*.illinois.gov
- State of Illinois - Department of Innovation and Technology -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 7b:b2:82:5f:b3:53:cc:de:7e:46:35:cf:a4:83:73:da was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
State of Illinois - Department of Innovation and Technology
Organization:
State of Illinois - Department of Innovation and Technology
State / Province:
Illinois
Locality: Springfield
Country: US
Locality: Springfield
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 7b:b2:82:5f:b3:53:cc:de:7e:46:35:cf:a4:83:73:daSerial Number (int): 164421916617786890325401371847889744858
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ca:f0:d4:3e:82:2c:72:e6:df:2c:ad:b6:1d:dc:42:4e:d6:2f:7c:da
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 27:16:a0:ae:bd:f2:32:46:13:2a:d0:16:47:d4:e4:5a:e5:8e:9c:31
Fingerprint (sha256): 02:82:04:f9:58:d4:ad:d9:1c:78:69:43:44:1d:89:84:63:d8:10:92:24:cd:46:ab:63:c4:b0:dc:a0:87:f6:ae
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.illinois.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.illinois.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.illinois.gov
illinois.gov
illinois.gov
Other certificates including the domain name illinois.gov
(limited to 100 certificates)
scanandvalidate.com
hecker.illinois.gov
nmets.illinois.gov
mattoon.illinois.gov
www2.siren.illinois.gov
FAC.dcfs.illinois.gov
Medicaid.Dcfs.Illinois.gov
il084pkitweb03.iltest.illinois.gov
etip.cmap.illinois.gov
jobstaxcreditqa.illinois.gov
diamond.illinois.gov
imperva.com
IL084PKIDWS6.illinois.gov
*.dnr.illinois.gov
dmarts.transportation.illinois.gov
www.ptb.illinois.gov
www.savoy.illinois.gov
*.illinois.gov
its.cmap.illinois.gov
washingtonco.illinois.gov
enroll.pki.illinois.gov
*.granitecity.illinois.gov
bushnell.illinois.gov
*.dceo.illinois.gov
ns2dw2app.epic.hfs.illinois.gov
expei-mra-cluster.illinois.gov
*.hfs.illinois.gov
auditor.illinois.gov
imperva.com
mattoon.illinois.gov
iwds.dceo.illinois.gov
FingerPrintSearch.dcfs.illinois.gov
*.revenue.illinois.gov
IL084SPRJGS1.illinois.gov
web3.incircuit.com
SystemOfCare.dcfs.illinois.gov
*.data.illinois.gov
email.villageofcrestwoodil.gov
login.incircuit.com
www.hecker.illinois.gov
tmdm.dcfs.illinois.gov
mattoon.illinois.gov
DCFSCUCHLPUB01.illinois.gov
gov.illinois.gov
www.igb.illinois.gov
gisdev.revenue.illinois.gov
portal.igb.illinois.gov
dcfsimphlsub01.illinois.gov
ns2sb1app.epic.hfs.illinois.gov
vfmp.crestwood.illinois.gov
www.auditor.illinois.gov
webapps.sfm.illinois.gov
etip.cmap.illinois.gov
il084pkipoaa.illinois.gov
www.standards.illinois.gov
contact.gov.illinois.gov
webmail.illinois.gov
enrollhfs.illinois.gov
agrlicensing.illinois.gov
oti.ceo.illinois.gov
mdmadmin.illinois.gov
il084ise3.illinois.gov
scanandvalidate.com
irocc.ptb.illinois.gov
washingtonco.illinois.gov
uat.sacwisapi.dcfs.illinois.gov
IL022CCEIDS1B.Illinois.gov
enrollhfs.illinois.gov
*.illinois.gov
proxy.api.illinois.gov
diamond.illinois.gov
ns2se1app.epic.hfs.illinois.gov
www.dph.illinois.gov
starkco.illinois.gov
dcfsucmhlsub01.illinois.gov
imperva.com
ssl2.revizesites.com
*.partner.illinois.gov
*.dhs.illinois.gov
ssl8.revizesites.com
ssl8.revizesites.com
person360uat.illinois.gov
