*.erp.state.vt.us
- State of Vermont -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 7d:63:c5:15:79:d6:8d:3c:1f:19:7a:7e was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
State of Vermont
Organization:
State of Vermont
State / Province:
Vermont
Locality: Montpelier
Country: US
Locality: Montpelier
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7d:63:c5:15:79:d6:8d:3c:1f:19:7a:7eSerial Number (int): 38806240586168092559865903742
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: a0:61:1d:33:f8:57:40:7e:e4:af:6f:0f:c5:ef:27:f2:87:ef:c2:e2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 0b:9b:44:f5:ea:65:00:b7:93:8a:dc:d8:59:7c:57:00:c7:85:23:ba
Fingerprint (sha256): 18:ab:40:42:4e:6e:3c:cb:7b:b6:49:2d:f7:d5:bd:30:f6:b0:06:3f:37:60:14:8e:35:97:57:54:5d:16:f9:0c
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate *.erp.state.vt.us
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.erp.state.vt.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.erp.state.vt.us
erp.state.vt.us
erp.state.vt.us
Other certificates including the domain name state.vt.us
(limited to 100 certificates)
erecruit.per.state.vt.us
gfs.dps.state.vt.us
ibi-montpelier-1.infosec.state.vt.us
anrmaps.vermont.gov
incapsula.com
nws.vdh.state.vt.us
vtmapir-admin.dvha.ahs.state.vt.us
incapsula.com
vjiss2.dps.state.vt.us
ahssqld08d.ahs.state.vt.us
vtcnp.doe.state.vt.us
devcms.sec.state.vt.us
incapsula.com
wave.ed.state.vt.us
tvie2140.infosec.state.vt.us
www.sec.state.vt.us
selfserve.education.state.vt.us
incapsula.com
docstar.dps.state.vt.us
www.sec.state.vt.us
nextest.dps.state.vt.us
www.ahsnet.ahs.state.vt.us
telecomservices.dii.state.vt.us
incapsula.com
citrix.ahs.state.vt.us
cag.state.vt.us
OBWFE2-TEST.ahs.state.vt.us
incapsula.com
incapsula.com
incapsula.com
dpsgisweb2.dps.state.vt.us
trader.administration.sec.state.vt.us
incapsula.com
ent-footprints.state.vt.us
incapsula.com
panopticon.infosec.state.vt.us
incapsula.com
fsdnet.ahs.state.vt.us
vepards.dps.state.vt.us
incapsula.com
OBWFEAPP5.ahs.state.vt.us
vepardswb2.dps.state.vt.us
www.sec.state.vt.us
view.leg.state.vt.us
incapsula.com
ahs-obwfeapp4-test.ahs.state.vt.us
obwfeapp7.ahs.state.vt.us
nws.vdh.state.vt.us
anrmaps.vermont.gov
incapsula.com
fsdnet.ahs.state.vt.us
fsdnet.ahs.state.vt.us
pike.atg.state.vt.us
nws.vdh.state.vt.us
*.vttaxnet.tax.state.vt.us
www.sec.state.vt.us
ftp2.tre.state.vt.us
incapsula.com
vtdpscrimentel.dps.state.vt.us
VEMservices.dps.state.vt.us
analytics.dps.state.vt.us
incapsula.com
DMVCIS01.aot.state.vt.us
citrix.labor.state.vt.us
*.erp.state.vt.us
secure.atg.state.vt.us
www.sec.state.vt.us
nws.vdh.state.vt.us
adfs.vtransweb.aot.state.vt.us
incapsula.com
slog-dvha.ahs.state.vt.us
incapsula.com
jury.eservices.crt.state.vt.us
vjiss2.dps.state.vt.us
incapsula.com
aotadfs.dps.state.vt.us
infoonmycase.ahs.state.vt.us
vepardscopweb.dps.state.vt.us
nomos.dps.state.vt.us
www.sec.state.vt.us
publicportal.courts.vt.gov
www.aot.state.vt.us
OBWFEAPP3.ahs.state.vt.us
anrnode.anr.state.vt.us
incapsula.com
ftp2.tre.state.vt.us
incapsula.com
mybenefits.ahs.state.vt.us
incapsula.com
www.brightfutures.dcf.state.vt.us
incapsula.com
anrnode.anr.state.vt.us
*.erp.state.vt.us
