mhis.dhs.mn.gov

- State of Minnesota -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 71:18:d5:d3:6b:1b:d4:e6:b8:54:42:ee:82:84:64:ed was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Minnesota

Company registration number: Government Entity
Organization: State of Minnesota
State / Province: Minnesota
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 71:18:d5:d3:6b:1b:d4:e6:b8:54:42:ee:82:84:64:ed
Serial Number (int): 150331715551836740262531800178310276333
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8f:d5:ee:36:f2:e3:b5:ca:02:2f:df:5b:e9:7b:7b:75:f0:3c:d4:6a
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): fc:b8:61:1e:96:96:da:c4:cf:6a:02:39:72:cf:80:cd:33:07:de:c3
Fingerprint (sha256): 00:ed:25:79:70:37:2e:e3:c9:14:d9:ca:e5:7a:43:da:60:a5:95:7d:fe:9a:21:bb:43:91:5e:cd:e2:df:b9:c9

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate mhis.dhs.mn.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mhis.dhs.mn.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mhis.dhs.mn.gov
mhis.staging.dhs.int.state.mn.us

Other certificates including the domain name mn.gov

(limited to 100 certificates)
5661601461960704-fe3.pantheonsite.io
preview.ble.mn.gov
mcc.mn.gov
5661601461960704-fe3.pantheonsite.io
education.mn.gov
gisdata.mn.gov
ccbhcreporting.dhs.state.mn.us
dpscrash.gisdata.mn.gov
mhis.dhs.mn.gov
seocportal.dps.mn.gov
mnch-supplan-train.dhs.state.mn.us
mnledc9010fdapp.dps.mn.gov
5687539843203072-fe2.pantheonsite.io
5687539843203072-fe2.pantheonsite.io
renewlicense.dps.mn.gov
mail.co.ym.mn.gov
*.revisor.mn.gov
oimadmin.mneiamstst12.mn.gov
gis.co.ym.mn.gov
dev.eheatnextgen.mn.gov
www.ble.mn.gov
bipdev.dhs.mn.gov
www.lawyerregulation.mn.gov
mail.co.ym.mn.gov
mnchoices-train.dhs.state.mn.us
5687539843203072-fe2.pantheonsite.io
perpich.mn.gov
g46pilvcmseo104.voice.state.mn.us
*.revisor.mn.gov
commissionsandappointments.sos.state.mn.us
5661601461960704-fe3.pantheonsite.io
dps.mn.gov
*.revisor.mn.gov
dpscrash.gisdata.mn.gov
5661601461960704-fe3.pantheonsite.io
osaportal.gisdata.mn.gov
g46pilvcmsco104.voice.state.mn.us
fastmctst.mnlarsdl.dev.dps.mn.gov
edocs.dhs.state.mn.us
licensinglookup.dhs.state.mn.us
lcc.mn.gov
ocm.web.health.state.mn.us
5661601461960704-fe3.pantheonsite.io
sysdes.mnit.mn.gov
remotedhs.dhs.mn.gov
ng911-dev.gisdata.mn.gov
data-securitytraining.dhs.mn.gov
mnhttf.com
cnv-driver.dvs.dps.mn.gov
admin.moms.mn.gov
eheat.commerce.mn.gov
nt.dps.mn.gov
www.lawyerregulation.mn.gov
esupport2.pcrt.dps.mn.gov
5732095699714048-fe1.pantheonsite.io
iibdev-v10.dhs.int.state.mn.us
dps.mn.gov
mnledc9012fddoc.dps.mn.gov
qa2.edit.wcm.mnit.mn.gov
cserapidprod.dhs.state.mn.us
mnvotes.sos.state.mn.us
www.perpich.mn.gov
lccmr.mn.gov
pam.mnit.state.mn.gov
5687539843203072-fe2.pantheonsite.io
intranet.mnit.mn.gov
5732095699714048-fe1.pantheonsite.io
intranet.dli.mn.gov
hfix-business.mnlars.intg.dps.mn.gov
5661601461960704-fe3.pantheonsite.io
5732095699714048-fe1.pantheonsite.io
www.dhs.state.mn.us
preview.lro.mn.gov
preview.ble.mn.gov
mblsportal.sos.state.mn.us
test.eheatnextgen.mn.gov
mnledc9004fcdoc.dps.mn.gov
qa-md.dps.mn.gov
rc.stage.education.mn.gov
www.health.state.mn.us
5661601461960704-fe3.pantheonsite.io
preview.ble.mn.gov
secanalytics.education.mn.gov
5661601461960704-fe3.pantheonsite.io
stage-db.mnlars.dmz.dps.mn.gov
auth-connect.mnit.mn.gov
dev.sp-eop-office.mn.gov
ssba.dhs.state.mn.us
creports.dhs.mn.gov
datacapdev.dhs.mn.gov
dvs.dps.mn.gov
mnch-supplan-train.dhs.mn.gov
app2.dps.mn.gov
5732095699714048-fe1.pantheonsite.io
perpich.mn.gov
id.mneiamatst.mn.gov
autotestu.intg.dps.mn.gov
dlancopproxy.dps.mn.gov
5661601461960704-fe3.pantheonsite.io
dps.mn.gov

