dia.iowa.gov
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f0:11:03:67:4e:07:ee:5c was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dia.iowa.gov,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): f0:11:03:67:4e:07:ee:5cSerial Number (int): 17298611385932443228
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 1f:47:2a:ff:4b:88:2e:cc:98:65:4a:44:a5:8d:f0:89:f6:1b:6f:bc
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 2e:95:cb:ee:fc:a3:f8:15:c2:03:c3:f2:98:23:37:52:d2:04:dd:d0
Fingerprint (sha256): 03:db:7e:bd:89:ed:51:f5:3b:75:53:b6:e6:4f:20:09:07:78:7d:a9:02:a9:2f:00:cc:8d:d5:ff:14:a5:ee:cb
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-161.crl
Check the revocation status for certificate dia.iowa.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dia.iowa.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dia.iowa.gov
www.dia.iowa.gov
www.dia.iowa.gov
Other certificates including the domain name iowa.gov
(limited to 100 certificates)
pottawattamiecounty.iowa.gov
mitchellcountyelections.iowa.gov
pocahontascountyiowa.gov
www.greenecounty.iowa.gov
earlychildhood.iowa.gov
ssl7.revizesites.com
elections101.iowa.gov
ssl8.revizesites.com
idacounty.iowa.gov
iris.iowa.gov
iowa.gov
www.cedarcounty.iowa.gov
incapsula.com
hsemdpreparedness.iowa.gov
pagecounty.iowa.gov
dhs.iowa.gov
delawarecounty.iowa.gov
harrisoncounty.iowa.gov
ssl3.revizesites.com
www.floodrisk.iowa.gov
fs.wdm.iowa.gov
ssl3.revizesites.com
login.iowa.gov
etranscript.iowa.gov
incapsula.com
incapsula.com
www.crawfordcounty.iowa.gov
norwalk.iowa.gov
incapsula.com
ileatraining.iowa.gov
incapsula.com
forms.cabarruscounty.us
dia.iowa.gov
clarkecountyiowa.org
san-f2.granicusgovaccess.net
ltgovernor.iowa.gov
hd.alborgdx.com
vaapp.iowa.gov
claycounty.iowa.gov
incapsula.com
ssl8.revizesites.com
www.wapellocounty.iowa.gov
googlehelp.iowa.gov
va.iowa.gov
lucascountyelections.iowa.gov
ssl8.revizesites.com
commerce.iowa.gov
www.idr.iowa.gov
filings.iowa.gov
incapsula.com
ssl3.revizesites.com
www.plb.iowa.gov
incapsula.com
datapro.plb.iowa.gov
incapsula.com
crawfordcounty.iowa.gov
ltgovernor.iowa.gov
efs.iowa.gov
www.muscatinecountyiowa.gov
monroecounty.iowa.gov
incapsula.com
howardcounty.iowa.gov
idol.iowa.gov
ssl8.revizesites.com
fayettecounty.iowa.gov
vaapp.iowa.gov
yourlifeiowa.org
incapsula.com
www.admissions.iastate.edu
entaa.iowa.gov
www.pocahontas-county.com
yourlifeiowa.com
train-qa.iowa.gov
incapsula.com
claycounty.iowa.gov
incapsula.com
mail.norwalk.iowa.gov
incapsula.com
*.iowa.gov
incapsula.com
city-budget-explorer.iowa.gov
earlychildhood.iowa.gov
terracehill.iowa.gov
madisoncounty.iowa.gov
vpn2.iowa.gov
ssl7.revizesites.com
incapsula.com
san-d2.granicusgovaccess.net
emmetcounty.iowa.gov
ssl7.revizesites.com
incapsula.com
butlercoiowa.org
incapsula.com
guestaccess.iwd.iowa.gov
iowanewbornscreening.iowa.gov
ssl1.revizesites.com
dia.iowa.gov
san-e2.granicusgovaccess.net