secure.education.state.vt.us
quick.ahs.state.vt.us
*.erp.state.vt.us
incapsula.com
cms.sec.state.vt.us
agocapcomplaint.atg.state.vt.us
alfresco.sec.state.vt.us
gfs.dps.state.vt.us
ibi-montpelier-1.infosec.state.vt.us
anrmaps.vermont.gov
incapsula.com
nws.vdh.state.vt.us
vtmapir-admin.dvha.ahs.state.vt.us
incapsula.com
vjiss2.dps.state.vt.us
ahssqld08d.ahs.state.vt.us
vtcnp.doe.state.vt.us
devcms.sec.state.vt.us
incapsula.com
wave.ed.state.vt.us
tvie2140.infosec.state.vt.us
www.sec.state.vt.us
selfserve.education.state.vt.us
incapsula.com
docstar.dps.state.vt.us
www.sec.state.vt.us
nextest.dps.state.vt.us
www.ahsnet.ahs.state.vt.us
telecomservices.dii.state.vt.us
incapsula.com
citrix.ahs.state.vt.us
cag.state.vt.us
OBWFE2-TEST.ahs.state.vt.us
incapsula.com
incapsula.com
incapsula.com
dpsgisweb2.dps.state.vt.us
trader.administration.sec.state.vt.us
incapsula.com
ent-footprints.state.vt.us
incapsula.com
panopticon.infosec.state.vt.us
incapsula.com
fsdnet.ahs.state.vt.us
vepards.dps.state.vt.us
incapsula.com
OBWFEAPP5.ahs.state.vt.us
vepardswb2.dps.state.vt.us
www.sec.state.vt.us
view.leg.state.vt.us
incapsula.com
ahs-obwfeapp4-test.ahs.state.vt.us
obwfeapp7.ahs.state.vt.us
nws.vdh.state.vt.us
anrmaps.vermont.gov
incapsula.com
fsdnet.ahs.state.vt.us
fsdnet.ahs.state.vt.us
pike.atg.state.vt.us
nws.vdh.state.vt.us
*.vttaxnet.tax.state.vt.us
www.sec.state.vt.us
ftp2.tre.state.vt.us
incapsula.com
vtdpscrimentel.dps.state.vt.us
VEMservices.dps.state.vt.us
analytics.dps.state.vt.us
incapsula.com
DMVCIS01.aot.state.vt.us
citrix.labor.state.vt.us
*.erp.state.vt.us
secure.atg.state.vt.us
www.sec.state.vt.us
nws.vdh.state.vt.us
adfs.vtransweb.aot.state.vt.us
incapsula.com
slog-dvha.ahs.state.vt.us
incapsula.com
jury.eservices.crt.state.vt.us
vjiss2.dps.state.vt.us
incapsula.com
aotadfs.dps.state.vt.us
infoonmycase.ahs.state.vt.us
vepardscopweb.dps.state.vt.us
nomos.dps.state.vt.us
www.sec.state.vt.us
publicportal.courts.vt.gov
www.aot.state.vt.us
OBWFEAPP3.ahs.state.vt.us
anrnode.anr.state.vt.us
incapsula.com
ftp2.tre.state.vt.us
incapsula.com
mybenefits.ahs.state.vt.us
incapsula.com
www.brightfutures.dcf.state.vt.us
incapsula.com
anrnode.anr.state.vt.us
*.erp.state.vt.us
secure.education.state.vt.us
quick.ahs.state.vt.us
*.erp.state.vt.us
incapsula.com
cms.sec.state.vt.us
agocapcomplaint.atg.state.vt.us
alfresco.sec.state.vt.us
Certificate
The complete raw certificate details for *.erp.state.vt.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIMfWPFFXnWjTwfGXp+MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMDAxMTUxODIxNTdaFw0y MTA1MTIxNjA2MDRaMGsxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdWZXJtb250MRMw EQYDVQQHEwpNb250cGVsaWVyMRkwFwYDVQQKExBTdGF0ZSBvZiBWZXJtb250MRow GAYDVQQDDBEqLmVycC5zdGF0ZS52dC51czCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALueZheIHSk3tMCGdb7HyB3lesQl8ScTp4jlKiO4l8VRh42KNeKB 90OsQSH3459jIQtjP5NB22f8V+mc3OFgkQlUlISho7p0lHHFYtKpZUgIYCWzYoW+ yT1MDFoWxsXgfXzPFCCn8zjBVVVfredeKwXy0taNcJI7i7Gkmx00/SKB/fAsCaND 1gzptRlEE9yaYFV4aKqVDEi809j1a5RQtELlSV1LDO0Tt2POMldv854rJEZ1nqg7 zs/qrrfQLttdwqAcBdWzDtkkKzMMnk/0YvSILBReJFvBpaljSvxROuKIb3RQNvYj uQskbw3YqjIlpCOhX0QXz7wuyvTq1Or13wMCAwEAAaOCAewwggHoMA4GA1UdDwEB /wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0cDovL3Nl Y3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAxOC5jcnQw NwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zz c2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYm aHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIC MAkGA1UdEwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxz aWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDAtBgNVHREEJjAkghEqLmVycC5z dGF0ZS52dC51c4IPZXJwLnN0YXRlLnZ0LnVzMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNV HQ4EFgQUoGEdM/hXQH7kr28Pxe8n8ofvwuIwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAJ5xta5r80Um4C/w3gthYasq7BmLoabDRM3CVO+e OhGl/AlD7BQX4mgpwdtZytNIm6/YvnDz8AjkQaoa6SKf1xjRcprjJHo/kgTzFVPJ moqsi0DzTDldjFTnfVLbRxfGDnUQU7FKbJnPDKTPyqjVx+Ww1Q5ZJ7IvYq4bU3LA tu/ybJcTcpOMLXDym5NHYdcQ7bdnOg3VwtMP/DFC71lQb7sfeA5tjecuAwwZVtpx rdJ+lxAEL/3F+fslzxwoepzzXK9Tme4ahHgWBZhDkGVwMWLapoTpinvSaPlc9aLT C5Zu3t0cHspUS7vLz8nXozSmIqpo7zX4asRB1ZNgFRkHLD0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu55mF4gdKTe0wIZ1vsfI HeV6xCXxJxOniOUqI7iXxVGHjYo14oH3Q6xBIffjn2MhC2M/k0HbZ/xX6Zzc4WCR CVSUhKGjunSUccVi0qllSAhgJbNihb7JPUwMWhbGxeB9fM8UIKfzOMFVVV+t514r BfLS1o1wkjuLsaSbHTT9IoH98CwJo0PWDOm1GUQT3JpgVXhoqpUMSLzT2PVrlFC0 QuVJXUsM7RO3Y84yV2/zniskRnWeqDvOz+qut9Au213CoBwF1bMO2SQrMwyeT/Ri 9IgsFF4kW8GlqWNK/FE64ohvdFA29iO5CyRvDdiqMiWkI6FfRBfPvC7K9OrU6vXf AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38806240586168092559865903742 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 18:21:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 16:06:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montpelier' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Vermont' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.erp.state.vt.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23684672386414878660809636171470413458905206700482790031147580853622560389528613577426751638344619144518563423943817465800063671410203138872390427020641280866203119097759718454396713317531575246153210528129170250543009199498198750243738734479854000696269285601195012329390152207913162214891959340422963200606785429310074155889113382924922439638966381821986543006360830727801545190630406509632283744551100582783472454026301935677564809396477252476659074052568221964184676472067671297737936972284467901261048661939091271128736342967275904135460022979282289192929860796927242105762389436296936311950785289050713371303683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp.state.vt.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.state.vt.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a0611d33f857407ee4af6f0fc5ef27f287efc2e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009e71b5ae6bf34526e02ff0de0b6161ab2aec198ba1a6c344cdc254ef9e3a11a5fc0943ec1417e26829c1db59cad3489bafd8be70f3f008e441aa1ae9229fd718d1729ae3247a3f9204f31553c99a8aac8b40f34c395d8c54e77d52db4717c60e751053b14a6c99cf0ca4cfcaa8d5c7e5b0d50e5927b22f62ae1b5372c0b6eff26c971372938c2d70f29b934761d710edb7673a0dd5c2d30ffc3142ef59506fbb1f780e6d8de72e030c1956da71add27e9710042ffdc5f9fb25cf1c287a9cf35caf5399ee1a8478160598439065703162daa684e98a7bd268f95cf5a2d30b966ededd1c1eca544bbbcbcfc9d7a334a622aa68ef35f86ac441d593601519072c3d