ESECagSANCertProd.dot.pa.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3c:a6:ab:5e:77:5d:0f:5e:5a:a5:a4:c8:77:11:94:9c was issued on by Entrust, Inc..

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
Organization unit: Department of Transportation
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:a6:ab:5e:77:5d:0f:5e:5a:a5:a4:c8:77:11:94:9c
Serial Number (int): 80619076802042453383041932460913955996
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 4f:cd:e3:52:fb:8a:73:74:04:6d:b2:c2:08:4f:31:77:1c:56:29:55
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): dc:0d:01:39:6c:28:ba:eb:98:d6:01:85:86:07:0e:d1:ef:b1:fb:4a
Fingerprint (sha256): 48:f4:61:4d:8d:7b:78:53:a7:7d:c0:52:5b:e1:5e:ea:a8:d1:f9:aa:72:c2:7a:e0:76:dd:56:8c:f6:fc:c7:84

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ESECagSANCertProd.dot.pa.gov

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ESECagSANCertProd.dot.pa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ESECagSANCertProd.dot.pa.gov
www.ESECagSANCertProd.dot.pa.gov
idservices.penndot.gov
www.idservices.penndot.gov
esecrefapp1.penndot.gov
www.placard.penndot.gov
placard.penndot.gov
www.inspections.penndot.gov
inspections.penndot.gov
www.placarddr.penndot.gov
placarddr.penndot.gov
www.pdjfadminapp.penndot.gov
pdjfadminapp.penndot.gov
idservices.pa.gov
www.idservices.pa.gov
kees.pa.gov
www.kees.pa.gov
www.fa.penndot.gov
fa.penndot.gov
www.dealers.penndot.gov
dealers.penndot.gov
www.crashinfo.penndot.gov
crashinfo.penndot.gov
www.dotcrashinfo.pa.gov
dotcrashinfo.pa.gov
www.inspectionsdr.penndot.gov
inspectionsdr.penndot.gov
www.fadr.penndot.gov
fadr.penndot.gov
www.cfa.penndot.gov
cfa.penndot.gov
www.dlis.penndot.gov
dlis.penndot.gov
www.dotgrants.penndot.gov
dotgrants.penndot.gov
www.dotgrants.state.pa.us
dotgrants.state.pa.us
www.dot34.state.pa.us
dot34.state.pa.us
www.pamsstage.penndot.gov
pamsstage.penndot.gov
www.psaptc.pema.pa.gov
psaptc.pema.pa.gov
mvdls.penndot.gov
www.mvdls.penndot.gov
www.dealersdr.penndot.gov
dealersdr.penndot.gov
www.hub.business.pa.gov
hub.business.pa.gov
apras.penndot.gov
www.apras.penndot.gov
bams.penndot.gov
www.bams.penndot.gov
www.urms.penndot.gov
urms.penndot.gov
pay.penndot.gov
www.pay.penndot.gov
centric.pdot.state.pa.us
www.dotdmv10.state.pa.us
www.dot1.state.pa.us
www.dotcmv.pa.gov
dotcmv.pa.gov
www.dotimage.pa.gov
dotimage.pa.gov
www.psaps.pema.pa.gov
psaps.pema.pa.gov
www.ecamms.pa.gov
ecamms.pa.gov
mvdlsdr.penndot.gov
www.mvdlsdr.penndot.gov

