writing.wisc.edu

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:23:4f:d3:1c:1e:13:b9:0c:3a:71:d6:f3:ab:9a:af was issued on by Amazon.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=writing.wisc.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:23:4f:d3:1c:1e:13:b9:0c:3a:71:d6:f3:ab:9a:af
Serial Number (int): 4171033413606386765526783427179420335
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: af:73:af:ab:4b:fe:47:8f:93:9f:ff:25:2c:63:c7:7d:44:cb:e4:33
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 99:8b:a3:87:4b:e0:b6:5e:ed:e6:80:de:31:57:3f:2a:f0:e7:83:18
Fingerprint (sha256): ce:2d:11:05:4b:78:2c:48:08:14:90:41:d6:ff:c6:bf:66:78:45:81:d8:a8:0e:c4:a1:4c:55:dd:3a:34:9a:76

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate writing.wisc.edu

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for writing.wisc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

writing.wisc.edu
*.dinhlab.oncology.wisc.edu
asm.wisc.edu
*.yj.wcwpds.wisc.edu
erlkonigproject.music.wisc.edu
*.soarfamily.wisc.edu
wiseminar.wisc.edu
microbiology.wisc.edu
instructionalcontinuity.wisc.edu
*.otegui.cellimaging.wisc.edu
*.wiseminar.wisc.edu
smng.wisc.edu
*.microbiology.wisc.edu
soarfamily.wisc.edu
yj.wcwpds.wisc.edu
*.free-expression.wisc.edu
konopkalab.medicine.wisc.edu
*.emed.wisc.edu
*.show.wisc.edu
commnsknowledge.wisc.edu
pcs.education.wisc.edu
*.chinese.soarfamily.wisc.edu
intranet.genetics.wisc.edu
*.commnsknowledge.wisc.edu
intranet.artsdivision.wisc.edu
spanish.soarfamily.wisc.edu
*.freedmanlab.soils.wisc.edu
financeapis.wisc.edu
*.evadecovid.medicine.wisc.edu
uncommonfruit.cias.wisc.edu
*.mindfuljustice.chm.wisc.edu
*.hotchkisslab.botany.wisc.edu
*.mycareer.wsb.wisc.edu
*.uncommonfruit.cias.wisc.edu
*.tinycasestudies.wisc.edu
*.ngolab.che.wisc.edu
*.epmgso.rso.engr.wisc.edu
emed.wisc.edu
eecf.wisc.edu
mindfuljustice.chm.wisc.edu
*.inclusioneducation.wisc.edu
evadecovid.medicine.wisc.edu
hotchkisslab.botany.wisc.edu
*.attielab.biochem.wisc.edu
inclusioneducation.wisc.edu
freedmanlab.soils.wisc.edu
chemconnect.wisc.edu
kcoonlab.bact.wisc.edu
cellimaging.wisc.edu
*.lctlcareers.wisc.edu
*.konopkalab.medicine.wisc.edu
*.erlkonigproject.music.wisc.edu
*.hrycklab.medicine.wisc.edu
*.rivers2lake.org
*.spanish.soarfamily.wisc.edu
fsl.wisc.edu
*.driftless.wisc.edu
*.orrocklab.zoology.wisc.edu
*.sealc.wisc.edu
*.intranet.artsdivision.wisc.edu
*.scdm.geography.wisc.edu
equity.uwpd.wisc.edu
*.herd.engr.wisc.edu
*.writing.wisc.edu
*.cellimaging.wisc.edu
*.asm.wisc.edu
*.instructionalcontinuity.wisc.edu
driftless.wisc.edu
*.eecf.wisc.edu
show.wisc.edu
lctlcareers.wisc.edu
otegui.cellimaging.wisc.edu
herd.engr.wisc.edu
epmgso.rso.engr.wisc.edu
scdm.geography.wisc.edu
*.pcs.education.wisc.edu
tinycasestudies.wisc.edu
*.equity.uwpd.wisc.edu
learninganalytics.education.wisc.edu
chinese.soarfamily.wisc.edu
*.kcoonlab.bact.wisc.edu
*.chemconnect.wisc.edu
attielab.biochem.wisc.edu
patientpartnerships.wisc.edu
fletcher.lafollette.wisc.edu
*.learninganalytics.education.wisc.edu
hrycklab.medicine.wisc.edu
sealc.wisc.edu
rivers2lake.org
dinhlab.oncology.wisc.edu
www.waisman.wisc.edu
*.fsl.wisc.edu
free-expression.wisc.edu
*.smng.wisc.edu
*.patientpartnerships.wisc.edu
*.financeapis.wisc.edu
ngolab.che.wisc.edu

