expei-mra-cluster.illinois.gov

- State of Illinois - Department of Innovation and Technology -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6c:78:43:f0:1f:25:38:f2:05:af:09:cb:2f:37:e7:c1 was issued on by Entrust, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State of Illinois - Department of Innovation and Technology

Organization: State of Illinois - Department of Innovation and Technology
State / Province: Illinois
Locality: Springfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6c:78:43:f0:1f:25:38:f2:05:af:09:cb:2f:37:e7:c1
Serial Number (int): 144181077113636576151226350793332877249
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 55:ef:46:b4:9b:63:02:11:24:c2:39:d8:48:f6:de:41:88:97:4a:62
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 68:ac:aa:05:b5:7f:a8:f0:f6:9c:9a:e6:9a:35:bc:99:5c:b1:30:e1
Fingerprint (sha256): 02:ec:5a:44:ec:0f:7e:53:10:e8:3f:33:06:94:42:01:9d:24:56:89:f4:0b:60:d2:d6:de:e8:03:09:c3:a7:fe

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate expei-mra-cluster.illinois.gov

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expei-mra-cluster.illinois.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expei-mra-cluster.illinois.gov
www.expei-mra-cluster.illinois.gov
chiexpexmra1.illinois.gov
chiexpexmra2.illinois.gov
sprexpexmra1.illinois.gov
sprexpexmra2.illinois.gov
expex-mra-cluster.illinois.gov
il084sprexpeimra1.illinois.gov
il016chiexpeimra1.illinois.gov
il084sprexpeimra2.illinois.gov
il016chiexpeimra2.illinois.gov
conference-2-standalonecluster411bb.illinois.gov
conference-3-standalonecluster411bb.illinois.gov
illinois.gov

Other certificates including the domain name illinois.gov

(limited to 100 certificates)
scanandvalidate.com
hecker.illinois.gov
nmets.illinois.gov
mattoon.illinois.gov
www2.siren.illinois.gov
FAC.dcfs.illinois.gov
Medicaid.Dcfs.Illinois.gov
il084pkitweb03.iltest.illinois.gov
etip.cmap.illinois.gov
jobstaxcreditqa.illinois.gov
diamond.illinois.gov
imperva.com
IL084PKIDWS6.illinois.gov
*.dnr.illinois.gov
dmarts.transportation.illinois.gov
www.ptb.illinois.gov
www.savoy.illinois.gov
*.illinois.gov
its.cmap.illinois.gov
washingtonco.illinois.gov
enroll.pki.illinois.gov
*.granitecity.illinois.gov
bushnell.illinois.gov
*.dceo.illinois.gov
ns2dw2app.epic.hfs.illinois.gov
expei-mra-cluster.illinois.gov
*.hfs.illinois.gov
auditor.illinois.gov
imperva.com
mattoon.illinois.gov
iwds.dceo.illinois.gov
FingerPrintSearch.dcfs.illinois.gov
*.revenue.illinois.gov
IL084SPRJGS1.illinois.gov
web3.incircuit.com
SystemOfCare.dcfs.illinois.gov
*.data.illinois.gov
email.villageofcrestwoodil.gov
login.incircuit.com
www.hecker.illinois.gov
tmdm.dcfs.illinois.gov
mattoon.illinois.gov
DCFSCUCHLPUB01.illinois.gov
gov.illinois.gov
www.igb.illinois.gov
gisdev.revenue.illinois.gov
portal.igb.illinois.gov
dcfsimphlsub01.illinois.gov
ns2sb1app.epic.hfs.illinois.gov
vfmp.crestwood.illinois.gov
www.auditor.illinois.gov
webapps.sfm.illinois.gov
etip.cmap.illinois.gov
il084pkipoaa.illinois.gov
www.standards.illinois.gov
contact.gov.illinois.gov
webmail.illinois.gov
enrollhfs.illinois.gov
agrlicensing.illinois.gov
oti.ceo.illinois.gov
mdmadmin.illinois.gov
il084ise3.illinois.gov
scanandvalidate.com
irocc.ptb.illinois.gov
washingtonco.illinois.gov
uat.sacwisapi.dcfs.illinois.gov
IL022CCEIDS1B.Illinois.gov
enrollhfs.illinois.gov
*.illinois.gov
proxy.api.illinois.gov
diamond.illinois.gov
ns2se1app.epic.hfs.illinois.gov
www.dph.illinois.gov
starkco.illinois.gov
dcfsucmhlsub01.illinois.gov
imperva.com
ssl2.revizesites.com
*.partner.illinois.gov
*.dhs.illinois.gov
ssl8.revizesites.com
ssl8.revizesites.com
person360uat.illinois.gov
www.westmont.illinois.gov
san-37-s12.tlsprovisioning.exacttarget.com
twsms.illinois.gov
illinoiscourts.gov
bushnell.illinois.gov
multimedia.illinois.gov
icarehl7.dph.illinois.gov
www.dnr.illinois.gov
mqmquarantine.illinois.gov
ebt-link.illinois.gov
*.ides.illinois.gov
etip.cmap.illinois.gov
il084pkitweb01.iltest.illinois.gov
radtech.iema.illinois.gov
mattoon.illinois.gov
*.cms.illinois.gov
IllinoisOutcomesPRD.dcfs.illinois.gov
quarantine1.illinois.gov

