cisreports.penndot.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 57:4f:2e:92:23:e2:3f:97:ce:c1:6d:41:e7:af:99:9a was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 57:4f:2e:92:23:e2:3f:97:ce:c1:6d:41:e7:af:99:9a
Serial Number (int): 116053971654370920273142982374161619354
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f0:15:ac:35:2c:45:be:2e:cd:45:7a:f0:35:07:a4:5b:61:5f:73:4e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 70:40:83:e7:a2:d5:5d:3d:9e:23:af:f0:d4:00:7a:38:45:9a:f0:7d
Fingerprint (sha256): 1d:42:c0:2a:b8:86:d3:85:ac:be:7d:ac:43:68:0c:50:2c:af:4a:53:59:7d:ec:c9:4c:af:07:86:cc:ce:51:da

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cisreports.penndot.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cisreports.penndot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cisreports.penndot.gov

Other certificates including the domain name penndot.gov

(limited to 100 certificates)
www.crashinfo.penndot.gov
CISREPORTS.PENNDOT.GOV
ESECagSANCertProd.dot.pa.gov
ESECagSANCertSyst.dot.pa.gov
gis.penndot.gov
www.ecssyst.penndot.gov
www.ecmssyst.penndot.gov
SMProxySANCertProd.dot.pa.gov
ESECSanCertProd128.dot.pa.gov
www.dot16.pa.gov
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.pa.gov
qars.penndot.gov
www.idealinksyst.pa.gov
www.mpmstest.penndot.gov
path.penndot.gov
dev.aem.penndot.gov
path.penndot.gov
gis.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertDev.dot.pa.gov
aprassyst.penndot.gov
www.dot16.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
cisreports.penndot.gov
apras.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
www.dottrn34.state.pa.us
ESECagSANCertSyst.dot.pa.gov
SMProxySANCertESECProd.dot.pa.gov
SMProxySANCertUAT.dot.pa.gov
www.ecms.penndot.gov
analytics.penndot.gov
SMProxySANCertUAT.dot.pa.gov
www.ecssyst.penndot.gov
idservicesadv.penndot.gov
a93c8e3041.nxcli.io
analytics-uat.penndot.gov
cisweb.penndot.gov
ESECagSANCertProd.dot.pa.gov
004uatcisweb.penndot.gov
www.eGov.penndot.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.idealinksyst.pa.gov
sp.pwp.pa.gov
www.ecms.penndot.gov
idservicesadvsyst.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
www.bmswebservicessyst.penndot.gov
www.bmssyst.penndot.pa.gov
ppccsyst.penndot.gov
workzonecameras.penndot.gov
www.bmssyst.penndot.pa.gov
analytics-dev.penndot.pa.gov
www.dotdev34.state.pa.us
www.penndot.gov
sp.pwp.pa.gov
ESECagSANCertSyst.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
path.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
004uatbiwebmc.penndot.gov
www.ecmssyst.penndot.gov
www.eGovsyst.penndot.pa.gov
ppccsyst.penndot.gov
www.eGovsyst.penndot.pa.gov
004uatciswebmc.penndot.gov
www.idealinksyst.pa.gov
mobilenprd.penndot.gov
gis.penndot.gov
www.dot4E.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.gov
ESECagSANCertProd.dot.pa.gov
sqldldbcluster.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
www.idealinksyst.pa.gov
www.dot16.pa.gov
004UATCISWEBMC.penndot.gov
www.idealinksyst.pa.gov
www.mpms.penndot.gov
004UATDLDB.penndot.gov
ESECagSANCertDev.dot.pa.gov
004UATBIWEB.penndot.gov
ESECagSANCertSyst.dot.pa.gov
004BIWEBMC.PENNDOT.GOV
www.systcrashinfo.penndot.gov

Certificate

The complete raw certificate details for cisreports.penndot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iYDb467HQlYdNbB/SBK
Ol4sjtPTbLKV7O6BH5XCu3oCD1hWi+dMj0Y6J+l0hYEfzZq+GBa9bJQWgy/0t1UK
qwmVXtd7uUtJLEYV5Hptd5gRXBUdEtXaAkk0vutKpLiuLIthcYhql+5IaigIDeZZ
sm+HWl8zREuHpAcd/MK+DJRpmLfBQyg4+1k3UQO0H0naKuKuJ4HuM+IEQQwuColc
oJSJ3tflpltL3t4axH03oR8idy9W8AfGStDzh2St4KNkYG8N2hIVMs2ANtgjjixK
+oUXhtOub9QCzHAk7FvJAqPfvecwvEjEkk6ezhADrE05Kr79eW+PKT1gltkFppp5
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116053971654370920273142982374161619354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 19:24:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-06 19:24:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cisreports.penndot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30063461698448735475512040251924871551961770203627804934815541891495704805456231604918244730433473841672148445935105424422841175689783565032914625182564890534006456566404674397664220602628973882887166575705120648641681121041876815754404509446963027741019263401243984544408841017315200644727327944982672877012582820435765337508305250798941571622799343453288852400517697061714409296300914644175399010141022685487545883766014720485010223517692446946836137329617270930776501948315427406945363179295392721080008724047279825294642450007769498116235085106990577022630275313228617061803163015412427046425651590885372010854689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f015ac352c45be2ecd457af03507a45b615f734e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisreports.penndot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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