ESECagSANCertProd.dot.pa.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 68:72:61:f2:7c:fa:ea:f5:c7:e8:5c:22:63:02:9f:d4 was issued on by Entrust, Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:72:61:f2:7c:fa:ea:f5:c7:e8:5c:22:63:02:9f:d4
Serial Number (int): 138833620009130586036013831453971488724
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4f:cd:e3:52:fb:8a:73:74:04:6d:b2:c2:08:4f:31:77:1c:56:29:55
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fb:00:21:3d:7b:3a:f2:a9:1c:2f:7e:b5:c7:e1:68:27:08:71:ad:1b
Fingerprint (sha256): 28:da:c0:08:e0:b0:6b:69:4d:03:2f:74:2f:08:5f:0f:1e:8d:0a:8d:c5:c1:30:f6:cc:7a:01:01:ca:a5:44:d5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ESECagSANCertProd.dot.pa.gov

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ESECagSANCertProd.dot.pa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ESECagSANCertProd.dot.pa.gov
www.ESECagSANCertProd.dot.pa.gov
idservices.penndot.gov
www.idservices.penndot.gov
esecrefapp1.penndot.gov
www.placard.penndot.gov
placard.penndot.gov
www.inspections.penndot.gov
inspections.penndot.gov
www.placarddr.penndot.gov
placarddr.penndot.gov
www.pdjfadminapp.penndot.gov
pdjfadminapp.penndot.gov
idservices.pa.gov
www.idservices.pa.gov
kees.pa.gov
www.kees.pa.gov
www.fa.penndot.gov
fa.penndot.gov
www.dealers.penndot.gov
dealers.penndot.gov
www.crashinfo.penndot.gov
crashinfo.penndot.gov
www.dotcrashinfo.pa.gov
dotcrashinfo.pa.gov
www.inspectionsdr.penndot.gov
inspectionsdr.penndot.gov
www.fadr.penndot.gov
fadr.penndot.gov
www.cfa.penndot.gov
cfa.penndot.gov
www.dlis.penndot.gov
dlis.penndot.gov
www.dotgrants.penndot.gov
dotgrants.penndot.gov
www.dotgrants.state.pa.us
dotgrants.state.pa.us
www.dot34.state.pa.us
dot34.state.pa.us
www.pamsstage.penndot.gov
pamsstage.penndot.gov
www.psaptc.pema.pa.gov
psaptc.pema.pa.gov
mvdls.penndot.gov
www.mvdls.penndot.gov
www.dealersdr.penndot.gov
dealersdr.penndot.gov
www.hub.business.pa.gov
hub.business.pa.gov
apras.penndot.gov
www.apras.penndot.gov
bams.penndot.gov
www.bams.penndot.gov
www.urms.penndot.gov
urms.penndot.gov
pay.penndot.gov
www.pay.penndot.gov
centric.pdot.state.pa.us
www.dotdmv10.state.pa.us
www.dot1.state.pa.us
www.dotcmv.pa.gov
dotcmv.pa.gov
www.dotimage.pa.gov
dotimage.pa.gov
www.psaps.pema.pa.gov
psaps.pema.pa.gov
www.ecamms.pa.gov
ecamms.pa.gov
mvdlsdr.penndot.gov
www.mvdlsdr.penndot.gov
pa-copos.dced.pa.gov
www.pa-copos.dced.pa.gov
wap.dced.pa.gov
www.wap.dced.pa.gov
www.eprocurement.pa.gov
eprocurement.pa.gov
www.tes.penndot.gov
tes.penndot.gov
autotab9.penndot.gov
www.autotab9.penndot.gov
autotab.penndot.gov
www.autotab.penndot.gov
www.ecs9.penndot.gov
ecs9.penndot.gov
www.ecs.penndot.gov
ecs.penndot.gov
www.ecsexceptions9.penndot.gov
ecsexceptions9.penndot.gov
www.ecsexceptions.penndot.gov
ecsexceptions.penndot.gov
www.adoptahighway9.penndot.gov
adoptahighway9.penndot.gov
www.adoptahighway.penndot.gov
adoptahighway.penndot.gov
www.findmyride.penndot.pa.gov
findmyride.penndot.pa.gov
www.apply.findmyride.penndot.pa.gov
apply.findmyride.penndot.pa.gov
jacip.dot.pa.gov

