mcc.mn.gov

- State of Minnesota -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 55:4f:db:2c:3d:c4:d6:a7:c5:bb:da:32:d0:dc:6f:4b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State of Minnesota

Company registration number: 05-11-1858
Organization: State of Minnesota
State / Province: Minnesota
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 55:4f:db:2c:3d:c4:d6:a7:c5:bb:da:32:d0:dc:6f:4b
Serial Number (int): 113399016446400999663959540579732057931
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: eb:fd:f0:91:55:24:9d:28:43:25:08:cf:20:25:68:da:c9:58:ed:86
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): e4:41:69:62:77:21:22:64:02:03:a5:98:7d:f4:9a:d3:92:27:48:d8
Fingerprint (sha256): 00:18:33:82:94:cc:ea:81:f0:a9:90:73:ce:8a:eb:fe:67:2d:ae:61:d5:ce:f4:eb:79:dd:56:a2:35:9a:a4:2c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate mcc.mn.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcc.mn.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcc.mn.gov
www.mcc.mn.gov

Other certificates including the domain name mn.gov

(limited to 100 certificates)
5661601461960704-fe3.pantheonsite.io
preview.ble.mn.gov
mcc.mn.gov
5661601461960704-fe3.pantheonsite.io
education.mn.gov
gisdata.mn.gov
ccbhcreporting.dhs.state.mn.us
dpscrash.gisdata.mn.gov
mhis.dhs.mn.gov
seocportal.dps.mn.gov
mnch-supplan-train.dhs.state.mn.us
mnledc9010fdapp.dps.mn.gov
5687539843203072-fe2.pantheonsite.io
5687539843203072-fe2.pantheonsite.io
renewlicense.dps.mn.gov
mail.co.ym.mn.gov
*.revisor.mn.gov
oimadmin.mneiamstst12.mn.gov
gis.co.ym.mn.gov
dev.eheatnextgen.mn.gov
www.ble.mn.gov
bipdev.dhs.mn.gov
www.lawyerregulation.mn.gov
mail.co.ym.mn.gov
mnchoices-train.dhs.state.mn.us
5687539843203072-fe2.pantheonsite.io
perpich.mn.gov
g46pilvcmseo104.voice.state.mn.us
*.revisor.mn.gov
commissionsandappointments.sos.state.mn.us
5661601461960704-fe3.pantheonsite.io
dps.mn.gov
*.revisor.mn.gov
dpscrash.gisdata.mn.gov
5661601461960704-fe3.pantheonsite.io
osaportal.gisdata.mn.gov
g46pilvcmsco104.voice.state.mn.us
fastmctst.mnlarsdl.dev.dps.mn.gov
edocs.dhs.state.mn.us
licensinglookup.dhs.state.mn.us
lcc.mn.gov
ocm.web.health.state.mn.us
5661601461960704-fe3.pantheonsite.io
sysdes.mnit.mn.gov
remotedhs.dhs.mn.gov
ng911-dev.gisdata.mn.gov
data-securitytraining.dhs.mn.gov
mnhttf.com
cnv-driver.dvs.dps.mn.gov
admin.moms.mn.gov
eheat.commerce.mn.gov
nt.dps.mn.gov
www.lawyerregulation.mn.gov
esupport2.pcrt.dps.mn.gov
5732095699714048-fe1.pantheonsite.io
iibdev-v10.dhs.int.state.mn.us
dps.mn.gov
mnledc9012fddoc.dps.mn.gov
qa2.edit.wcm.mnit.mn.gov
cserapidprod.dhs.state.mn.us
mnvotes.sos.state.mn.us
www.perpich.mn.gov
lccmr.mn.gov
pam.mnit.state.mn.gov
5687539843203072-fe2.pantheonsite.io
intranet.mnit.mn.gov
5732095699714048-fe1.pantheonsite.io
swiftmnsure.dev.intranet.dhs.mn.gov
intranet.dli.mn.gov
hfix-business.mnlars.intg.dps.mn.gov
5661601461960704-fe3.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
www.dhs.state.mn.us
preview.lro.mn.gov
preview.ble.mn.gov
mblsportal.sos.state.mn.us
test.eheatnextgen.mn.gov
mnledc9004fcdoc.dps.mn.gov
qa-md.dps.mn.gov
rc.stage.education.mn.gov
www.health.state.mn.us
5661601461960704-fe3.pantheonsite.io
preview.ble.mn.gov
secanalytics.education.mn.gov
5661601461960704-fe3.pantheonsite.io
stage-db.mnlars.dmz.dps.mn.gov
auth-connect.mnit.mn.gov
dev.sp-eop-office.mn.gov
ssba.dhs.state.mn.us
creports.dhs.mn.gov
datacapdev.dhs.mn.gov
dvs.dps.mn.gov
mnch-supplan-train.dhs.mn.gov
app2.dps.mn.gov
5732095699714048-fe1.pantheonsite.io
perpich.mn.gov
id.mneiamatst.mn.gov
cnotes.dev.intranet.dhs.mn.gov
autotestu.intg.dps.mn.gov
dlancopproxy.dps.mn.gov

