www.dotdom3.state.pa.us

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 13:18:a5:48:6e:1f:b9:b7:00:00:00:00:50:fa:34:0d was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:18:a5:48:6e:1f:b9:b7:00:00:00:00:50:fa:34:0d
Serial Number (int): 25383299380612245795218831527567307789
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 93:f5:e9:6b:71:e0:27:0f:b8:83:78:57:c6:ab:61:22:ca:49:13:ec
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d5:7e:f6:30:f6:7d:af:c0:85:4c:12:5b:ce:74:cd:d4:e4:b6:47:c2
Fingerprint (sha256): 00:8d:49:63:d8:e1:c1:0a:0b:e1:54:f4:9c:78:52:87:6f:6b:bc:18:38:d4:5b:29:3e:5a:08:7a:09:f7:23:bc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.dotdom3.state.pa.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dotdom3.state.pa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dotdom3.state.pa.us

Other certificates including the domain name state.pa.us

(limited to 100 certificates)
www.pasuppliersrm2.beta.state.pa.us
dliftpua.state.pa.us
www.puc.state.pa.us
uat.calcrite.cor.state.pa.us
www.dotdom3.state.pa.us
secure.courts.state.pa.us
mapir.dpw.state.pa.us
www.stebapp.state.pa.us
pa.direct.file.state.pa.us
www.dot14.state.pa.us
www.dotdom3.state.pa.us
www.state.pa.us
www.leadstracking.dced.state.pa.us
awds.beta.psp.state.pa.us
padlsonline.pa.gov
www.hspaymentgateway.state.pa.us
ldap-mo.dpw.state.pa.us
intraapps-r.dpw.state.pa.us
www.papsrs.state.pa.us
www.pspleot.state.pa.us
www.nedss.state.pa.us
www.aopc.jnet.state.pa.us
ESECagSANCertSyst.dot.pa.gov
apps02.ins.state.pa.us
www.dossurvey.state.pa.us
www.doreservices.state.pa.us
www.jobgatewaytr.pa.gov
lms.state.pa.us
missl.dhs.state.pa.us
www.puc.state.pa.us
www.pasuppliersrm.state.pa.us
www.papsrs.state.pa.us
dliftpua.state.pa.us
www.fd.state.pa.us
tacs.state.pa.us
www.icopapki.state.pa.us
www.JobGatewayrpt.state.pa.us
www.hava.state.pa.us
www.vplan.state.pa.us
www.mpoetc.state.pa.us
www.agtrans.pa.gov
www.agtrans.state.pa.us
pdxs-sat.dpw.state.pa.us
www.humanservices-t.state.pa.us
provider.enrollment.dpw.state.pa.us
www.pimsreports.state.pa.us
www.dot12.state.pa.us
www.nedss.state.pa.us
www.fwgs.beta.state.pa.us
www.pgcb.state.pa.us
www.gis.dcnr.beta.state.pa.us
www.oit.state.pa.us
www.tcs.ed.state.pa.us
www.PAFoodSafety.pa.gov
www.pelican.state.pa.us
www.boardofappeals.state.pa.us
rtm.clean.beta.state.pa.us
www.dot2.state.pa.us
www.handsstaging.state.pa.us
www.nedsstest.state.pa.us
www.pasuppliersrm.state.pa.us
www.hhsapps.state.pa.us
dot11.state.pa.us
www.dpwtxns.state.pa.us
www.nedss.state.pa.us
bdap.health.state.pa.us
www.dot16.pa.gov
WWW.PEMAWEBTOOLS.STATE.PA.US
www.helpinpa.state.pa.us
pew.dpw.state.pa.us
www.depgis.state.pa.us
www.avl.state.pa.us
www.pema.state.pa.us
*.lgc.state.pa.us
www.pennfirs.state.pa.us
www.paltcreporting.state.pa.us
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.pennfirs.state.pa.us
RSA1.legis.state.pa.us
www.hhsidm-sat.state.pa.us
www.grants.dcnr.state.pa.us
www.cwdsua.pa.gov
www.services.dcnr.state.pa.us
www.paemployee.lottery.state.pa.us
www.dotdev12.state.pa.us
pew.dpw.state.pa.us
www.cwdsua.pa.gov
www.humanservices-t.state.pa.us
*.legis.state.pa.us
ldap-uat.dpw.state.pa.us
www.purta.state.pa.us
www.fctms.state.pa.us
dliiamtr.state.pa.us
imaging.dpw.state.pa.us
www.pdotdev1.state.pa.us
store.cpc.state.pa.us
www.rbauth-s.state.pa.us
www.portal.state.pa.us