Certificate

The complete raw certificate details for expei-mra-cluster.illinois.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIICjCCBvKgAwIBAgIQbHhD8B8lOPIFrwnLLzfnwTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDA1MTQxMzMzMjFaFw0yNTA2MTQxMzMzMTlaMIGlMQswCQYDVQQGEwJVUzERMA8G
A1UECBMISWxsaW5vaXMxFDASBgNVBAcTC1NwcmluZ2ZpZWxkMUQwQgYDVQQKEztT
dGF0ZSBvZiBJbGxpbm9pcyAtIERlcGFydG1lbnQgb2YgSW5ub3ZhdGlvbiBhbmQg
VGVjaG5vbG9neTEnMCUGA1UEAxMeZXhwZWktbXJhLWNsdXN0ZXIuaWxsaW5vaXMu
Z292MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl6l7nRrPuL62gB1i
AsBRJ5PikY6n3KZ2lYHNA1nuMKksNOn/j2sUdahcocGI890ko0Inr6Iqukn+oibO
z0LFO5a0wEdAwTo4u8+G5I+o+4oqJGCtIOmSUZvUEIey7ShC0ZfPvG48re50DaNp
loo+BA1Xj3VzunMS/Ad2CAGq4vYmnyLrOEHkeje5w6OuAmyeNPCpUI3/urnlP+Ko
KYgTS4lWdxlECeYcdgR2pDkmR7FKvVplkctrpDvD0RwozggF5LzhuWXXGdvTyo4L
pVMUSPaw1WPo3fh3ouHGxDs/bjx2OfyoABq7dWXYBFohunVWC4IPMUp4s9WcYz9b
sS5Q9+GQ/rYHfuW1p268Ie7s5oJMC9R1dUmjWznLKbAMfWeG2TOUFrupCZbLCYof
WMlDjZq1bdOl6CO/16aI5TJ08eN6aHDMTB3ZnSlXXx4bWWZkFd4F7nIoULtuAoal
ngSnU1zVPFBM4G9+s2pmkAIpbnlOnv72btulybCu5hwfpMgkGZZxYvn3HFGA1l0n
uiEFeMTrZ10dqbMIbS5AFIVubGToBrgK1lvea8F8bjlE1stxm4dmf/4M0E3hH3UY
fSNG1Fgm7QoNN7esebMtS4QgYBVyQRXXcDRK8U6l2pd0g4yzY8I4axgohMN6XYtg
zq92AovB6CWgqy3pMceP/tQ4w8ECAwEAAaOCAx0wggMZMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFFXvRrSbYwIRJMI52Ej23kGIl0piMB8GA1UdIwQYMBaAFIKicHTd
vFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50
cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMIIBzwYDVR0RBIIBxjCCAcKC
HmV4cGVpLW1yYS1jbHVzdGVyLmlsbGlub2lzLmdvdoIid3d3LmV4cGVpLW1yYS1j
bHVzdGVyLmlsbGlub2lzLmdvdoIZY2hpZXhwZXhtcmExLmlsbGlub2lzLmdvdoIZ
Y2hpZXhwZXhtcmEyLmlsbGlub2lzLmdvdoIZc3ByZXhwZXhtcmExLmlsbGlub2lz
LmdvdoIZc3ByZXhwZXhtcmEyLmlsbGlub2lzLmdvdoIeZXhwZXgtbXJhLWNsdXN0
ZXIuaWxsaW5vaXMuZ292gh5pbDA4NHNwcmV4cGVpbXJhMS5pbGxpbm9pcy5nb3aC
HmlsMDE2Y2hpZXhwZWltcmExLmlsbGlub2lzLmdvdoIeaWwwODRzcHJleHBlaW1y
YTIuaWxsaW5vaXMuZ292gh5pbDAxNmNoaWV4cGVpbXJhMi5pbGxpbm9pcy5nb3aC
MGNvbmZlcmVuY2UtMi1zdGFuZGFsb25lY2x1c3RlcjQxMWJiLmlsbGlub2lzLmdv
doIwY29uZmVyZW5jZS0zLXN0YW5kYWxvbmVjbHVzdGVyNDExYmIuaWxsaW5vaXMu
Z292ggxpbGxpbm9pcy5nb3YwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjATBgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2HVz1hVMyltnq5ka5D7fHv7W
MKMX6HTdXojx3c1lAIGRMKI3OMSK3kRY430dBOkHfRxi/2x+ppaISsoXOyWr3dTp
aWx2/7b8AP+3rYYZOgoOrKMhITjmJQvITfnJBylooBcddhIzf/jFnUJCX5nJIlE/
cEUPs6oX29m3cP61/u/HyJZEtoMtJXQMgQK/J8DUGO7fti8AgdfEVsslx1inOSeT
J4kdtuRycw9/P75hcd06iaBJb6l2T68c0TnLrEiQWuDW3H8/S3LvwmkJ6OLK5wuj
8d/9PDyyFnYgqkv1HM7iUVFCgm2sQ9r4hf/kegVHHyAI5Tdp2dOm/3xsRgbqag==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl6l7nRrPuL62gB1iAsBR
J5PikY6n3KZ2lYHNA1nuMKksNOn/j2sUdahcocGI890ko0Inr6Iqukn+oibOz0LF
O5a0wEdAwTo4u8+G5I+o+4oqJGCtIOmSUZvUEIey7ShC0ZfPvG48re50DaNploo+
BA1Xj3VzunMS/Ad2CAGq4vYmnyLrOEHkeje5w6OuAmyeNPCpUI3/urnlP+KoKYgT
S4lWdxlECeYcdgR2pDkmR7FKvVplkctrpDvD0RwozggF5LzhuWXXGdvTyo4LpVMU
SPaw1WPo3fh3ouHGxDs/bjx2OfyoABq7dWXYBFohunVWC4IPMUp4s9WcYz9bsS5Q
9+GQ/rYHfuW1p268Ie7s5oJMC9R1dUmjWznLKbAMfWeG2TOUFrupCZbLCYofWMlD
jZq1bdOl6CO/16aI5TJ08eN6aHDMTB3ZnSlXXx4bWWZkFd4F7nIoULtuAoalngSn
