It looks like you are using an 802.1X authentication using termination on the controller (the keys exchange/cert validation)
This is a normal process when using PEAP if in your wireless profile in windows you have the option to validate the very from the Radius server which in this case is the cert installed on your controller