41feacbd9c5a266007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183ccdd66ef00000403004830460221008bb0edfd713fd608dda014cefd6210d376efa812ba95662ec2505860ef3a15e5022100f56c0735912d2973e07dd196f2c2f7223353bfd834850deb21f67964550bb87c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.m.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthcenter.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthlibrary.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthlibrary.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.m.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovlerdiabetescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskonnect.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencelife.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trauma.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchicagokidshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchicagomedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchicagomedicine.pharmacy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucmleave.uchospitals.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovlerdiabetescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uchicagokidshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uchicagomedicine.pharmacy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uchospitals.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (568 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 60690151708857698674971860151071946591956105266768550082659488723287451795541
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32242013765877670710444799370589366964948399710556062491190911264017147603906