www.vermont.gov

- State of Vermont -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6e:3a:33:3a:f6:67:66:68:97:dc:79:d3 was issued on by GlobalSign nv-sa.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Vermont

Organization: State of Vermont
Organization unit: Agency of Digital Services
State / Province: Vermont
Locality: Montpelier
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:3a:33:3a:f6:67:66:68:97:dc:79:d3
Serial Number (int): 34113710706242661334260677075
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: df:6b:9e:36:3c:0c:68:97:f4:9a:0f:4a:5b:13:6d:dd:5f:64:6e:17
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 11:f9:ed:a9:e2:39:22:a9:4a:3c:f3:78:07:42:3a:96:0d:9b:76:1e
Fingerprint (sha256): 18:b7:7b:60:1b:83:49:31:c8:50:77:c7:84:73:e8:b2:86:67:8b:21:49:2d:24:d1:6c:85:55:a1:25:a9:96:7d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.vermont.gov

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vermont.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vermont.gov
www.802spirits.com
802spirits.com
ezpay4kids.vt.gov
accd.vermont.gov
agriculture.vermont.gov
anr.vermont.gov
aoa.vermont.gov
asd.vermont.gov
atp.vermont.gov
auditor.vermont.gov
bgs.vermont.gov
blueprintforhealth.vermont.gov
cispartners.vermont.gov
climatechange.vermont.gov
cmo.vermont.gov
craftcenters.vermont.gov
cto.vermont.gov
dail.vermont.gov
dbvi.vermont.gov
dcf.vermont.gov
dec.vermont.gov
defgen.vermont.gov
digitalservices.vermont.gov
dii.vermont.gov
dlp.vermont.gov
dmv.vermont.gov
dps.vermont.gov
e911.vermont.gov
education.vermont.gov
elearning.vermont.gov
epmo.vermont.gov
ethicscommission.vermont.gov
finance.vermont.gov
firesafety.vermont.gov
floodready.vermont.gov
floodtraining.vermont.gov
fpr.vermont.gov
ghsp.vermont.gov
gmcboard.vermont.gov
governor.vermont.gov
hcr.vermont.gov
healthcareinnovation.vermont.gov
healthdata.vermont.gov
hireus.vermont.gov
historicsites.vermont.gov
hrc.vermont.gov
ezpay4kids.vermont.gov
curator.vermont.gov
ddsd.vermont.gov
cvptaskforce.vermont.gov
secure.vermont.gov
src.vermont.gov
labor.vermont.gov
relocation.vermont.gov
mydmvlearnerspermit.vermont.gov
uat.mydmvlearnerspermit.vermont.gov
dllseminars.staging.vermont.gov
dllseminars.vermont.gov
covidstaffing.vermont.gov
mydmvtempplate.staging.vermont.gov
mydmvtempplate.vermont.gov
vtsharespledge.vermont.gov
reachupera.vermont.gov
wcmstraining.vermont.gov
vtlibreports.vermont.gov
vehicletaxestimator.mydmv.vermont.gov
vermont.gov

