www.ecmssyst.penndot.gov
- Commonwealth of Pennsylvania -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 14:c3:f8:b2:f2:7a:21:83:b2:a6:35:e0:dd:02:1a:f7 was issued on by Entrust, Inc..
With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Commonwealth of Pennsylvania
Organization:
Commonwealth of Pennsylvania
Organization unit: Department of Transportation
Organization unit: Department of Transportation
State / Province:
Pennsylvania
Locality: Harrisburg
Country: US
Locality: Harrisburg
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 14:c3:f8:b2:f2:7a:21:83:b2:a6:35:e0:dd:02:1a:f7Serial Number (int): 27602102018350261593205754128683375351
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 63:95:4a:45:1e:0c:19:1a:7d:1b:43:f0:ad:06:1e:5b:be:e1:56:d0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 75:27:3a:d1:9e:b1:d4:ed:90:eb:05:48:65:e6:c0:90:b8:ae:5f:09
Fingerprint (sha256): 49:bf:9e:ee:fe:07:db:48:3d:4c:2b:16:f2:31:89:17:8e:b4:dc:08:68:45:8f:bb:61:ff:c3:2e:24:bb:8c:50
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate www.ecmssyst.penndot.gov
34
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ecmssyst.penndot.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ecmssyst.penndot.gov
ecmssyst.penndot.gov
www.utilityrelocationsyst.penndot.gov
utilityrelocationsyst.penndot.gov
www.gradecrossingsyst.penndot.gov
gradecrossingsyst.penndot.gov
www.ecmsmarsyst.penndot.gov
ecmsmarsyst.penndot.gov
www.bmssyst.penndot.gov
bmssyst.penndot.gov
www.rassyst.penndot.gov
rassyst.penndot.gov
www.hbmssyst.penndot.gov
hbmssyst.penndot.gov
www.sbesyst.penndot.gov
sbesyst.penndot.gov
www.jpa2syst.penndot.gov
jpa2syst.penndot.gov
www.mpmssyst.penndot.gov
mpmssyst.penndot.gov
www.tsamssyst.penndot.gov
tsamssyst.penndot.gov
www.epermittingtrn.penndot.gov
epermittingtrn.penndot.gov
www.rastrn.penndot.gov
rastrn.penndot.gov
www.hbmstrn.penndot.gov
hbmstrn.penndot.gov
www.ecmstrn.penndot.gov
ecmstrn.penndot.gov
www.bmsservicessyst.penndot.gov
bmsservicessyst.penndot.gov
www.epermittingsyst.penndot.gov
epermittingsyst.penndot.gov
ecmssyst.penndot.gov
www.utilityrelocationsyst.penndot.gov
utilityrelocationsyst.penndot.gov
www.gradecrossingsyst.penndot.gov
gradecrossingsyst.penndot.gov
www.ecmsmarsyst.penndot.gov
ecmsmarsyst.penndot.gov
www.bmssyst.penndot.gov
bmssyst.penndot.gov
www.rassyst.penndot.gov
rassyst.penndot.gov
www.hbmssyst.penndot.gov
hbmssyst.penndot.gov
www.sbesyst.penndot.gov
sbesyst.penndot.gov
www.jpa2syst.penndot.gov
jpa2syst.penndot.gov
www.mpmssyst.penndot.gov
mpmssyst.penndot.gov
www.tsamssyst.penndot.gov
tsamssyst.penndot.gov
www.epermittingtrn.penndot.gov
epermittingtrn.penndot.gov
www.rastrn.penndot.gov
rastrn.penndot.gov
www.hbmstrn.penndot.gov
hbmstrn.penndot.gov
www.ecmstrn.penndot.gov
ecmstrn.penndot.gov
www.bmsservicessyst.penndot.gov
bmsservicessyst.penndot.gov
www.epermittingsyst.penndot.gov
epermittingsyst.penndot.gov
Other certificates including the domain name penndot.gov
(limited to 100 certificates)
www.crashinfo.penndot.gov
CISREPORTS.PENNDOT.GOV