U1zVPFBM4G9+s2pmkAIpbnlOnv72btulybCu5hwfpMgkGZZxYvn3HFGA1l0nuiEF
eMTrZ10dqbMIbS5AFIVubGToBrgK1lvea8F8bjlE1stxm4dmf/4M0E3hH3UYfSNG
1Fgm7QoNN7esebMtS4QgYBVyQRXXcDRK8U6l2pd0g4yzY8I4axgohMN6XYtgzq92
AovB6CWgqy3pMceP/tQ4w8ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144181077113636576151226350793332877249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 13:33:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 13:33:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Illinois - Department of Innovation and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expei-mra-cluster.illinois.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618727151805484742187801598371721104017834044254196826563024769592157620641378761308668189041363076603843131288876273370914737449983326945788583547952573276015788060707071556845733315321724951168484364634357246609598906179886168989822744077732748093736364476656275379548532535408239714252488518124001446498979001730189867675743248295062248851358920269644103297951212820486604513015221916918608154949041850891529696840273639302617312922138596841441942492094669975168361333497644821086556655733449460212276217693830172875059375697427909491038819427743175726642604353435023091493557055750322192844381674208565649972352578928992554609511826187055232035401993573128641316426301883361593310116151091448203349130193526201516468553311332632601934747903055995809684576791771406827176208263806454210041217223674986562767253548193076810239888990460739734158362645440684615228768442971760712281536163714853350405712252001093299017987879661701829704388680306937563021765185783498561448609084655641675058455332649742349466828128397336616254378326288172788204967212819785813561900782556008481541830044805980194795764478918274880355309719737811865304314634282846411867494604630554160138072998806004386570899452006739958265417902275955878965099938753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55ef46b49b63021124c239d848f6de4188974a62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (454 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expei-mra-cluster.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expei-mra-cluster.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiexpexmra1.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiexpexmra2.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprexpexmra1.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprexpexmra2.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expex-mra-cluster.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il084sprexpeimra1.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il016chiexpeimra1.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il084sprexpeimra2.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il016chiexpeimra2.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standalonecluster411bb.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standalonecluster411bb.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinois.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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