ESECagSANCertSyst.dot.pa.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 37:20:4d:86:51:08:73:bc:00:00:00:00:50:fd:ba:ba was issued on by Entrust, Inc..

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:20:4d:86:51:08:73:bc:00:00:00:00:50:fd:ba:ba
Serial Number (int): 73275265654835249326085529139251362490
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 08:22:f0:07:ee:26:bd:2b:11:f4:ed:f2:e6:83:2c:fc:45:34:db:ae
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1c:6f:c0:1c:f8:fa:9f:dd:4e:99:ab:53:88:c4:ce:72:46:de:4d:bf
Fingerprint (sha256): 02:17:44:95:43:43:77:1b:4b:f9:b8:ad:28:a3:3b:7e:72:59:86:58:fc:56:75:44:f2:9e:26:39:a8:3a:83:73

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ESECagSANCertSyst.dot.pa.gov

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ESECagSANCertSyst.dot.pa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ESECagSANCertSyst.dot.pa.gov
www.ESECagSANCertSyst.dot.pa.gov
idservicessyst.penndot.gov
www.idservicessyst.penndot.gov
esecrefapp1syst.penndot.gov
esecrefapp2syst.penndot.gov
placardsyst.penndot.gov
www.placarduat.penndot.gov
www.placardsyst.penndot.gov
placarduat.penndot.gov
inspectionssyst.penndot.gov
www.inspectionsuat.penndot.gov
www.inspectionssyst.penndot.gov
inspectionsuat.penndot.gov
www.fasyst.penndot.gov
fasyst.penndot.gov
www.keessyst.pa.gov
keessyst.pa.gov
www.keesuat.pa.gov
keesuat.pa.gov
www.dealerssyst.penndot.gov
dealerssyst.penndot.gov
www.dealersuat.penndot.gov
dealeruat.penndot.gov
www.fauat.penndot.gov
fauat.penndot.gov
www.pdjfsystadminapp.penndot.gov
pdjfsystadminapp.penndot.gov
www.pdjfuatadminapp.penndot.gov
pdjfuatadminapp.penndot.gov
idservicessyst.pa.gov
www.idservicessyst.pa.gov
www.keestrain.pa.gov
keestrain.pa.gov
urmssyst.penndot.gov
www.urmssyst.penndot.gov
urmsuat.penndot.gov
www.urmsuat.penndot.gov
www.systcrashinfo.penndot.gov
systcrashinfo.penndot.gov
www.cfatest.penndot.gov
cfatest.penndot.gov
www.dotsystcrashinfo.pa.gov
dotsystcrashinfo.pa.gov
dlissyst.penndot.gov
www.dlissyst.penndot.gov
www.dlisuat.penndot.gov
dlisuat.penndot.gov
www.syst1.mvdls.penndot.gov
syst1.mvdls.penndot.gov
www.syst2.mvdls.penndot.gov
syst2.mvdls.penndot.gov
www.uat1.mvdls.penndot.gov
uat1.mvdls.penndot.gov
www.uat2.mvdls.penndot.gov
uat2.mvdls.penndot.gov
www.perf.mvdls.penndot.gov
perf.mvdls.penndot.gov
www.syst3.mvdls.penndot.gov
syst3.mvdls.penndot.gov
www.trn.mvdls.penndot.gov
trn.mvdls.penndot.gov
www.stg.mvdls.penndot.gov
stg.mvdls.penndot.gov
www.dotgrantssyst.penndot.gov
dotgrantssyst.penndot.gov
aprassyst.penndot.gov
www.aprassyst.penndot.gov
www.syst4.mvdls.penndot.gov
syst4.mvdls.penndot.gov
www.uat3.mvdls.penndot.gov
uat3.mvdls.penndot.gov
www.uat4.mvdls.penndot.gov
uat4.mvdls.penndot.gov
www.pamsstagesyst.penndot.gov
pamsstagesyst.penndot.gov
www.dotdev34.state.pa.us
dotdev34.state.pa.us
www.psaptcsyst.pema.pa.gov
psaptcsyst.pema.pa.gov
www.dotgrantssbxp.penndot.gov
dotgrantssbxp.penndot.gov
www.urmstrn.penndot.gov
urmstrn.penndot.gov
hubuat.business.pa.gov
www.hubuat.business.pa.gov
www.bamssyst.penndot.gov
bamssyst.penndot.gov
www.hubsyst.business.pa.gov
hubsyst.business.pa.gov
www.syst5.mvdls.penndot.gov
syst5.mvdls.penndot.gov
www.uat5.mvdls.penndot.gov
uat5.mvldls.penndot.gov