ESECagSANCertProd.dot.pa.gov
ESECagSANCertSyst.dot.pa.gov
gis.penndot.gov
www.ecssyst.penndot.gov
www.ecmssyst.penndot.gov
SMProxySANCertProd.dot.pa.gov
ESECSanCertProd128.dot.pa.gov
www.dot16.pa.gov
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.pa.gov
qars.penndot.gov
www.idealinksyst.pa.gov
www.mpmstest.penndot.gov
path.penndot.gov
dev.aem.penndot.gov
path.penndot.gov
gis.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertDev.dot.pa.gov
aprassyst.penndot.gov
www.dot16.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
cisreports.penndot.gov
apras.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
www.dottrn34.state.pa.us
ESECagSANCertSyst.dot.pa.gov
SMProxySANCertESECProd.dot.pa.gov
SMProxySANCertUAT.dot.pa.gov
www.ecms.penndot.gov
analytics.penndot.gov
SMProxySANCertUAT.dot.pa.gov
www.ecssyst.penndot.gov
idservicesadv.penndot.gov
a93c8e3041.nxcli.io
analytics-uat.penndot.gov
cisweb.penndot.gov
ESECagSANCertProd.dot.pa.gov
004uatcisweb.penndot.gov
www.eGov.penndot.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.idealinksyst.pa.gov
sp.pwp.pa.gov
www.ecms.penndot.gov
idservicesadvsyst.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
www.bmswebservicessyst.penndot.gov
www.bmssyst.penndot.pa.gov
ppccsyst.penndot.gov
workzonecameras.penndot.gov
www.bmssyst.penndot.pa.gov
analytics-dev.penndot.pa.gov
www.dotdev34.state.pa.us
www.penndot.gov
sp.pwp.pa.gov
ESECagSANCertSyst.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
path.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
004uatbiwebmc.penndot.gov
www.ecmssyst.penndot.gov
www.eGovsyst.penndot.pa.gov
ppccsyst.penndot.gov
www.eGovsyst.penndot.pa.gov
004uatciswebmc.penndot.gov
www.idealinksyst.pa.gov
mobilenprd.penndot.gov
gis.penndot.gov
www.dot4E.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.gov
ESECagSANCertProd.dot.pa.gov
sqldldbcluster.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
www.idealinksyst.pa.gov
www.dot16.pa.gov
004UATCISWEBMC.penndot.gov
www.idealinksyst.pa.gov
www.mpms.penndot.gov
004UATDLDB.penndot.gov
ESECagSANCertDev.dot.pa.gov
004UATBIWEB.penndot.gov
ESECagSANCertSyst.dot.pa.gov
004BIWEBMC.PENNDOT.GOV
www.systcrashinfo.penndot.gov
CISREPORTS.PENNDOT.GOV
ESECagSANCertProd.dot.pa.gov
ESECagSANCertSyst.dot.pa.gov
gis.penndot.gov
www.ecssyst.penndot.gov
www.ecmssyst.penndot.gov
SMProxySANCertProd.dot.pa.gov
ESECSanCertProd128.dot.pa.gov
www.dot16.pa.gov
www.dottrn34.state.pa.us
qars.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.pa.gov
qars.penndot.gov
www.idealinksyst.pa.gov
www.mpmstest.penndot.gov
path.penndot.gov
dev.aem.penndot.gov
path.penndot.gov
gis.penndot.gov
ESECagSANCertSyst.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertDev.dot.pa.gov
aprassyst.penndot.gov
www.dot16.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
cisreports.penndot.gov
apras.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
www.dottrn34.state.pa.us
ESECagSANCertSyst.dot.pa.gov
SMProxySANCertESECProd.dot.pa.gov
SMProxySANCertUAT.dot.pa.gov