Other certificates including the domain name pa.gov

(limited to 100 certificates)
www.penndotesafety.pa.gov
www.puc.state.pa.us
www.dotdom3.state.pa.us
www.uctax.beta.pa.gov
forms.dced.pa.gov
www.crashinfo.penndot.gov
forms.dced.pa.gov
www.snet.jnet.pa.gov
www.bpp.ob.pa.gov
ESECagSANCertProd.dot.pa.gov
www.swifpay.pa.gov
peuaa.SWIF.pa.gov
dliimagesua.pa.gov
pasmallbiz.dced.pa.gov
openscapewebconfw2.pa.gov
forms.dced.pa.gov
www.cfrs.pa.gov
padlsonline.pa.gov
www.ethics.pa.gov
PUC.eServices-DOT-CarrierID.pa.gov
www.oig.pa.gov
www.compas.dli.pa.gov
forms.dced.pa.gov
www.dlisecureweb.pa.gov
dsemms.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.lablicensure.health.pa.gov
portal.pccd.beta.pa.gov
sts.beta.pa.gov
www.notaryreg.pa.gov
www.scicoll.pa.gov
ws.jnet.beta.pa.gov
spapps.pa.gov
gis.penndot.gov
www.portalxl.jnet.pa.gov
www.jobgatewaytr.pa.gov
epics.beta.pa.gov
docs.dcnr.pa.gov
www.pawatersupplyservicearea.pa.gov
services.dcnr.uat.pa.gov
www.puc.state.pa.us
*.pa.gov
www.inet.jnet.pa.gov
SMProxySANCertPROD.dot.pa.gov
events.dcnr.pa.gov
forms.dced.pa.gov
www.PaFoodSafety.beta.pa.gov
www.employment.pa.gov
sais.health.pa.gov
mail01.pa.gov
www.uctax-reg.beta.pa.gov
*.openrecords.pa.gov
www.agtrans.pa.gov
www.idprovider.dev.pa.gov
telcosmftp.pa.gov
dynxrm.dev.pa.gov
www.dos.pa.gov
forms.dced.pa.gov
www.agtrans.state.pa.us
www.lcb.pa.gov
www.cupss.pa.gov
dev-bppcs.pd.pa.gov
www.campaignfinanceonline.beta.pa.gov
www.wmapi.trn.wm.pa.gov
mysite.pa.gov
www.agriculture.pa.gov
www.gis.dcnr.beta.state.pa.us
www.rbaprovider.pa.gov
fdcbids.dcnr.pa.gov
www.PAFoodSafety.pa.gov
dced.pa.gov
damageprevention.puc.pa.gov
www.wcais.pa.gov
www.penndotesafetyqat.pa.gov
*.cor.beta.pa.gov
greenport.dev.pa.gov
staffalert.pa.gov
SMProxySANCertProd.dot.pa.gov
www.pcssmuat.dot.pa.gov
www.boardofappeals.state.pa.us
mysites.pa.gov
www.pgc.pa.gov
www.erstest.health.pa.gov
www.mypdeapps.pa.gov
osfc.sfa.pa.gov
edwin.dcnr.pa.gov
forms.dced.pa.gov
www.iwacs.phmc.pa.gov
ESECSanCertProd128.dot.pa.gov
apps.pwp.pa.gov
www.dominoextsyst.pa.gov
sso.SWIF.pa.gov
boe.ebr.uat.pa.gov
dynxrm.pa.gov
www.corporations.pa.gov
www.pawatersupplyservicearea.pa.gov
goals.governor.pa.gov
ndxs-dev.dhs.pa.gov
www.dot16.pa.gov
mysites.pa.gov

Certificate

The complete raw certificate details for ESECagSANCertProd.dot.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGy5wCUwzLO8nRigd61K
7HHH2xIXQ1uGWwKpIeoK/h+5ZWLCdgmVeY22uavXL2oDzTqJKqsZtJqPsHcowbaJ
IDspyAS6gtrthMkkG87YJzsPbHDDiZNzNG2JtoDlZoGXdafNJkSPSf+i+HQEzaxr
rtdJvJv7hsYhIFzj4OhFh/E7Khvri2fiOOwwzfEXuxtk9DxKARIMare1kG/SwcJG
t4pT6QN6FLCMt0i58iWJECJDg2yR1Lo1aGoVjAxq8inumkPFnxyad0A54s8k9Skw
McM0a31XX4T83N4gaxzicfMQ7tj/MIVo8N9W2tENRCXGGso4nkpEe2rLNgwI2oEh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138833620009130586036013831453971488724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 12:59:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 12:59:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23786415919380850167083015695625875250659217349815863004112332241563140350971354812851000508377506513099454331658729294321038290835080219025107910331828350621420825029248208797107109011856467376501544901741566456737472247175230687180893812465330893858426692947593725953429281724297736004194773685490182209243775452125246693521539452507556357490394831410415715753825019231693129681208500816939616470003998462213413676610901838164647028977508658119253930479773056289099066855053286763461177323377059752722930006436381987357384151282436874302000050656527999967006669594760158244530140763684307567260616875419051199898031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fcde352fb8a7374046db2c2084f31771c562955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp1.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centric.pdot.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdmv10.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot1.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-copos.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-copos.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wap.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eprocurement.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprocurement.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tes.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotab9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autotab9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotab.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autotab.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecs9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecs9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecs.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecs.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecsexceptions9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecsexceptions9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecsexceptions.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecsexceptions.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoptahighway9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptahighway9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoptahighway.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptahighway.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apply.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacip.dot.pa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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