Other certificates including the domain name vermont.gov

(limited to 100 certificates)
dhriu.vermont.gov
www.myvtax.vermont.gov
inside.vermont.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
ismstg.apps.vermont.gov
*.healthconnect.vermont.gov
list.vermont.gov
ljfo.vermont.gov
e911ags.vermont.gov
usaherds.vermont.gov
matsdev.vtrans.vermont.gov
maps.vcgi.vermont.gov
1moreconversation.com
inside.vermont.gov
dev.maps.vcgi.vermont.gov
employerreporting.vermont.gov
gpnh.ngesi.vermont.gov
selfserve.education.state.vt.us
cloud.agriculture.vermont.gov
railtrails.vermont.gov
gs.tax.vermont.gov
*.professionals.vermont.gov
anrgeodata.vermont.gov
secure.vermont.gov
eoc.vermont.gov
1moreconversation.com
bedboard.vermont.gov
slds.education.vermont.gov
staging.mydmv.vermont.gov
geodata.vermont.gov
rms.vermont.gov
cloud.agriculture.vermont.gov
*.hsep.vermont.gov
ssl7.revizesites.com
anrgeodata.vermont.gov
legislature.vermont.gov
apps.health.vermont.gov
uipublic01.labor.vermont.gov
ACCDMaps.Vermont.gov
anrmaps.vermont.gov
list.vermont.gov
www.vermont.gov
Inside.Vermont.Gov
*.id.vermont.gov
peacham.vermont.gov
grants.vermont.gov
www.staging.vtpics.vermont.gov
edwa.vermont.gov
cloud.agriculture.vermont.gov
agriculturegrants.vermont.gov
maps.vermont.gov
secure.accd.vermont.gov
WebDBMS.ngesi.vermont.gov
preprod.slds.vermont.gov
anrmaps.vermont.gov
gs.vtrans.vermont.gov
*.healthconnect.vermont.gov
vtlottery.com
my.vermont.gov
retire.vermont.gov
ljfo.vermont.gov
apps.health.vermont.gov
bedboard.vermont.gov
dev.maps.vcgi.vermont.gov
legislature.vermont.gov
ssl7.revizesites.com
uipublic.labor.vermont.gov
maps.vermont.gov
1moreconversation.com
*.id.vermont.gov
sos.vermont.gov
*.hsep.vermont.gov
ssl7.revizesites.com
roadsidemarkers.vermont.gov
design.education.vermont.gov
*.ngesi.vermont.gov
childcareproviders.vermont.gov
160.166.tmcapital.com
*.apps.vermont.gov
vitws.labor.vermont.gov
www.usaplants.vermont.gov
test.slds.vermont.gov
www.rms.vermont.gov
cloud.agriculture.vermont.gov
ssl7.revizesites.com
*.professionals.vermont.gov
*.hsep.in.vermont.gov
maps.vcgi.vermont.gov
infotest.my.vermont.gov
www.vermont.gov
uipublic.labor.vermont.gov
apps.health.vermont.gov
dualenrollment.vermont.gov
ljfo.vermont.gov
lobbying.vermont.gov
orc.vermont.gov
*.hsep.vermont.gov
dev-dfr.gs.vermont.gov

Certificate

The complete raw certificate details for www.vermont.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw84U2XqYln3ktXPfA1Ts
17Kor8WJfZhXB01WxGSOaiZB0wXLiZpPH94Nwq6ix2OqWGSb6v9CuARh0edg/Eqi
UauOIhBOKBus1ST3MoL4eC1QB0hsy/DPSpjT47EDZXQ1D11KVVA7iWEUlE0jXOjw
uponq7OcYDe38gfUecqFt7VFaPZXBEkbpnKivJb4mM8IwsKYTDZmTyRg0tnxxyQY
fqlXEn5x+kid3AmHolYTSw9BHDHUz1DZuyrwta+WNj+9U7zMsqP7ADhhyExnFd9S
UBeDXL/REmo2EUNQ2hTOTpFEmDc9IppV9HGPi5+3SMd6dVK8eMFD0p2XhEIei2/n
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34113710706242661334260677075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 18:20:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 17:21:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montpelier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Agency of Digital Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vermont.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24718092015677992627738068725672787352159131804000026263150768636737551912972181218189960249032263850339926644994154189036599015950118065141623604251368151132870952003390137813131615275785830045054451832070195305821309156524703937300746847216587946253425416853599117089922423256003658226986421289464627843583014227794544708558211909791055230434742064540697869878939459114181768976459180881205026827393792806480534518011491157980019709480916864440640007253115715758297133374234742317398893569949119879961684238236115379447598367919724170841966766063647926238278342754281062435130359651992682427928688361775412116711211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.802spirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '802spirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezpay4kids.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accd.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anr.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoa.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asd.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atp.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditor.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgs.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintforhealth.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cispartners.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climatechange.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmo.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftcenters.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cto.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dail.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbvi.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcf.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dec.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defgen.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservices.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dii.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlp.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e911.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epmo.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethicscommission.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firesafety.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floodready.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floodtraining.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpr.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsp.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcboard.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governor.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcr.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareinnovation.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthdata.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireus.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicsites.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezpay4kids.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddsd.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvptaskforce.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labor.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relocation.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydmvlearnerspermit.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mydmvlearnerspermit.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dllseminars.staging.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dllseminars.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidstaffing.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydmvtempplate.staging.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydmvtempplate.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtsharespledge.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachupera.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcmstraining.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtlibreports.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicletaxestimator.mydmv.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermont.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df6b9e363c0c6897f49a0f4a5b136ddd5f646e17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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