www.ecms.penndot.gov
analytics.penndot.gov
SMProxySANCertUAT.dot.pa.gov
www.ecssyst.penndot.gov
idservicesadv.penndot.gov
a93c8e3041.nxcli.io
analytics-uat.penndot.gov
cisweb.penndot.gov
ESECagSANCertProd.dot.pa.gov
004uatcisweb.penndot.gov
www.eGov.penndot.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.idealinksyst.pa.gov
sp.pwp.pa.gov
www.ecms.penndot.gov
idservicesadvsyst.penndot.gov
analytics.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.dot16.pa.gov
ESECagSANCertProd.dot.pa.gov
www.bmswebservicessyst.penndot.gov
www.bmssyst.penndot.pa.gov
ppccsyst.penndot.gov
workzonecameras.penndot.gov
www.bmssyst.penndot.pa.gov
analytics-dev.penndot.pa.gov
www.dotdev34.state.pa.us
www.penndot.gov
sp.pwp.pa.gov
ESECagSANCertSyst.dot.pa.gov
ESECagSANCertProd.dot.pa.gov
path.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
004uatbiwebmc.penndot.gov
www.ecmssyst.penndot.gov
www.eGovsyst.penndot.pa.gov
ppccsyst.penndot.gov
www.eGovsyst.penndot.pa.gov
004uatciswebmc.penndot.gov
www.idealinksyst.pa.gov
mobilenprd.penndot.gov
gis.penndot.gov
www.dot4E.penndot.gov
ESECagSANCertSyst.dot.pa.gov
pathsyst.penndot.gov
ESECagSANCertProd.dot.pa.gov
sqldldbcluster.penndot.gov
ESECagSANCertProd.dot.pa.gov
www.sbe.penndot.pa.gov
ESECagSANCertProd.dot.pa.gov
gistest.penndot.gov
www.idealinksyst.pa.gov
www.dot16.pa.gov
004UATCISWEBMC.penndot.gov
www.idealinksyst.pa.gov
www.mpms.penndot.gov
004UATDLDB.penndot.gov
ESECagSANCertDev.dot.pa.gov
004UATBIWEB.penndot.gov
ESECagSANCertSyst.dot.pa.gov
004BIWEBMC.PENNDOT.GOV
www.systcrashinfo.penndot.gov
Certificate
The complete raw certificate details for www.ecmssyst.penndot.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKcjCCCVqgAwIBAgIQFMP4svJ6IYOypjXg3QIa9zANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MjA2MDcxNDAyNDRaFw0yMzA3MDYxNDAyNDRaMIGqMQswCQYDVQQGEwJVUzEVMBMG A1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpIYXJyaXNidXJnMSUwIwYDVQQK ExxDb21tb253ZWFsdGggb2YgUGVubnN5bHZhbmlhMSUwIwYDVQQLExxEZXBhcnRt ZW50IG9mIFRyYW5zcG9ydGF0aW9uMSEwHwYDVQQDExh3d3cuZWNtc3N5c3QucGVu bmRvdC5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEmo/IttY5 K60JLo/z+EGgpard77/xeT7NhdcCjpdn6MopxqyQwBmBU0o4pqSC6juGA/8Kzeqo jHV4T2hf3wl4Lf1tw7q8m86FM7qeV7jtUyxb091h6Xq9n/JHBSy06G65IbEhfTUQ QUqJ3A5jXt0iL11qwu6c2dkHex0aWHh6njmi+2AiXeK/iga0OSI8Jznz578EV0E7 XqZrciULDax58W/xJkcXrWkKvXGCmPZJaMUfbvreqj3JGToQSatUAT/oVz8msc6g nez71GSwE/B4L9S4wWonW5kdw58ReiWARBp+ob4HccPuyQavq88PttxdPDfDTqll nyzFy1pjxs+5AgMBAAGjggaAMIIGfDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRj lUpFHgwZGn0bQ/CtBh5bvuFW0DAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dg xgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVu dHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wx ay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRy dXN0Lm5ldC9sZXZlbDFrLmNybDCCA4sGA1UdEQSCA4IwggN+ghh3d3cuZWNtc3N5 c3QucGVubmRvdC5nb3aCFGVjbXNzeXN0LnBlbm5kb3QuZ292giV3d3cudXRpbGl0 eXJlbG9jYXRpb25zeXN0LnBlbm5kb3QuZ292giF1dGlsaXR5cmVsb2NhdGlvbnN5 c3QucGVubmRvdC5nb3aCIXd3dy5ncmFkZWNyb3NzaW5nc3lzdC5wZW5uZG90Lmdv