Other certificates including the domain name pa.gov

(limited to 100 certificates)
www.penndotesafety.pa.gov
www.puc.state.pa.us
www.dotdom3.state.pa.us
www.uctax.beta.pa.gov
forms.dced.pa.gov
www.crashinfo.penndot.gov
forms.dced.pa.gov
www.snet.jnet.pa.gov
www.bpp.ob.pa.gov
ESECagSANCertProd.dot.pa.gov
www.swifpay.pa.gov
dliimagesua.pa.gov
pasmallbiz.dced.pa.gov
openscapewebconfw2.pa.gov
forms.dced.pa.gov
www.cfrs.pa.gov
padlsonline.pa.gov
www.ethics.pa.gov
PUC.eServices-DOT-CarrierID.pa.gov
www.oig.pa.gov
www.compas.dli.pa.gov
forms.dced.pa.gov
www.dlisecureweb.pa.gov
dsemms.pa.gov
ESECagSANCertSyst.dot.pa.gov
portal.pccd.beta.pa.gov
sts.beta.pa.gov
www.notaryreg.pa.gov
www.scicoll.pa.gov
ws.jnet.beta.pa.gov
spapps.pa.gov
gis.penndot.gov
www.portalxl.jnet.pa.gov
www.jobgatewaytr.pa.gov
docs.dcnr.pa.gov
www.pawatersupplyservicearea.pa.gov
services.dcnr.uat.pa.gov
www.puc.state.pa.us
*.pa.gov
www.inet.jnet.pa.gov
SMProxySANCertPROD.dot.pa.gov
events.dcnr.pa.gov
forms.dced.pa.gov
www.PaFoodSafety.beta.pa.gov
www.employment.pa.gov
sais.health.pa.gov
mail01.pa.gov
www.uctax-reg.beta.pa.gov
*.openrecords.pa.gov
www.agtrans.pa.gov
www.idprovider.dev.pa.gov
dynxrm.dev.pa.gov
www.dos.pa.gov
forms.dced.pa.gov
www.agtrans.state.pa.us
www.lcb.pa.gov
www.cupss.pa.gov
dev-bppcs.pd.pa.gov
www.campaignfinanceonline.beta.pa.gov
mysite.pa.gov
www.agriculture.pa.gov
www.gis.dcnr.beta.state.pa.us
www.rbaprovider.pa.gov
fdcbids.dcnr.pa.gov
www.PAFoodSafety.pa.gov
dced.pa.gov
damageprevention.puc.pa.gov
www.wcais.pa.gov
www.penndotesafetyqat.pa.gov
*.cor.beta.pa.gov
greenport.dev.pa.gov
staffalert.pa.gov
SMProxySANCertProd.dot.pa.gov
www.pcssmuat.dot.pa.gov
www.boardofappeals.state.pa.us
mysites.pa.gov
www.pgc.pa.gov
www.erstest.health.pa.gov
www.mypdeapps.pa.gov
osfc.sfa.pa.gov
edwin.dcnr.pa.gov
forms.dced.pa.gov
www.iwacs.phmc.pa.gov
ESECSanCertProd128.dot.pa.gov
apps.pwp.pa.gov
www.dominoextsyst.pa.gov
boe.ebr.uat.pa.gov
dynxrm.pa.gov
www.corporations.pa.gov
www.pawatersupplyservicearea.pa.gov
goals.governor.pa.gov
ndxs-dev.dhs.pa.gov
www.dot16.pa.gov
mysites.pa.gov
forms.dced.pa.gov
WWW.HHSLOGIN.DHS.PA.GOV
uat.esms.pa.gov
ppd.brokerportal.SWIF.pa.gov
ESECagSANCertSyst.dot.pa.gov
sureaddress.dev.pa.gov

Certificate

The complete raw certificate details for ESECagSANCertSyst.dot.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Rel9Akzv4gUHEKgIS5
/nXEJOPJuNKnoHfQLEIiIvQ+g+ERNKkRFzXk3SmyJ4Go8kiqgNzhrHiDtXluKJSr
9CN80etpn95SYFjNEPBQ8vV5QDQcnY6wLLgsxFCaHAlTWiROk4gH4sK9nXiAANN7
kDk0Kwk216aegrbvbdKcq2dfUfZV3+qi1uZXW9Xfq2PTzCURMscCW7ygu8j9tYfz
mH+b8QpgdeLS+DgHs9l5uZdNHC+kJhA+K7wOQz7wwyJoBYv0S5kJNSlmAX4NcuMQ
n3X7A0UqlxcMmAIwyyBotwAgsbodR+pqiPVwfJYDC267hBEVBIvJJ7TIC2hAlvCl
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73275265654835249326085529139251362490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 20:02:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-26 20:32:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28752928638740232280770131844796151512413844597199858041060763511807046864324521369739045868611299315636156720452671818649933663291961135740282672168890930935954137462789006185945842591719950864963043006111872481256991364885116039837041510262471167680579391643240250480105709863182899945417195641945100761062442452330042960654334111165312198274677990174436837638031945606141531262556924247016186236038755365729949549863863930132158183591583302393466822065510905995729209782746827649281229751115977762140114658880852083399661497820304285578406994158617155739940835503029370347743745261387662758124553721829215131706801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservicessyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservicessyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp1syst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp2syst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placardsyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placarduat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placardsyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placarduat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keesuat.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keesuat.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealerssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealersuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealeruat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fauat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfsystadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfsystadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfuatadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfuatadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservicessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservicessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keestrain.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keestrain.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.systcrashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systcrashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfatest.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfatest.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotsystcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotsystcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlissyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlissyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlisuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlisuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perf.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trn.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrantssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrantssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprassyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprassyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pamsstagesyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamsstagesyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdev34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdev34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaptcsyst.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaptcsyst.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrantssbxp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrantssbxp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmstrn.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmstrn.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubuat.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubuat.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubsyst.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubsyst.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.mvldls.penndot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0822f007ee26bd2b11f4edf2e6832cfc4534dbae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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