mo.gov

- State of Missouri, Office of Administration -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:b5:2b was issued on by Entrust, Inc..

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • CAs SHALL NOT issue certificates with a subjectAltName extension or subject:commonName field containing a Reserved IP Address or Internal Name. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:b5:2b
Serial Number (int): 1277146411
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 07:e3:ba:06:71:e4:dc:89:f5:5e:f3:24:d5:c3:91:0e:9e:24:c7:1f
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 8e:e4:08:e9:6a:20:a4:b0:4e:21:8d:2a:a6:a6:da:c3:08:71:77:71
Fingerprint (sha256): 01:42:ac:bc:ce:8f:2d:c3:72:97:73:ce:08:bf:1e:71:2c:73:17:55:82:a4:9a:10:4e:36:a4:ae:28:b7:96:68

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate mo.gov

71

DNS Names

0

Email Addresses

3

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mo.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mo.gov
web.mo.gov
mcdssecured.dese.mo.gov
edmr.dnr.mo.gov
cybersecurity.mo.gov
health.mo.gov
apps.difp.mo.gov
jobs.mo.gov
en-node-test.dnr.mo.gov
mortality.dmh.mo.gov
mcds.dese.mo.gov
mypc.mo.gov
www.schoolviolencehotline.com
apps.dese.mo.gov
www.modocfees.com
cimor.dmh.mo.gov
www.mobiusweb.oa.missouri.gov
webeoc.sema.dps.mo.gov
mypcclient.mo.gov
finance.mo.gov
dssexternalservices.state.mo.us
opennode2.dnr.mo.gov
168.166.109.25
cibr.oa.mo.gov
mytestpc.mo.gov
168.166.109.9
mydrpc.mo.gov
web.dhe.mo.gov
agrimissouri.com
jobs.missouricareersource.com
dpsgrants.dps.mo.gov
ged.dese.mo.gov
eecbg.dnr.mo.gov
reportal.dnr.mo.gov
consumer.difp.mo.gov
emgis.oa.mo.gov
mypc3.mo.gov
10.40.39.20
dors.mo.gov
insurance.mo.gov
www.insurance.mo.gov
srm.dese.mo.gov
highered.mo.gov
mels.dmh.mo.gov
www.missouricareersource.com
egms.ohs.mo.gov
apijobs.mo.gov
herds.mda.mo.gov
modocfees.com
gis.dps.mo.gov
meris.dps.mo.gov
sa.dor.mo.gov
www.ease.mo.gov
en-node.dnr.mo.gov
ogi.oa.mo.gov
www.cybersecurity.mo.gov
membership.jobs.mo.gov
mosis.dese.mo.goV
mypc5.mo.gov
www.trng.dss.mo.gov
test-dssapp.dss.mo.gov
www.consumer.difp.mo.gov
usalims.mda.mo.gov
dssexternalservices-usat.state.mo.us
dssapp.dss.mo.gov
missouricareersource.com
www.prod.dss.mo.gov
webcacsprod.ads.state.mo.us
cimortrain.dmh.mo.gov
www.mo.gov
ogitest.oa.mo.gov
168.166.109.25
168.166.109.9
10.40.39.20

Other certificates including the domain name mo.gov

(limited to 100 certificates)
apidata-dev.dese.mo.gov
renew.pr.mo.gov
mo.gov
Securemail.mo.gov
Mail.sos.mo.gov
www.mostops.ago.mo.gov
www.courts.mo.gov
imperva.com
momail.mo.gov
5685057352105984-fe4.pantheonsite.io
airwatch4.mo.gov
incapsula.com
stoadf.treasurer.mo.gov
5659822271758336-fe3.pantheonsite.io
webmail2.auditor.mo.gov
mail.senate.mo.gov
mdc5test.mdc.mo.gov
mo.gov
oscna0013.courts.mo.gov
5658638538506240-fe4.pantheonsite.io
achieve.escoffier.edu
www.training.oa.mo.gov
appadmin-dev.dese.mo.gov
on.mo.gov
5685057352105984-fe4.pantheonsite.io
mo.gov
MoLogin.mo.gov
s1.sos.mo.gov
pr.mo.gov
cbafs.mo.gov
media.senate.mo.gov
lists.mo.gov
securemail.mo.gov
mcs.modot.mo.gov
mail.house.mo.gov
www.mshp.dps.mo.gov
mo.gov
WWW.MO.GOV
mo.gov
imperva.com
www.mosac.mo.gov
publicdefender.mo.gov
imperva.com
imperva.com
nature.mdc.mo.gov
incapsula.com
imperva.com
mo.gov
incapsula.com
vpn.sos.mo.gov
vpn.psc.mo.gov
achieve.escoffier.edu
www.MissouriEmployer.dss.mo.gov
molisapitest.legislativeoversight.mo.gov
*.house.mo.gov
medesfdshprod.dss.mo.gov
lyncaccess.modot.mo.gov
5659822271758336-fe3.pantheonsite.io
moaccount.mo.gov
incapsula.com
connect.mdc.mo.gov
incapsula.com
5658638538506240-fe4.pantheonsite.io
mo2fss.mo.gov
5659822271758336-fe3.pantheonsite.io
myworkspace.mo.gov
moadfs.mo.gov
achieve.escoffier.edu
extra.mdc.mo.gov
imperva.com
mymdc.mo.gov
mo.gov
legislativeoversight.mo.gov
ucceegainws.state.mo.us
5685057352105984-fe4.pantheonsite.io
connector-c.mshp.dps.mo.gov
mophin1.dhss.mo.gov
cobra.mshp.dps.mo.gov
www3.modot.mo.gov
mosso.mo.gov
5659822271758336-fe3.pantheonsite.io
mymdc.mo.gov
uisidestest.labor.mo.gov
imperva.com
5658638538506240-fe4.pantheonsite.io
remoteaccess.sos.mo.gov
incapsula.com
machs.mo.gov
achieve.escoffier.edu
*.courts.mo.gov
incapsula.com
www.courts.mo.gov
Evetest.mo.gov
mail.senate.mo.gov
incapsula.com
achieve.escoffier.edu
Airwatch1.mo.gov
gisblue.mdc.mo.gov
mo.gov
imperva.com