doIdZ3JhZGVjcm9zc2luZ3N5c3QucGVubmRvdC5nb3aCG3d3dy5lY21zbWFyc3lz dC5wZW5uZG90LmdvdoIXZWNtc21hcnN5c3QucGVubmRvdC5nb3aCF3d3dy5ibXNz eXN0LnBlbm5kb3QuZ292ghNibXNzeXN0LnBlbm5kb3QuZ292ghd3d3cucmFzc3lz dC5wZW5uZG90LmdvdoITcmFzc3lzdC5wZW5uZG90LmdvdoIYd3d3LmhibXNzeXN0 LnBlbm5kb3QuZ292ghRoYm1zc3lzdC5wZW5uZG90LmdvdoIXd3d3LnNiZXN5c3Qu cGVubmRvdC5nb3aCE3NiZXN5c3QucGVubmRvdC5nb3aCGHd3dy5qcGEyc3lzdC5w ZW5uZG90LmdvdoIUanBhMnN5c3QucGVubmRvdC5nb3aCGHd3dy5tcG1zc3lzdC5w ZW5uZG90LmdvdoIUbXBtc3N5c3QucGVubmRvdC5nb3aCGXd3dy50c2Ftc3N5c3Qu cGVubmRvdC5nb3aCFXRzYW1zc3lzdC5wZW5uZG90LmdvdoIed3d3LmVwZXJtaXR0 aW5ndHJuLnBlbm5kb3QuZ292ghplcGVybWl0dGluZ3Rybi5wZW5uZG90LmdvdoIW d3d3LnJhc3Rybi5wZW5uZG90LmdvdoIScmFzdHJuLnBlbm5kb3QuZ292ghd3d3cu aGJtc3Rybi5wZW5uZG90LmdvdoITaGJtc3Rybi5wZW5uZG90LmdvdoIXd3d3LmVj bXN0cm4ucGVubmRvdC5nb3aCE2VjbXN0cm4ucGVubmRvdC5nb3aCH3d3dy5ibXNz ZXJ2aWNlc3N5c3QucGVubmRvdC5nb3aCG2Jtc3NlcnZpY2Vzc3lzdC5wZW5uZG90 LmdvdoIfd3d3LmVwZXJtaXR0aW5nc3lzdC5wZW5uZG90LmdvdoIbZXBlcm1pdHRp bmdzeXN0LnBlbm5kb3QuZ292MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3BgpghkgBhvpsCgEFMCkwJwYI KwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIw ggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4 cCUIFy+jqh0HE9MMAAABgT55mH4AAAQDAEcwRQIgEgQwC9Hj1tZSwXqRbQk16OEf F+Hz8j6g/pYJIbQ4UeQCIQDL9UJTBT3hH+zuuvEzaiZrymqTZgbWtPt/ehIcPakJ JgB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABgT55mI4AAAQD AEcwRQIhAJ2Hp0alpBwcdKlCaKlhcpSL+eFcyVswhPuuD7NWHSF9AiA2V4INdMjI UU+7Q57jkaan/WoVR0NF1SV39g8Puoi2wAB3AK33vvp8/xDIi509nB4+GGq0Zyld z7EMJMqFhjTr3IKKAAABgT55mHMAAAQDAEgwRgIhAJwJW83t35IcSBA4UkAswFS7 U7OR7bYKrA3w/Yk6Cq4WAiEA9o7LOq4KyR805UqEFu5LpVkx4/WwlLk774+LlNpc uEUwDQYJKoZIhvcNAQELBQADggEBAEH3tHi7aqhdDU90dn6zCfsVYzqvhI33eV1C ABlmEV0qpLKB0ukW1cenrsiMsOkZ5IJBcAI0HGs50L2EcZthfeQnNLn1A3O6gGA1 bYb61sKC5Br8GhcGlnFRLlclRkQWYqmMWCsFb7jZICOYlbsQL5YyTVkgM91G1lzm HfbhqZsgN9fmK/chwzQ/7HF51Pivq2hTiu1xHi9+ncYP5PV9gMApVoK9GkXlpacu 1//H3n8Gms7vg2ovfBhNYTbtMP3vafPRRTL5aW6lAGR+yWxnGrY6F3ZJHTSW5VNO r6rOHpzzsvpfGzTIB+7unrvpymbO2E1GoqP3mJr7LDAwNFUlcxA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJqPyLbWOSutCS6P8/hB oKWq3e+/8Xk+zYXXAo6XZ+jKKcaskMAZgVNKOKakguo7hgP/Cs3qqIx1eE9oX98J eC39bcO6vJvOhTO6nle47VMsW9PdYel6vZ/yRwUstOhuuSGxIX01EEFKidwOY17d Ii9dasLunNnZB3sdGlh4ep45ovtgIl3iv4oGtDkiPCc58+e/BFdBO16ma3IlCw2s efFv8SZHF61pCr1xgpj2SWjFH2763qo9yRk6EEmrVAE/6Fc/JrHOoJ3s+9RksBPw eC/UuMFqJ1uZHcOfEXolgEQafqG+B3HD7skGr6vPD7bcXTw3w06pZZ8sxctaY8bP uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 27602102018350261593205754128683375351 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 14:02:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 14:02:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Transportation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ecmssyst.penndot.