ESECagSANCertSyst.dot.pa.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 37:20:4d:86:51:08:73:bc:00:00:00:00:50:fd:ba:ba was issued on by Entrust, Inc..

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:20:4d:86:51:08:73:bc:00:00:00:00:50:fd:ba:ba
Serial Number (int): 73275265654835249326085529139251362490
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 08:22:f0:07:ee:26:bd:2b:11:f4:ed:f2:e6:83:2c:fc:45:34:db:ae
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fa:aa:e8:f1:80:90:2e:96:04:99:b9:58:17:63:12:b3:1a:b0:22:af
Fingerprint (sha256): 47:e5:47:3b:a5:4d:c4:fa:f8:39:7f:66:f1:d5:31:3b:a1:16:02:2b:ee:b7:bb:26:bf:b0:a4:c4:b9:18:18:0a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ESECagSANCertSyst.dot.pa.gov

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ESECagSANCertSyst.dot.pa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ESECagSANCertSyst.dot.pa.gov
www.ESECagSANCertSyst.dot.pa.gov
idservicessyst.penndot.gov
www.idservicessyst.penndot.gov
esecrefapp1syst.penndot.gov
esecrefapp2syst.penndot.gov
placardsyst.penndot.gov
www.placarduat.penndot.gov
www.placardsyst.penndot.gov
placarduat.penndot.gov
inspectionssyst.penndot.gov
www.inspectionsuat.penndot.gov
www.inspectionssyst.penndot.gov
inspectionsuat.penndot.gov
www.fasyst.penndot.gov
fasyst.penndot.gov
www.keessyst.pa.gov
keessyst.pa.gov
www.keesuat.pa.gov
keesuat.pa.gov
www.dealerssyst.penndot.gov
dealerssyst.penndot.gov
www.dealersuat.penndot.gov
dealeruat.penndot.gov
www.fauat.penndot.gov
fauat.penndot.gov
www.pdjfsystadminapp.penndot.gov
pdjfsystadminapp.penndot.gov
www.pdjfuatadminapp.penndot.gov
pdjfuatadminapp.penndot.gov
idservicessyst.pa.gov
www.idservicessyst.pa.gov
www.keestrain.pa.gov
keestrain.pa.gov
urmssyst.penndot.gov
www.urmssyst.penndot.gov
urmsuat.penndot.gov
www.urmsuat.penndot.gov
www.systcrashinfo.penndot.gov
systcrashinfo.penndot.gov
www.cfatest.penndot.gov
cfatest.penndot.gov
www.dotsystcrashinfo.pa.gov
dotsystcrashinfo.pa.gov
dlissyst.penndot.gov
www.dlissyst.penndot.gov
www.dlisuat.penndot.gov
dlisuat.penndot.gov
www.syst1.mvdls.penndot.gov
syst1.mvdls.penndot.gov
www.syst2.mvdls.penndot.gov
syst2.mvdls.penndot.gov
www.uat1.mvdls.penndot.gov
uat1.mvdls.penndot.gov
www.uat2.mvdls.penndot.gov
uat2.mvdls.penndot.gov
www.perf.mvdls.penndot.gov
perf.mvdls.penndot.gov
www.syst3.mvdls.penndot.gov
syst3.mvdls.penndot.gov
www.trn.mvdls.penndot.gov
trn.mvdls.penndot.gov
www.stg.mvdls.penndot.gov
stg.mvdls.penndot.gov
www.dotgrantssyst.penndot.gov
dotgrantssyst.penndot.gov
aprassyst.penndot.gov
www.aprassyst.penndot.gov
www.syst4.mvdls.penndot.gov
syst4.mvdls.penndot.gov
www.uat3.mvdls.penndot.gov
uat3.mvdls.penndot.gov
www.uat4.mvdls.penndot.gov
uat4.mvdls.penndot.gov
www.pamsstagesyst.penndot.gov
pamsstagesyst.penndot.gov
www.dotdev34.state.pa.us
dotdev34.state.pa.us
www.psaptcsyst.pema.pa.gov
psaptcsyst.pema.pa.gov
www.dotgrantssbxp.penndot.gov
dotgrantssbxp.penndot.gov
www.urmstrn.penndot.gov
urmstrn.penndot.gov
hubuat.business.pa.gov
www.hubuat.business.pa.gov
www.bamssyst.penndot.gov
bamssyst.penndot.gov
www.hubsyst.business.pa.gov
hubsyst.business.pa.gov
www.syst5.mvdls.penndot.gov
syst5.mvdls.penndot.gov
www.uat5.mvdls.penndot.gov
uat5.mvldls.penndot.gov