www.westmont.illinois.gov
san-37-s12.tlsprovisioning.exacttarget.com
twsms.illinois.gov
illinoiscourts.gov
bushnell.illinois.gov
multimedia.illinois.gov
icarehl7.dph.illinois.gov
www.dnr.illinois.gov
mqmquarantine.illinois.gov
ebt-link.illinois.gov
*.ides.illinois.gov
etip.cmap.illinois.gov
il084pkitweb01.iltest.illinois.gov
radtech.iema.illinois.gov
mattoon.illinois.gov
*.cms.illinois.gov
IllinoisOutcomesPRD.dcfs.illinois.gov
quarantine1.illinois.gov
hecker.illinois.gov
nmets.illinois.gov
mattoon.illinois.gov
www2.siren.illinois.gov
FAC.dcfs.illinois.gov
Medicaid.Dcfs.Illinois.gov
il084pkitweb03.iltest.illinois.gov
etip.cmap.illinois.gov
jobstaxcreditqa.illinois.gov
diamond.illinois.gov
imperva.com
IL084PKIDWS6.illinois.gov
*.dnr.illinois.gov
dmarts.transportation.illinois.gov
www.ptb.illinois.gov
www.savoy.illinois.gov
*.illinois.gov
its.cmap.illinois.gov
washingtonco.illinois.gov
enroll.pki.illinois.gov
*.granitecity.illinois.gov
bushnell.illinois.gov
*.dceo.illinois.gov
ns2dw2app.epic.hfs.illinois.gov
expei-mra-cluster.illinois.gov
*.hfs.illinois.gov
auditor.illinois.gov
imperva.com
mattoon.illinois.gov
iwds.dceo.illinois.gov
FingerPrintSearch.dcfs.illinois.gov
*.revenue.illinois.gov
IL084SPRJGS1.illinois.gov
web3.incircuit.com
SystemOfCare.dcfs.illinois.gov
*.data.illinois.gov
email.villageofcrestwoodil.gov
login.incircuit.com
www.hecker.illinois.gov
tmdm.dcfs.illinois.gov
mattoon.illinois.gov
DCFSCUCHLPUB01.illinois.gov
gov.illinois.gov
www.igb.illinois.gov
gisdev.revenue.illinois.gov
portal.igb.illinois.gov
dcfsimphlsub01.illinois.gov
ns2sb1app.epic.hfs.illinois.gov
vfmp.crestwood.illinois.gov
www.auditor.illinois.gov
webapps.sfm.illinois.gov
etip.cmap.illinois.gov
il084pkipoaa.illinois.gov
www.standards.illinois.gov
contact.gov.illinois.gov
webmail.illinois.gov
enrollhfs.illinois.gov
agrlicensing.illinois.gov
oti.ceo.illinois.gov
mdmadmin.illinois.gov
il084ise3.illinois.gov
scanandvalidate.com
irocc.ptb.illinois.gov
washingtonco.illinois.gov
uat.sacwisapi.dcfs.illinois.gov
IL022CCEIDS1B.Illinois.gov
enrollhfs.illinois.gov
*.illinois.gov
proxy.api.illinois.gov
diamond.illinois.gov
ns2se1app.epic.hfs.illinois.gov
www.dph.illinois.gov
starkco.illinois.gov
dcfsucmhlsub01.illinois.gov
imperva.com
ssl2.revizesites.com
*.partner.illinois.gov
*.dhs.illinois.gov
ssl8.revizesites.com
ssl8.revizesites.com
person360uat.illinois.gov
www.westmont.illinois.gov
san-37-s12.tlsprovisioning.exacttarget.com
twsms.illinois.gov
illinoiscourts.gov
bushnell.illinois.gov
multimedia.illinois.gov
icarehl7.dph.illinois.gov
www.dnr.illinois.gov
mqmquarantine.illinois.gov
ebt-link.illinois.gov
*.ides.illinois.gov
etip.cmap.illinois.gov
il084pkitweb01.iltest.illinois.gov
radtech.iema.illinois.gov
mattoon.illinois.gov
*.cms.illinois.gov
IllinoisOutcomesPRD.dcfs.illinois.gov
quarantine1.illinois.gov
Certificate