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16739673448947106964692450846796181580044633076645508364536855414034110389531951330999452852616079746838719032186297830651818805642555475726139172464712394941879003824270377775726043663131478830866312166351601893229980340070777676703844097954507862294835386938841813986695521227069301049650084878907028760167099784454925563670717513873802908194740277108259063645925470077196731578752962224090447135568806622587439354951075991967051500484665365288814584595871244613935050388468446717545676861779776187743443591635057242493894129646930750715402370494653088421531424188216461283686996628095373198839872194828707167653817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63954a451e0c191a7d1b43f0ad061e5bbee156d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (898 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utilityrelocationsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilityrelocationsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gradecrossingsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradecrossingsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecmsmarsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmsmarsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rassyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rassyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbesyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbesyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpa2syst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpa2syst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpmssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsamssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsamssyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epermittingtrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epermittingtrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rastrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rastrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmstrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmstrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecmstrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmstrn.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsservicessyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsservicessyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epermittingsyst.penndot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epermittingsyst.penndot.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001813e79987e000004030047304502201204300bd1e3d6d652c17a916d0935e8e11f17e1f3f23ea0fe960921b43851e4022100cbf54253053de11feceebaf1336a266bca6a936606d6b4fb7f7a121c3da90926007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001813e79988e00000403004730450221009d87a746a5a41c1c74a94268a96172948bf9e15cc95b3084fbae0fb3561d217d02203657820d74c8c8514fbb439ee391a6a7fd6a15474345d52577f60f0fba88b6c0007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001813e79987300000403004830460221009c095bcdeddf921c48103852402cc054bb53b391edb60aac0df0fd893a0aae16022100f68ecb3aae0ac91f34e54a8416ee4ba55931e3f5b094b93bef8f8b94da5cb845 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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