Certificate

The complete raw certificate details for mcc.mn.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113399016446400999663959540579732057931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '05-11-1858'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcc.mn.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664851572707644163625656006085279008680655721531955449534040550073637667723162359598946971660169045448592717051266739229868184394238052061227113584973964840141182631717245789893837658020970862413631166518789831478019565692125605976218984527631936320385659559051801950359169044559710387180656324316243575719959365921198663223978094284271999909165938005109230192721437187476195655759486397847646371072511167734386843689981891440075378774375297143980681593698995227305529564794640009190939221588877107879375592007795637201585432461775570206066992589529126701373954713797695684868659770410745196807910001312656332022458629638305012122211607718367198657636596281996212214982479449956702677735858909174793047634753912759005487749077130780055952019845656143724822292541253402584729913121776626723085382402803437912850097365830917193401354678337791109020705319471060633375779149725113915225596925274522843030750808047670907412012578812028259038352568402622890808318943487238224029773635407699625176013784895463401491876163328657079581785824471057860254966541341782682623501329497475877629711707421140756694032249100031142301545421250162364911935706645341910078178268286003847642712683233384146202310347973421063089393240043620556358609051619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebfdf09155249d28432508cf202568dac958ed86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcc.mn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcc.mn.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ab3fb0c3e0000040300483046022100a930fdb429261d862d079fd73ee2dddbe19f56fc30b982a1d90482108c012036022100a81a7662ef0ecfae3f7afbc0696b18b0939e1dc68ceb32b67af8b26802734ad5007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ab3fb0c9a0000040300483046022100f09f6da8ca5f790924d259b8f32e0cadcc9bf9dd10039ff55d5a56c405d7ff1a022100d78e0046104e9371d3b114c6f4443b3bc613d845e8e3a54e2036e7bbee93d388007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ab3fb0c66000004030047304502201ce6fc75b98c633b1e2a06b03e3852a4a3c95f47d470025c1cfe8df9182b543602210088f1cec27f1d242131ad765607f3ef316f6c3cad24b7c6b469b4f8a4610fedf8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f6c9a0602d43394788f180f635b8da776cd43f67587b6345378106e29cba95296f8c3d665a0d44d7202940bba0743fc382e303adf2214ccf94fe5b5468802a58060bfcb6d991921db7048e038176dacf4b18aa8ab271ad86e0e45339631bb0df9a9bfca22978e6e020f089572bef57dec49179af119b04d878f9b31ba5ccebe67dd48d34b76b6ad51447d44a807eaae4d633f6bc18390e48eaafeaa18a63f6920d871bac3fe24be391b84172c2824bf8258fa5f8681de841c406ccc8a8c31eaddcb91634090fa1e1920c47b97e03fbce93f547ac41338ab043f65289236f522550fbe8d6ccaeef0df13a21e816196b791d08136a408d144c0faa6b84e395df7