Other certificates including the domain name pa.gov

(limited to 100 certificates)
www.penndotesafety.pa.gov
www.puc.state.pa.us
www.dotdom3.state.pa.us
www.uctax.beta.pa.gov
forms.dced.pa.gov
www.crashinfo.penndot.gov
forms.dced.pa.gov
www.snet.jnet.pa.gov
www.bpp.ob.pa.gov
ESECagSANCertProd.dot.pa.gov
www.swifpay.pa.gov
peuaa.SWIF.pa.gov
dliimagesua.pa.gov
pasmallbiz.dced.pa.gov
openscapewebconfw2.pa.gov
forms.dced.pa.gov
www.cfrs.pa.gov
padlsonline.pa.gov
www.ethics.pa.gov
PUC.eServices-DOT-CarrierID.pa.gov
www.oig.pa.gov
www.compas.dli.pa.gov
forms.dced.pa.gov
www.dlisecureweb.pa.gov
dsemms.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.lablicensure.health.pa.gov
portal.pccd.beta.pa.gov
sts.beta.pa.gov
www.notaryreg.pa.gov
www.scicoll.pa.gov
ws.jnet.beta.pa.gov
spapps.pa.gov
gis.penndot.gov
www.portalxl.jnet.pa.gov
www.jobgatewaytr.pa.gov
epics.beta.pa.gov
docs.dcnr.pa.gov
www.pawatersupplyservicearea.pa.gov
services.dcnr.uat.pa.gov
www.puc.state.pa.us
*.pa.gov
www.inet.jnet.pa.gov
SMProxySANCertPROD.dot.pa.gov
events.dcnr.pa.gov
forms.dced.pa.gov
www.PaFoodSafety.beta.pa.gov
www.employment.pa.gov
sais.health.pa.gov
mail01.pa.gov
www.uctax-reg.beta.pa.gov
*.openrecords.pa.gov
www.agtrans.pa.gov
www.idprovider.dev.pa.gov
telcosmftp.pa.gov
dynxrm.dev.pa.gov
www.dos.pa.gov
forms.dced.pa.gov
www.agtrans.state.pa.us
www.lcb.pa.gov
www.cupss.pa.gov
dev-bppcs.pd.pa.gov
www.campaignfinanceonline.beta.pa.gov
www.wmapi.trn.wm.pa.gov
mysite.pa.gov
www.agriculture.pa.gov
www.gis.dcnr.beta.state.pa.us
www.rbaprovider.pa.gov
fdcbids.dcnr.pa.gov
www.PAFoodSafety.pa.gov
dced.pa.gov
damageprevention.puc.pa.gov
www.wcais.pa.gov
www.penndotesafetyqat.pa.gov
*.cor.beta.pa.gov
greenport.dev.pa.gov
staffalert.pa.gov
SMProxySANCertProd.dot.pa.gov
www.pcssmuat.dot.pa.gov
www.boardofappeals.state.pa.us
mysites.pa.gov
www.pgc.pa.gov
www.erstest.health.pa.gov
www.mypdeapps.pa.gov
osfc.sfa.pa.gov
edwin.dcnr.pa.gov
forms.dced.pa.gov
www.iwacs.phmc.pa.gov
ESECSanCertProd128.dot.pa.gov
apps.pwp.pa.gov
www.dominoextsyst.pa.gov
sso.SWIF.pa.gov
boe.ebr.uat.pa.gov
dynxrm.pa.gov
www.corporations.pa.gov
www.pawatersupplyservicearea.pa.gov
goals.governor.pa.gov
ndxs-dev.dhs.pa.gov
www.dot16.pa.gov
mysites.pa.gov

Certificate

The complete raw certificate details for ESECagSANCertProd.dot.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGy5wCUwzLO8nRigd61K
7HHH2xIXQ1uGWwKpIeoK/h+5ZWLCdgmVeY22uavXL2oDzTqJKqsZtJqPsHcowbaJ
IDspyAS6gtrthMkkG87YJzsPbHDDiZNzNG2JtoDlZoGXdafNJkSPSf+i+HQEzaxr
rtdJvJv7hsYhIFzj4OhFh/E7Khvri2fiOOwwzfEXuxtk9DxKARIMare1kG/SwcJG
t4pT6QN6FLCMt0i58iWJECJDg2yR1Lo1aGoVjAxq8inumkPFnxyad0A54s8k9Skw
McM0a31XX4T83N4gaxzicfMQ7tj/MIVo8N9W2tENRCXGGso4nkpEe2rLNgwI2oEh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80619076802042453383041932460913955996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-09 16:19:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-28 16:19:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23786415919380850167083015695625875250659217349815863004112332241563140350971354812851000508377506513099454331658729294321038290835080219025107910331828350621420825029248208797107109011856467376501544901741566456737472247175230687180893812465330893858426692947593725953429281724297736004194773685490182209243775452125246693521539452507556357490394831410415715753825019231693129681208500816939616470003998462213413676610901838164647028977508658119253930479773056289099066855053286763461177323377059752722930006436381987357384151282436874302000050656527999967006669594760158244530140763684307567260616875419051199898031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fcde352fb8a7374046db2c2084f31771c562955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1579 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp1.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centric.pdot.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdmv10.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot1.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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