Other certificates including the domain name pa.gov

(limited to 100 certificates)
www.penndotesafety.pa.gov
www.puc.state.pa.us
www.dotdom3.state.pa.us
www.uctax.beta.pa.gov
forms.dced.pa.gov
www.crashinfo.penndot.gov
forms.dced.pa.gov
www.snet.jnet.pa.gov
www.bpp.ob.pa.gov
ESECagSANCertProd.dot.pa.gov
www.swifpay.pa.gov
peuaa.SWIF.pa.gov
dliimagesua.pa.gov
pasmallbiz.dced.pa.gov
openscapewebconfw2.pa.gov
forms.dced.pa.gov
www.cfrs.pa.gov
padlsonline.pa.gov
www.ethics.pa.gov
PUC.eServices-DOT-CarrierID.pa.gov
www.oig.pa.gov
www.compas.dli.pa.gov
forms.dced.pa.gov
www.dlisecureweb.pa.gov
dsemms.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.lablicensure.health.pa.gov
portal.pccd.beta.pa.gov
sts.beta.pa.gov
www.notaryreg.pa.gov
www.scicoll.pa.gov
ws.jnet.beta.pa.gov
spapps.pa.gov
gis.penndot.gov
www.portalxl.jnet.pa.gov
www.jobgatewaytr.pa.gov
docs.dcnr.pa.gov
www.pawatersupplyservicearea.pa.gov
services.dcnr.uat.pa.gov
www.puc.state.pa.us
*.pa.gov
www.inet.jnet.pa.gov
SMProxySANCertPROD.dot.pa.gov
events.dcnr.pa.gov
forms.dced.pa.gov
www.PaFoodSafety.beta.pa.gov
www.employment.pa.gov
sais.health.pa.gov
mail01.pa.gov
www.uctax-reg.beta.pa.gov
*.openrecords.pa.gov
www.agtrans.pa.gov
www.idprovider.dev.pa.gov
telcosmftp.pa.gov
dynxrm.dev.pa.gov
www.dos.pa.gov
forms.dced.pa.gov
www.agtrans.state.pa.us
www.lcb.pa.gov
www.cupss.pa.gov
dev-bppcs.pd.pa.gov
www.campaignfinanceonline.beta.pa.gov
www.wmapi.trn.wm.pa.gov
mysite.pa.gov
www.agriculture.pa.gov
www.gis.dcnr.beta.state.pa.us
www.rbaprovider.pa.gov
fdcbids.dcnr.pa.gov
www.PAFoodSafety.pa.gov
dced.pa.gov
damageprevention.puc.pa.gov
www.wcais.pa.gov
www.penndotesafetyqat.pa.gov
*.cor.beta.pa.gov
greenport.dev.pa.gov
staffalert.pa.gov
SMProxySANCertProd.dot.pa.gov
www.pcssmuat.dot.pa.gov
www.boardofappeals.state.pa.us
mysites.pa.gov
www.pgc.pa.gov
www.erstest.health.pa.gov
www.mypdeapps.pa.gov
osfc.sfa.pa.gov
edwin.dcnr.pa.gov
forms.dced.pa.gov
www.iwacs.phmc.pa.gov
ESECSanCertProd128.dot.pa.gov
apps.pwp.pa.gov
www.dominoextsyst.pa.gov
sso.SWIF.pa.gov
boe.ebr.uat.pa.gov
dynxrm.pa.gov
www.corporations.pa.gov
www.pawatersupplyservicearea.pa.gov
goals.governor.pa.gov
ndxs-dev.dhs.pa.gov
www.dot16.pa.gov
mysites.pa.gov
forms.dced.pa.gov