desktop.iwd.iowa.gov
san-f2.granicusgovaccess.net
mitchellcountyelections.iowa.gov
pocahontascountyiowa.gov
www.greenecounty.iowa.gov
earlychildhood.iowa.gov
ssl7.revizesites.com
elections101.iowa.gov
ssl8.revizesites.com
idacounty.iowa.gov
iris.iowa.gov
iowa.gov
www.cedarcounty.iowa.gov
incapsula.com
hsemdpreparedness.iowa.gov
pagecounty.iowa.gov
dhs.iowa.gov
delawarecounty.iowa.gov
harrisoncounty.iowa.gov
ssl3.revizesites.com
www.floodrisk.iowa.gov
fs.wdm.iowa.gov
ssl3.revizesites.com
login.iowa.gov
etranscript.iowa.gov
incapsula.com
incapsula.com
www.crawfordcounty.iowa.gov
norwalk.iowa.gov
incapsula.com
ileatraining.iowa.gov
incapsula.com
forms.cabarruscounty.us
dia.iowa.gov
clarkecountyiowa.org
san-f2.granicusgovaccess.net
ltgovernor.iowa.gov
hd.alborgdx.com
vaapp.iowa.gov
claycounty.iowa.gov
incapsula.com
ssl8.revizesites.com
www.wapellocounty.iowa.gov
googlehelp.iowa.gov
va.iowa.gov
lucascountyelections.iowa.gov
ssl8.revizesites.com
commerce.iowa.gov
www.idr.iowa.gov
filings.iowa.gov
incapsula.com
ssl3.revizesites.com
www.plb.iowa.gov
incapsula.com
datapro.plb.iowa.gov
incapsula.com
crawfordcounty.iowa.gov
ltgovernor.iowa.gov
efs.iowa.gov
www.muscatinecountyiowa.gov
monroecounty.iowa.gov
incapsula.com
howardcounty.iowa.gov
idol.iowa.gov
ssl8.revizesites.com
fayettecounty.iowa.gov
vaapp.iowa.gov
yourlifeiowa.org
incapsula.com
www.admissions.iastate.edu
entaa.iowa.gov
www.pocahontas-county.com
yourlifeiowa.com
train-qa.iowa.gov
incapsula.com
claycounty.iowa.gov
incapsula.com
mail.norwalk.iowa.gov
incapsula.com
*.iowa.gov
incapsula.com
city-budget-explorer.iowa.gov
earlychildhood.iowa.gov
terracehill.iowa.gov
madisoncounty.iowa.gov
vpn2.iowa.gov
ssl7.revizesites.com
incapsula.com
san-d2.granicusgovaccess.net
emmetcounty.iowa.gov
ssl7.revizesites.com
incapsula.com
butlercoiowa.org
incapsula.com
guestaccess.iwd.iowa.gov
iowanewbornscreening.iowa.gov
ssl1.revizesites.com
dia.iowa.gov
san-e2.granicusgovaccess.net
desktop.iwd.iowa.gov
san-f2.granicusgovaccess.net
Certificate
The complete raw certificate details for dia.iowa.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIJAPARA2dOB+5cMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE1MTIwMjIyNDEzOFoX DTE2MTIwMjIyNDEzOFowOjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRUwEwYDVQQDEwxkaWEuaW93YS5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnzYDyKc2SUmFvl7ulfgH+Str0m2O1wei0Q3Du5RSG2ZaqgMTQ fZyq2j5FgcxDudM/h6jO0aEG53v7CLsvM0pNH1ADvyVkI12da2v9nvjCnSA2GvXP rTH/bzhMpKD7mQq7HZD8fN1MWe4Anwb3nr/a/roh5Ykz/ZvL/VkC7IyivcMhTN7O XlHQ1+YfCPeK68ixS3iqf6HHqAKSsN7WUlfDy/udhQTuEiji6BGK8iJ3wGcFJwfa 8tAFYFWrHnSOS+x13i9s0AzAE0Lh2NOJAOOPPLVRmLPr3vCv1+4X8kXzlhocYJs2 fzPrDKmMpO8PO0eBCtuKrwUgsSXaD7DcwPJdAgMBAAGjggGyMIIBrjAMBgNVHRMB Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8E BAMCBaAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5nb2RhZGR5LmNvbS9n ZGlnMnMxLTE2MS5jcmwwUwYDVR0gBEwwSjBIBgtghkgBhv1tAQcXATA5MDcGCCsG AQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRv cnkvMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29k YWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFk ZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSD MKIz1/tss/C0LIDOMCkGA1UdEQQiMCCCDGRpYS5pb3dhLmdvdoIQd3d3LmRpYS5p b3dhLmdvdjAdBgNVHQ4EFgQUH0cq/0uILsyYZUpEpY3wifYbb7wwDQYJKoZIhvcN AQELBQADggEBAEew1wNraz4N9ECfCjuKdm2xDPnGSyzW1dcND3zYS+BAvWBRpkSs PAgHqADqXhq5TW1jfe5hL1YMLzoEW7L78VMnGbhJ84+0/lkeD0EjUFTu3tHZ3NN8 0qwEp/GTElCCbMA61qHeOVt5CFcx1t6LHj+1AsDUX/qryA1oCo6Vnhc1LA03XRUL Vr4RDbV87BOcAOMYWXaxZfljsPtgHv9Wx6u8bxhOWbuyWb2RMe1Y97jnFwNhdVPj 6lMLzsOs3oa4JdhrZXTVmlWdmtWOz3KhjEy2dmpAuOAmzhs8BGqs7pCkfyMZcjm+ j/elELt1Y1IiIAVHuShlEUsDswFfv47p/WA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp82A8inNklJhb5e7pX4B /kra9JtjtcHotENw7uUUhtmWqoDE0H2cqto+RYHMQ7nTP4eoztGhBud7+wi7LzNK TR9QA78lZCNdnWtr/Z74wp0gNhr1z60x/284TKSg+5kKux2Q/HzdTFnuAJ8G956/ 2v66IeWJM/2by/1ZAuyMor3DIUzezl5R0NfmHwj3iuvIsUt4qn+hx6gCkrDe1lJX w8v7nYUE7hIo4ugRivIid8BnBScH2vLQBWBVqx50jkvsdd4vbNAMwBNC4djTiQDj jzy1UZiz697wr9fuF/JF85YaHGCbNn8z6wypjKTvDztHgQrbiq8FILEl2g+w3MDy XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17298611385932443228 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-02 22:41:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-02 22:41:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dia.iowa.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21183134578300675204794472786965933718147902609263036084578089921212716150639994944757376217467531532385572158107921642338145387083020853860451276073771858607451290208591626615402587328055365511699937535997713740446667581459284599024913069134137417345254781692975677616944989049158889015786177116572900890026868399455102694440110609181842919133972582443764127296091787686091528555095774281566508002843912276999004022161568754009670430553286757730316137001932108945025530783059241670832652991325127675925353942082349621898913240834299171064754883886550601221782954987932897631243413025639622015550561682487736067486301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-161.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dia.iowa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia.iowa.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f472aff4b882ecc98654a44a58df089f61b6fbc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0047b0d7036b6b3e0df4409f0a3b8a766db10cf9c64b2cd6d5d70d0f7cd84be040bd6051a644ac3c0807a800ea5e1ab94d6d637dee612f560c2f3a045bb2fbf1532719b849f38fb4fe591e0f41235054eeded1d9dcd37cd2ac04a7f1931250826cc03ad6a1de395b79085731d6de8b1e3fb502c0d45ffaabc80d680a8e959e17352c0d375d150b56be110db57cec139c00e3185976b165f963b0fb601eff56c7abbc6f184e59bbb259bd9131ed58f7b8e71703617553e3ea530bcec3acde86b825d86b6574d59a559d9ad58ecf72a18c4cb6766a40b8e026ce1b3c046aacee90a47f23197239be8ff7a510bb75635222200547b92865114b03b3015fbf8ee9fd60