Certificate

The complete raw certificate details for mhis.dhs.mn.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAruLSZng7t4egaFmyXbuj
wrgLjqtJoXxPkuu+aZIGMV8yKgzDlWh8kgZoEGOykLjIPpfrLlDyBNAi+PfNy4dU
21auDU8u4h9/Xh2w6gws31mKOPCAUYpYYR/qqzAGurxPsHO0Aw5owXb5YHhcXNx9
HjGLME6mxY5rI1ePmO4dKEabk4k2MBfr4bnSgfXRkkPSe8oF1CNpwHldf3z/zjjm
6RE17YnVfjCVsrPX3tTMD9xEsM7v8rJxuTX8j3gDa6dVwR3hEZ4Zr1NgeXE0K/sj
80vjZbNC0BM2EUGK7VdtiKgG04yIfGLeHy0gKwJQSVH6m60wqCa0CQw228DoqtCU
CrCB7eoQ6QgEWn4zNooU69b0BpPLO78p+kMSbCVj71iA28omWGOgP6S+vbRoH2zu
sRST++CtWAD8S3rof0fcsbDPt6Vzs2obZtLBJpQ2GSVTjDoka6LNoGfax3Idtc2R
ne/Dabboc70YgmXQR+mBvouhVvHJP1yUHfDxZqzzolmRv5IWWe/cuTxBkZXRmcfa
zW1pVfQODBN26SCCDgLxa+h+4zsCWlbm73uVJfLu+vbCBY5EXSs4H6TETBhSEZal
r3elKQD68IAzU0wBccI6DPeuhMJt+jm+fk2EDX/eKSE+UW7gYxSifdzcj5s4dix9
mrSqqWApL0kHOLL5i7f2gG8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150331715551836740262531800178310276333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mhis.dhs.mn.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713472726121351284854664305279580171121524934252817774260388616872250435565448124144468600632396553501089939322270015236426484581417839317889135171778860078731799340064063639217756063761069110388184822347629646336487640055811338347003874372013661324018661180971093876963090080678594269807570059129455525588224708201803907484908187475373067822179904561040580824255068117333885931807791691738788151946125303634195223769895029595065377480674231355095823866632460115153601250025938484023041016194170056614499135480140294463056708412382116404746020625692666772828630874594885709229843691651866805589846916282526528721546147160469826849563498346109101203855690410640116490504371232346474543567103653036546222780758969154858526721441321683036167464892725834424759551918130475238385204874588527903857606653612955890428248956524256951224368030196484275773165526535889858520075879876744225438282098704965003020828510437829136723852032057255364588146832136763558165434748762263445950344584610156243906854170697634717796094020236509680278259172439993299917422245385896492770635164409762060082144184594383703160032377300273398837769544195238522244169825216911386709811409693433699675918817287293374871258819502386494644965665448806592059855503471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fd5ee36f2e3b5ca022fdf5be97b7b75f03cd46a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhis.dhs.mn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhis.staging.dhs.int.state.mn.us'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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