Other certificates including the domain name wisc.edu

(limited to 100 certificates)
biologymajor.wisc.edu
www.wolmanlab.zoology.wisc.edu
ipib.wisc.edu
my.research.wisc.edu
hytalestatus.io
panther.engr.wisc.edu
idbee.ece.wisc.edu
werling.genetics.wisc.edu
wyso.music.wisc.edu
training.uwpd.wisc.edu
resources.recsports.wisc.edu
win2.dwht.doit.wisc.edu
ponto.discovery.wisc.edu
fluidmodules.engr.wisc.edu
s3.drive.wisc.edu
curbmag.com
test.fakesite.wisc.edu
www.net.wisc.edu
wwwtest.payseur.genetics.wisc.edu
instruction.bact.wisc.edu
hr.wisc.edu
wwwtest.paris.soc.wisc.edu
hipaa.wisc.edu
ourwisconsin.students.wisc.edu
artsticketing.wisc.edu
csd.wisc.edu
geoscience.wisc.edu
learningstore.extension.wisc.edu
animalresearch.wisc.edu
midus2-project5.ssc.wisc.edu
browlab.bmolchem.wisc.edu
cctaplogin.occfr.wisc.edu
paleobiodb.org
ncl.labs.wisc.edu
zendeskauth.medicine.wisc.edu
servercertificates.wisc.edu
aheadd.waisman.wisc.edu
louie.doit.wisc.edu
accessit.urp.wisc.edu
alps.cfli.wisc.edu
theatre.wisc.edu
hps.wisc.edu
volta.fammed.wisc.edu
parenthetical.wisc.edu
allofus.wisc.edu
roylab.discovery.wisc.edu
smnad.philosophy.wisc.edu
sustainability.wisc.edu
you.uhs.wisc.edu
mail.aims.wisc.edu
dc-1.neurosurgery.wisc.edu
test.udp.wisc.edu
cclab.neuro.wisc.edu
graphics.apl.wisc.edu
news.wisc.edu
webhosting.doit.wisc.edu
www.music.wisc.edu
cbitp.chem.wisc.edu
t32database.wisc.edu
franck.engr.wisc.edu
uhs.wisc.edu
deco-web.wipac.wisc.edu
wwwtest.authoring.learnuw.wisc.edu
spock.fammed.wisc.edu
helpnow.uwhealth.org
international.engr.wisc.edu
staff.ohr.wisc.edu
prod.uhs.wisc.edu
wwwtest.uwpolice.wisc.edu
wiser.wisc.edu
commarts.wisc.edu
trial.dwh.doit.wisc.edu
admissions.bus.wisc.edu
ericshusta.che.wisc.edu
idp.adtest.wisc.edu
asm.uwsc.wisc.edu
clipsheet.uc.wisc.edu
researchguides.ebling.library.wisc.edu
cvrc.wisc.edu
ehr.primate.wisc.edu
hittinger.genetics.wisc.edu
epw.polisci.wisc.edu
google.wisc.edu
automation-identity-a.cci.wisc.edu
weather.wisc.edu
textilecollection.wisc.edu
rdweb.athletics.wisc.edu
behavior.polisci.wisc.edu
npp.wisc.edu
mask14.classy.org
galipeau.medicine.wisc.edu
virus.che.wisc.edu
smrs.biostat.wisc.edu
ma.ece.wisc.edu
airwatch.ortho.wisc.edu
evm.doit.wisc.edu
testing.doit.wisc.edu
media.wcwpds.wisc.edu
medmicro.wisc.edu
advising.continuingstudies.wisc.edu

Certificate

The complete raw certificate details for writing.wisc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N9jiqZ80QsB/ZW7f4ZG
P3C6w27fu5Hd58/KQsIe4+dabMf08rb1tLSA6kF2nY53jpG+wCibTC/8xQuAWlz+
eBlznnvfmZTXvZqS1f23m7wMjQ2abSrOYIhdug3UhSdvjlvWXnL88j5KL4duPIBy
nIT5degig3uGJSvhhVA3S+dUkopBr3SE4FpXNqc8KQalkOqEhwQySYsgtiF4gVqy
XaFa+s1QcWxujyBTDgn38+VIRIjzNYu+HJ/hE2TVcVNJSGFrL26h91ZKC9KVGcVS
7Put7MTyNsKsyCbqtmtlb/9rjxR0QKKmcf4bH56dBUOaFwKpluiRHfxgEESnh9Hp
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4171033413606386765526783427179420335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'writing.wisc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27882584232381619470344603048678482605295930589150082128838679066454476769665100433269773602910912149647920208370638010240149043912417655276240149643785514865541965099345826083793377560988064841862084300014882261362461192336348933887621725888341785784973811951736587504081618760706333240565687742752529582842734160484422422378004257893164711349812570680167532162169663940964282991402797870238452813616526029194220677241531103085982680674587667903722523969932560050954682813872061486995019024283280069921040729510022497025024436099756632112620192925321933931755247250720376987964394195222959404746150471975519676131783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af73afab4bfe478f939fff252c63c77d44cbe433
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2453 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writing.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinhlab.oncology.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asm.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yj.wcwpds.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erlkonigproject.music.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiseminar.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiology.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructionalcontinuity.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otegui.cellimaging.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiseminar.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smng.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microbiology.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yj.wcwpds.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-expression.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konopkalab.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emed.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.show.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commnsknowledge.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcs.education.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinese.soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.genetics.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commnsknowledge.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.artsdivision.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedmanlab.soils.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeapis.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evadecovid.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommonfruit.cias.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindfuljustice.chm.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotchkisslab.botany.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycareer.wsb.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncommonfruit.cias.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinycasestudies.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngolab.che.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epmgso.rso.engr.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emed.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eecf.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindfuljustice.chm.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inclusioneducation.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evadecovid.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotchkisslab.botany.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attielab.biochem.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inclusioneducation.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedmanlab.soils.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemconnect.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcoonlab.bact.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellimaging.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lctlcareers.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konopkalab.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erlkonigproject.music.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrycklab.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivers2lake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spanish.soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driftless.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orrocklab.zoology.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sealc.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intranet.artsdivision.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scdm.geography.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equity.uwpd.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herd.engr.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writing.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cellimaging.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asm.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instructionalcontinuity.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driftless.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eecf.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'show.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lctlcareers.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otegui.cellimaging.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herd.engr.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epmgso.rso.engr.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scdm.geography.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcs.education.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinycasestudies.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equity.uwpd.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learninganalytics.education.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinese.soarfamily.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcoonlab.bact.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemconnect.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attielab.biochem.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientpartnerships.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletcher.lafollette.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learninganalytics.education.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrycklab.medicine.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealc.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivers2lake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinhlab.oncology.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waisman.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsl.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-expression.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smng.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patientpartnerships.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financeapis.wisc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngolab.che.wisc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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