www.dot2.state.pa.us

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 44:c3:87:9b:18:fd:1b:1b:00:00:00:00:50:fb:2a:9d was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:c3:87:9b:18:fd:1b:1b:00:00:00:00:50:fb:2a:9d
Serial Number (int): 91402752014183879901533797064029973149
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ae:1f:e6:77:98:a3:2a:a2:f5:c7:f1:ce:d5:bc:16:83:3b:3f:a9:13
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 18:1e:ec:52:83:0f:58:1a:dc:36:4c:84:56:0e:2e:a1:e8:b8:60:d1
Fingerprint (sha256): 06:1a:68:1b:da:67:d4:2d:11:f8:6d:e8:1f:fd:5d:ec:05:af:82:40:4a:aa:a6:da:23:2d:2e:e9:3b:18:6d:cb

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.dot2.state.pa.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dot2.state.pa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dot2.state.pa.us

Other certificates including the domain name state.pa.us

(limited to 100 certificates)
www.pasuppliersrm2.beta.state.pa.us
dliftpua.state.pa.us
www.puc.state.pa.us
uat.calcrite.cor.state.pa.us
www.dotdom3.state.pa.us
secure.courts.state.pa.us
mapir.dpw.state.pa.us
www.stebapp.state.pa.us
pa.direct.file.state.pa.us
www.dot14.state.pa.us
www.dotdom3.state.pa.us
www.state.pa.us
www.leadstracking.dced.state.pa.us
awds.beta.psp.state.pa.us
padlsonline.pa.gov
www.hspaymentgateway.state.pa.us
ldap-mo.dpw.state.pa.us
intraapps-r.dpw.state.pa.us
www.papsrs.state.pa.us
www.pspleot.state.pa.us
www.nedss.state.pa.us
www.aopc.jnet.state.pa.us
ESECagSANCertSyst.dot.pa.gov
apps02.ins.state.pa.us
www.dossurvey.state.pa.us
www.doreservices.state.pa.us
www.jobgatewaytr.pa.gov
lms.state.pa.us
missl.dhs.state.pa.us
www.puc.state.pa.us
www.pasuppliersrm.state.pa.us
www.papsrs.state.pa.us
dliftpua.state.pa.us
www.fd.state.pa.us
tacs.state.pa.us
www.icopapki.state.pa.us
www.JobGatewayrpt.state.pa.us
www.hava.state.pa.us
www.vplan.state.pa.us
www.mpoetc.state.pa.us
www.agtrans.pa.gov
www.agtrans.state.pa.us
pdxs-sat.dpw.state.pa.us
www.humanservices-t.state.pa.us
provider.enrollment.dpw.state.pa.us
www.pimsreports.state.pa.us
www.dot12.state.pa.us
www.nedss.state.pa.us
www.fwgs.beta.state.pa.us
www.pgcb.state.pa.us
www.gis.dcnr.beta.state.pa.us
www.oit.state.pa.us
www.tcs.ed.state.pa.us
www.PAFoodSafety.pa.gov
www.pelican.state.pa.us
www.boardofappeals.state.pa.us
rtm.clean.beta.state.pa.us
www.dot2.state.pa.us
www.handsstaging.state.pa.us
www.nedsstest.state.pa.us
www.pasuppliersrm.state.pa.us
www.hhsapps.state.pa.us
dot11.state.pa.us
www.dpwtxns.state.pa.us
www.nedss.state.pa.us
bdap.health.state.pa.us
www.dot16.pa.gov
WWW.PEMAWEBTOOLS.STATE.PA.US
www.helpinpa.state.pa.us
pew.dpw.state.pa.us
www.depgis.state.pa.us
www.avl.state.pa.us
www.pema.state.pa.us
*.lgc.state.pa.us
www.pennfirs.state.pa.us
www.paltcreporting.state.pa.us
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.pennfirs.state.pa.us
RSA1.legis.state.pa.us
www.hhsidm-sat.state.pa.us
www.grants.dcnr.state.pa.us
www.cwdsua.pa.gov
www.services.dcnr.state.pa.us
www.paemployee.lottery.state.pa.us
www.dotdev12.state.pa.us
pew.dpw.state.pa.us
www.cwdsua.pa.gov
www.humanservices-t.state.pa.us
*.legis.state.pa.us
ldap-uat.dpw.state.pa.us
www.purta.state.pa.us
www.fctms.state.pa.us
dliiamtr.state.pa.us
imaging.dpw.state.pa.us
www.pdotdev1.state.pa.us
store.cpc.state.pa.us
www.rbauth-s.state.pa.us
www.portal.state.pa.us

Certificate

The complete raw certificate details for www.dot2.state.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuN83z7wKzbN5Lc899ntr
QdEUEpT73oSgTMAc8JMyvVfSag03YnLDsW6WitdO6kIZC7QSIy+VdJZyzTeHPHqx
do05/DzXnra8iBBdAYLDUxPpdgsJSDmhEbIC45+8yFIc7PYwPZVneQR3jYAnL7M4
IEfZVninb47todXfDfqdNHSDBAdzVczKnZFiUuSDWaRnNPF+26dUTytsfyGCFRmQ
Y92w/vQgRV/oBL64Gn3usHj/PhyScXh/xumcU5X20NEWzIWUPhDdg4DppUcBl0rK
9Q1fjjL1vDT5w/KrTp2Ya9R0vaViVrlb8ywx67EhQEJdB9x0yNkbXO5A0OxqyS3V
pH/k+fxUPWGHLondOJ9KswB7aCVk+Brnw2RgT6SbMiUIDP9aiJ+GBb/mHbfNNBnG
WxJBS3vfj4booLLdqwqSYaeN6DH5phsrO+G0fGGnAtwpM7PiHuF7kktDfLOl5YsI
lcgCScnOfa2kH7cDueHReqtHSdfkeFkRI4ShQSR7IFMXM68KG4Pp140twZzblOMi
uKXWPu97u8J3mahEXo2kzsgMH4SBy1m2b1jNVUn1npQJEsknVJJv6h2utc3T4L0y
6YkgMg0etmx9VB/cTwPC2MkPiZjGpC1A3P2Wj0zvRbIJmkJ1Yc3TolLIQLls90OG
SG03s8y64MfOyCtjx8Img7UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91402752014183879901533797064029973149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 16:57:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 17:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dot2.state.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754211735253058059388164409460779474773999141436638731904206707614935693517711402017968767825919876804504944875197039444340499734384024098145405060269111111410401922536893982478578951910707156376066612596344852184465895677554601404382709026190777350533379496491646462963885424058795238293364469888607496941145838166719165314862914545714718659345103006278331340527318116234718923958271863096000532245422361017019502469826310705064791587560794395024457466822400758803069851850106098122639965181194610314392665733211104323866827782264202771060375353713623156982810422368132863611309645707276693045126239614876290875173489819851761099794151721319453531255108475631927220467879081851939943015252172790487832557323641817459154130529959512770889686561511523656741576025885625233685233641251780045534019016723828085726029466545275367164783604433875764219075882871925560683806619114466433048449009763060279196803219145012099999199257474782611236167778396608937699807608135030270082779032165415820145463310468151209375599596049825356490763025955884078626231785827121145695308735190202356874875041176633001589655352180718751930597606871693435227905512123384098746115961490294071012328355721983068517299676557206413679496036282464296639964545973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot2.state.pa.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae1fe67798a32aa2f5c7f1ced5bc16833b3fa913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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