Certificate

The complete raw certificate details for mo.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SvUiNvy/WAzbENaj1JZ
6/98si+KL6E9JhMVJFHeXBf0HVFKkZfjKgVe3hXqme2BX/CBlKjwSE/iGRxf0DXc
jxoCQSBxg+a+UtvSOrv81PhbBLL1u7XtfxG7JVNXT0rgdPkhaAgpMec/9TK2qzBt
YQ8LLBuYBH2Qe2BgKGkM1ky98hoVV1ImWJTXs9Sop54AyQvcFP3gFCMG51IEN/xw
iLfg5Fn3zSeTE0lA02p+NQoiyJm86ssjVktKMBZQHFJdDBZnbIYcB7TMxcV4OVyD
13BECCjaQuyNdve23M1kCdqFB4DRvJ7RBwxpttlQGtAAZXoN+YdlhPfFWFuPgbWE
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277146411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-07 20:39:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-02 13:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mo.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27415325661361137101682860045301268733518540838301701727598884129142096110976437584124203750418812319369278047007678138198717734736385559271984409164744432883502581333031232318845259550528559382822624035795874013266064769961668212154596919681573690166172809876845720992910652963098061630209928358646100884042714515936237298391476935403378627240595541392736396525310925993354796698207702940456697832915366602382696187516366348776089882936848478067386529358583666298602775935601512953743390400610619380101511742536635843140718510377404975337115566038718351277248296684380996569141209982036533014745404167386951400653861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1411 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '168.166.109.25'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '168.166.109.9'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '10.40.39.20'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdssecured.dese.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmr.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecurity.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.difp.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en-node-test.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortality.dmh.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcds.dese.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypc.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolviolencehotline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dese.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modocfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimor.dmh.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobiusweb.oa.missouri.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webeoc.sema.dps.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypcclient.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dssexternalservices.state.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opennode2.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '168.166.109.25'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibr.oa.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytestpc.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '168.166.109.9'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydrpc.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dhe.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrimissouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.missouricareersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpsgrants.dps.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ged.dese.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eecbg.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportal.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer.difp.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emgis.oa.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypc3.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10.40.39.20'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dors.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurance.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insurance.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srm.dese.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highered.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mels.dmh.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouricareersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egms.ohs.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apijobs.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herds.mda.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modocfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.dps.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meris.dps.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.dor.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ease.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en-node.dnr.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogi.oa.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.jobs.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosis.dese.mo.goV'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypc5.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trng.dss.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dssapp.dss.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumer.difp.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalims.mda.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dssexternalservices-usat.state.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dssapp.dss.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouricareersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.dss.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcacsprod.ads.state.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimortrain.dmh.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogitest.oa.mo.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07e3ba0671e4dc89f55ef324d5c3910e9e24c71f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003c74e40248da226331605948649f14924e144d5ff0b01f6951e2bd0ce72188b067fffce260f398118a3a5cba2fa9d1505a45d0ecee05957cb0721018578eab59a9c021fed430751c79de1011a92e866c5fccb8351fa1475e7744fd376dee953656f4944cf57d1ba6993d27f8ea98e326d8d3c72e07696f551a6d985fa2086bdea2a1e4c942c195794532a5b84547e84efadb28a67d802e56c1cdff21ace7f1834b82bc30060dd6af37278152c8aa67f1ece06a39cea3c6639afc85471fc573e2974da5c67052f8747e0c578723a329d0162c24c918b7a5ed6dd15a733a1803dc588cee76ee3eba60a0e490c78a80e235c5d36182a3100d2eb4f1df0d1d7298a