The complete raw certificate details for *.illinois.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIQe7KCX7NTzN5+RjXPpINz2jANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAyMTMxOTI5NDFaFw0yNTAzMTMxOTI5NDBaMIGVMQswCQYDVQQGEwJVUzERMA8G A1UECBMISWxsaW5vaXMxFDASBgNVBAcTC1NwcmluZ2ZpZWxkMUQwQgYDVQQKEztT dGF0ZSBvZiBJbGxpbm9pcyAtIERlcGFydG1lbnQgb2YgSW5ub3ZhdGlvbiBhbmQg VGVjaG5vbG9neTEXMBUGA1UEAwwOKi5pbGxpbm9pcy5nb3YwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDBppWBdMLr0XFwK7pI0zoZIwNnvuLotnKk3wM7 EZsfu3h2GOA3nU0c/BTDnQV+1en2rfX5GqjW1HUSGsKtO2ktmK/tV1sf0WGKnOyb BgLTIZFLIoKOjvLKE1qbQ4ctLXHFcG2z6QFv2PIHAoVg1149vC2HNGlVPZx+R75F QZ6owr2gvNC/ZsC2Pcd7nzwzOC3wLeglSCnpdtXZkf9KfxUpeQz0ED7raVDbVH2y 70nEqd/tkkO2CWhUO8q/RugEuMqvJwB4GRUzswLpSlRYYY3c12As5bglzxAL+Pn7 z/U8bRDccPQN2o1fQiynrWcQunHFvN+bCtPnY2u5yMtqZYgdAgMBAAGjggFzMIIB bzAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTK8NQ+gixy5t8srbYd3EJO1i982jAf BgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFow IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAC hidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0f BCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDAn BgNVHREEIDAegg4qLmlsbGlub2lzLmdvdoIMaWxsaW5vaXMuZ292MA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAww CjAIBgZngQwBAgIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAK4RYGC8y1GEtUHrbpUxY/VgOQ0DHf8zoHWituoWdHi6IMXhxmrvinB4EwPG Tqfyp+l6FCbI5GKGjVenEHZyehTWDH65+xa/KTPP5vOnqxkFT++ZaRMA/VoZnUwv gcHLHblCGHJCtQFJnYqoiY73DR7mPdCfk6F2sKruaCxF75W1FSOMlt6eXKvtVS4A ZNIigwJeZ0kFVBFA/ZQP9eTCUOECXlU5WfQKtZwW/MEzgfgZmSm5WMaj3Z8oujoL /cRmRVk/LgtoCrO9ny6fWOp+bbZr6a32xbU8h9hNhAZPnpLPI3jjAvSB4bx8uEN5 noTUyMac1UNO8tFK9AhOZcsRTJw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaaVgXTC69FxcCu6SNM6 GSMDZ77i6LZypN8DOxGbH7t4dhjgN51NHPwUw50FftXp9q31+Rqo1tR1EhrCrTtp LZiv7VdbH9FhipzsmwYC0yGRSyKCjo7yyhNam0OHLS1xxXBts+kBb9jyBwKFYNde PbwthzRpVT2cfke+RUGeqMK9oLzQv2bAtj3He588Mzgt8C3oJUgp6XbV2ZH/Sn8V KXkM9BA+62lQ21R9su9JxKnf7ZJDtgloVDvKv0boBLjKrycAeBkVM7MC6UpUWGGN 3NdgLOW4Jc8QC/j5+8/1PG0Q3HD0DdqNX0Isp61nELpxxbzfmwrT52NrucjLamWI HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 164421916617786890325401371847889744858 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 19:29:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-13 19:29:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springfield' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Illinois - Department of Innovation and Technology' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.illinois.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24446138493710229623034441280075557905244326399247347768776005196213290431662523400406478748979494774832429563449749238033661209243534597614344273872360499928263441584717064148902655931934110658015538257161820212426471809387890107030724302563617210976687628202119318619906742004547676853047964227616371464991036562704937855943819492723713041240789700293419884629032920706277885818932713867430160717558905921682116042399031897749380462811810036989667978120706015863256746112584828274110488516976868957566266230589712803508494828119733217400488618391322837810361514181797835448790214672590440892156047902076794923485213 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) caf0d43e822c72e6df2cadb61ddc424ed62f7cda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illinois.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinois.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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