Certificate

The complete raw certificate details for ESECagSANCertSyst.dot.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Rel9Akzv4gUHEKgIS5
/nXEJOPJuNKnoHfQLEIiIvQ+g+ERNKkRFzXk3SmyJ4Go8kiqgNzhrHiDtXluKJSr
9CN80etpn95SYFjNEPBQ8vV5QDQcnY6wLLgsxFCaHAlTWiROk4gH4sK9nXiAANN7
kDk0Kwk216aegrbvbdKcq2dfUfZV3+qi1uZXW9Xfq2PTzCURMscCW7ygu8j9tYfz
mH+b8QpgdeLS+DgHs9l5uZdNHC+kJhA+K7wOQz7wwyJoBYv0S5kJNSlmAX4NcuMQ
n3X7A0UqlxcMmAIwyyBotwAgsbodR+pqiPVwfJYDC267hBEVBIvJJ7TIC2hAlvCl
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73275265654835249326085529139251362490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 20:02:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-26 20:32:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28752928638740232280770131844796151512413844597199858041060763511807046864324521369739045868611299315636156720452671818649933663291961135740282672168890930935954137462789006185945842591719950864963043006111872481256991364885116039837041510262471167680579391643240250480105709863182899945417195641945100761062442452330042960654334111165312198274677990174436837638031945606141531262556924247016186236038755365729949549863863930132158183591583302393466822065510905995729209782746827649281229751115977762140114658880852083399661497820304285578406994158617155739940835503029370347743745261387662758124553721829215131706801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ESECagSANCertSyst.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservicessyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservicessyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp1syst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp2syst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placardsyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placarduat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placardsyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placarduat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keesuat.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keesuat.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealerssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealersuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealeruat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fauat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfsystadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfsystadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfuatadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfuatadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservicessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservicessyst.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keestrain.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keestrain.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmsuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.systcrashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systcrashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfatest.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfatest.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotsystcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotsystcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlissyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlissyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlisuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlisuat.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perf.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trn.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrantssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrantssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprassyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprassyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat4.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pamsstagesyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamsstagesyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdev34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdev34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaptcsyst.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaptcsyst.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrantssbxp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrantssbxp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urmstrn.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmstrn.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubuat.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubuat.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamssyst.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubsyst.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubsyst.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syst5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syst5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat5.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat5.mvldls.penndot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e20077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016fe8b44a7c0000040300483046022100b4bbd26f8d812766641885592cb893c199d08c0cc6410f2271e35af5898c87da022100a3ffe3416005327b78e78bc1b14e278bd01e5048eee4e8c02ec86b4437995ac30076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016fe8b44a8b0000040300473045022100ba08d644c14b5eda635c5a35dac6123190b9ed92f83c2f11358f7180de4f1efd022037b8911ad88ffac25b6eb720530f4fde28d31b0763c9d2c310ce603b145f076b0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016fe8b44aba0000040300473045022053726b27e30627bb0d854aaf30dade49f434751e79f74b6e8878cd66771cfd860221008edb975f56f7d0f1ab7640b06b356d03a8c2c84c28ee35f7f85fa407f98b869c007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fe8b44a94000004030048304602210081253aea9436967286a4211c2491dd80995b9b5f3b29e54341a8f938921211b7022100c7ae6aaa6d903280ab8605e03d0a36416a08a07d9d0f37fb57313c7f85a81e7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0822f007ee26bd2b11f4edf2e6832cfc4534dbae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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