Certificate

The complete raw certificate details for www.dotdom3.state.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIejCCB2KgAwIBAgIQExilSG4fubcAAAAAUPo0DTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTExMTQyMDQ4MThaFw0yMjAyMTMyMTE4MTZaMIGpMQswCQYDVQQGEwJVUzEVMBMG
A1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpIYXJyaXNidXJnMSUwIwYDVQQK
ExxDb21tb253ZWFsdGggb2YgUGVubnN5bHZhbmlhMSUwIwYDVQQLExxEZXBhcnRt
ZW50IG9mIFRyYW5zcG9ydGF0aW9uMSAwHgYDVQQDExd3d3cuZG90ZG9tMy5zdGF0
ZS5wYS51czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANPTT1kKJzaG
w7RG7h0UVv2oUMKW96encQbhaP9a52bgabm0Mv3oM4EQMKJhhTVhVdxjhTWCElXe
NWHzSBDadW2QebavQ5MxlxDUXpHRfVqy4vqRlKCPoOUMRsCjfG0pIxGsSUQ7kE02
zykq2l4zfBJ08TsPYBJ6o+S4/H2rOadk4QgWS7fo5uCZAvNYXKAy3RWyn4buXzaQ
TtcX5SIYzqwT4EnQnLV0cDxzyKgxR1j0WEbymLsv7dMJx7H1HljM9Ra2dmqQ425g
NDFkvPzZ5CKOU+woaZwUVptx6oxjgmgTOkt7+v4Yig+IInlSAUW9U/TbMKvhb7k+
kL64ASO0Itm+b7I5KGkkEVe5hBk5BCRSh1GanDQ8sXZT5BkODtwNRv4kLTOwgmzK
pR/yYvg+vtqgdtC11PCevJlBf7GxeNvTG7WIoIw7SSs/m+jCBqgOMrEampJR5brc
eeHHrXVD+/XNsAKe9Ueh7y/Ti4zQtseTPpVTrIeqIclbKcYJnG0YINK4oJUQKBzJ
5onjPBpb/RPRwBD9TOMdwV1gUxQs5SvQx2GkozhD0wmJODgEAvYSwWYJZJiT4C0T
iUAYXpgZOpMP4Flq24wBdGq0l8jTKstMJ/A8LzQWca0L0GBZCM3Mi3jb7BRD5VNf
YDVlBfnZyZh3YjenVHRGkFuI/VOuIimhAgMBAAGjggOJMIIDhTAiBgNVHREEGzAZ
ghd3d3cuZG90ZG9tMy5zdGF0ZS5wYS51czCCAfcGCisGAQQB1nkCBAIEggHnBIIB
4wHhAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFua8gBNwAA
BAMARzBFAiEAic8wRIKBpwa7X+5wTb7kXfSB6TK9ypGanYiAFULb4YICIFqOjvCn
+neOHNDJ2I35nHW0Oty6RCJePKWETd5zBeuwAHcApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFua8gBCwAABAMASDBGAiEAqF8+OSC6Zue1dGZAgZxH
2s+G9oOUOf/tYtmEzZvt2+8CIQD611jtmphUY4/1mfolONgL2kKviwUCzdq+5uRP
LG1krQB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABbmvIAPQA
AAQDAEcwRQIgR/r5B7L+Jq8dKECYxkoa3Guvqq87w1m9MjHauwbID9ICIQDhQxAo
adpvZiNQZvEHzFOObfoXvltfjybORM668KwJ1QB2AId1v+dZfPiMQ5lfvfNu/1aN
R1Y2/0q1YMG06v9eoIMPAAABbmvIAh4AAAQDAEcwRQIgQvBj0OpA4UY+E6Yde0qF
Nj1fGLNvR9CDa7zFRwnZtT4CIQD4XZmQn5v5mI2NX0wVjse7su+oqSdYsxv+pDxI
IaPjfTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2
ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcB
AQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsG
AQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIw
HwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFJP16Wtx
4CcPuIN4V8arYSLKSRPsMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAIv5
BUbsTDWCzcLpU+t9HL7XtvnRhPf2t+GKhcS5jXyzxyq6pphM5mJjOKatjT4E/RZ7
llUZ4I8KuvYXtNkYa+0aEOQLbo7RjYHd1MGHyNw1UqboPKsg1UkjnIsm5vqfUtzw
P+hsYQupDI+CVjEV5y4i/1pDptSTfOaHJuWOo5Eko15Ih7eWeCTF8RtRvc8muMEN
t3AgJl3TQUHezTS3tvtrzR7b5fLs5P4GN/S1rzBxK84ON+PZisB4KNNDgfbyhq/F
V48zMJu+5V9wOBapVnZVAp7hAw+DhTUWynykWm3Yn954VyMJWIuVfPLVwYJHXU8t
f9SMjuAdeGxSTcqmSnY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25383299380612245795218831527567307789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 20:48:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-13 21:18:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dotdom3.state.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864172356921664308660210796964959906294573551004427199586071676891794975802089205861679741618609345449293241049821224625545721724512551197228646296419658000414861379101036830035028054863937677224939861475067389406189258086193232842918670207567490916762478817003375012471479718103098502483747762152918133014647044226933971555937438610025269665236426250080303752747600273819554197477742888311461608748737446025398369591567766781923764914314763624124147861866369567355917698936038420710397411158371686739832199362904003370063654456058818390547585229982519719417906473259395251304780990105667785580343963018306395174947847697148619877108237760621009544930964171917969339303835429142536016690519828638468983023839597832209770195255488798444909438689845508190764921161358557729964087568331747542767365165305728463395538834058260279710903332258105821455775136257593069387038726050002170110808222986438323467517933402445980640846624224471234860334869888782053972503854257909284072934489505233248329448826709603988206678441960841057787353828036488571008894408480283418808592912863972818717189361274526661159763096036494726494953362496747827301280858096183941386334155007099062735155715123226991091530434169535079501500191358676213284431079841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdom3.state.pa.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93f5e96b71e0270fb8837857c6ab6122ca4913ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008bf90546ec4c3582cdc2e953eb7d1cbed7b6f9d184f7f6b7e18a85c4b98d7cb3c72abaa6984ce6626338a6ad8d3e04fd167b965519e08f0abaf617b4d9186bed1a10e40b6e8ed18d81ddd4c187c8dc3552a6e83cab20d549239c8b26e6fa9f52dcf03fe86c610ba90c8f82563115e72e22ff5a43a6d4937ce68726e58ea39124a35e4887b7967824c5f11b51bdcf26b8c10db77020265dd34141decd34b7b6fb6bcd1edbe5f2ece4fe0637f4b5af30712bce0e37e3d98ac07828d34381f6f286afc5578f33309bbee55f703816a9567655029ee1030f83853516ca7ca45a6dd89fde78572309588b957cf2d5c182475d4f2d7fd48c8ee01d786c524dcaa64a76