sesami.texasattorneygeneral.gov

- Texas Office of the Attorney General -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d4:ee:7c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Texas Office of the Attorney General

Organization: Texas Office of the Attorney General
Organization unit: Child Support Division
State / Province: Texas
Locality: Austin
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d4:ee:7c
Serial Number (int): 1356131964
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: fd:4d:69:4a:b2:06:d8:1f:5f:e6:4f:ed:5f:54:8a:03:92:f0:7b:06
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 37:cb:66:a4:f1:98:e8:78:e1:92:b5:c9:23:fd:75:a3:37:aa:39:f4
Fingerprint (sha256): 68:88:0d:5b:b1:93:65:13:90:22:82:45:9a:27:c8:ac:70:ce:bb:8b:f4:84:f6:00:e2:fc:0b:c0:ec:ee:45:60

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sesami.texasattorneygeneral.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sesami.texasattorneygeneral.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sesami.texasattorneygeneral.gov

Other certificates including the domain name texasattorneygeneral.gov

(limited to 100 certificates)
txcses.texasattorneygeneral.gov
*.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
csinfo.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
events.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
*.texasattorneygeneral.gov
sys2.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
events.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
oag-arms2.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
airwatchcs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
kioskpromgmt.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
*.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
csvpn2.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
*.texasattorneygeneral.gov
texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov

Certificate

The complete raw certificate details for sesami.texasattorneygeneral.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIEUNTufDANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50
cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs
IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz
dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTA4MDQyMDQzMzFa
Fw0xNzA5MDExNTIxMDFaMIGoMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMx
DzANBgNVBAcTBkF1c3RpbjEtMCsGA1UEChMkVGV4YXMgT2ZmaWNlIG9mIHRoZSBB
dHRvcm5leSBHZW5lcmFsMR8wHQYDVQQLExZDaGlsZCBTdXBwb3J0IERpdmlzaW9u
MSgwJgYDVQQDEx9zZXNhbWkudGV4YXNhdHRvcm5leWdlbmVyYWwuZ292MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld5QbvlKjPP8bpDn5Uofmqgo+aJh
7So6bm/yl2nXQKYEul0r7VZdBuUJBb8vdEx+wd2NZrhUeYzb2SBXF9cmAI/oZ8mr
7gZZNiY1Tv9nDDxrgo2Xuxx3jJc9BetLt7oPEcEIrnGbcog8YOe/5le6TlOmFL3M
ITqelk8G2XM36Dg/lP+z/VlYNjigz/lU2oqHG5ucupUPhFf/4wtgrA4z2PD61O/T
l5VrDIjIf/kqDKlgeQow203V/223u3I1fSuDSuKB/VHqrPFtxfx5tg+2XxxsdFqB
sSb7ORD8G1uC42giP0un6J4gZE/LaEbaS0heIFEcPDopNEKkbKlheq3SRQIDAQAB
o4IBiTCCAYUwCwYDVR0PBAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMDMGA1Ud
HwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmww
SwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93
d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYI
KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChido
dHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwKgYDVR0RBCMw
IYIfc2VzYW1pLnRleGFzYXR0b3JuZXlnZW5lcmFsLmdvdjAfBgNVHSMEGDAWgBSC
onB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU/U1pSrIG2B9f5k/tX1SKA5Lw
ewYwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA0EfeoNINFOtPtfOMhc21
wVkaHfNAlquU6xVxqqeyvHGXIP+SX5va16nBzANnXkAk+RUqrYTA9JBc6T5FRxqC
nd24WIP0rySuLD/8js/PzEj9NQLVwIll2ScjxfELkOhEuSltS2NM5nVSSBCFewGt
6M8Vxui1yrG/9qm8Zn+D9NhJbFTWDcKD9MpxDYvExtCHYMY7QokSkaJa2aLHSy9g
iT760Z8eS6F+p3qIna26oZD7U13m6Efcd5Al+PrC61WGwcO8fKeju5EQJQg8J549
T9Sw0TkC1pflZS6+065oRD1xkjesVUtmdEhkcy54KrgeqyAS/1E93+4Tm5CEQ7Wi
XQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld5QbvlKjPP8bpDn5Uof
mqgo+aJh7So6bm/yl2nXQKYEul0r7VZdBuUJBb8vdEx+wd2NZrhUeYzb2SBXF9cm
AI/oZ8mr7gZZNiY1Tv9nDDxrgo2Xuxx3jJc9BetLt7oPEcEIrnGbcog8YOe/5le6
TlOmFL3MITqelk8G2XM36Dg/lP+z/VlYNjigz/lU2oqHG5ucupUPhFf/4wtgrA4z
2PD61O/Tl5VrDIjIf/kqDKlgeQow203V/223u3I1fSuDSuKB/VHqrPFtxfx5tg+2
XxxsdFqBsSb7ORD8G1uC42giP0un6J4gZE/LaEbaS0heIFEcPDopNEKkbKlheq3S
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356131964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-04 20:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 15:21:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Office of the Attorney General'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Child Support Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sesami.texasattorneygeneral.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18919134654533884837640593958575805059772522655259508962448486562152621847077598544767338648310338835619900928201620797310788642700389047195458595959824896881026520408097322579807326682394710092524055057266351518142325360917301699813695109937903992883012240493160034781720112622408538694834683270102622686297300252600493584630245324593541319613183244824105057287615244124687149438319074367202944377022571456630486701775211841266967412379649997492759255936459205143082620489804311658212317690924771954689819781394775274413838775120770984208102116021709919177485792697688546471931868525698418037496000862987171310457413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesami.texasattorneygeneral.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd4d694ab206d81f5fe64fed5f548a0392f07b06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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