ESECagSANCertProd.dot.pa.gov

- Commonwealth of Pennsylvania -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 03:61:83:fc:e9:56:46:2e:6f:73:80:8e:1e:89:8c:ef was issued on by Entrust, Inc..

With 117 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Commonwealth of Pennsylvania

Organization: Commonwealth of Pennsylvania
State / Province: Pennsylvania
Locality: Harrisburg
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:61:83:fc:e9:56:46:2e:6f:73:80:8e:1e:89:8c:ef
Serial Number (int): 4494013816001964193212681283890154735
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4f:cd:e3:52:fb:8a:73:74:04:6d:b2:c2:08:4f:31:77:1c:56:29:55
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 57:d9:3d:88:74:27:d0:bb:85:57:5c:e3:15:c8:48:29:99:7c:1c:37
Fingerprint (sha256): 6e:c2:7f:27:06:2c:bc:d1:b0:c7:e7:d1:67:43:ad:3a:69:db:3d:2c:df:d6:83:31:a7:8e:9c:57:69:2e:9f:ff

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ESECagSANCertProd.dot.pa.gov

117

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ESECagSANCertProd.dot.pa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ESECagSANCertProd.dot.pa.gov
www.ESECagSANCertProd.dot.pa.gov
idservices.penndot.gov
www.idservices.penndot.gov
esecrefapp1.penndot.gov
www.placard.penndot.gov
placard.penndot.gov
www.inspections.penndot.gov
inspections.penndot.gov
www.placarddr.penndot.gov
placarddr.penndot.gov
www.pdjfadminapp.penndot.gov
pdjfadminapp.penndot.gov
idservices.pa.gov
www.idservices.pa.gov
kees.pa.gov
www.kees.pa.gov
www.fa.penndot.gov
fa.penndot.gov
www.dealers.penndot.gov
dealers.penndot.gov
www.crashinfo.penndot.gov
crashinfo.penndot.gov
www.dotcrashinfo.pa.gov
dotcrashinfo.pa.gov
www.inspectionsdr.penndot.gov
inspectionsdr.penndot.gov
www.fadr.penndot.gov
fadr.penndot.gov
www.cfa.penndot.gov
cfa.penndot.gov
www.dlis.penndot.gov
dlis.penndot.gov
www.dotgrants.penndot.gov
dotgrants.penndot.gov
www.dotgrants.state.pa.us
dotgrants.state.pa.us
www.dot34.state.pa.us
dot34.state.pa.us
www.pamsstage.penndot.gov
pamsstage.penndot.gov
www.psaptc.pema.pa.gov
psaptc.pema.pa.gov
mvdls.penndot.gov
www.mvdls.penndot.gov
www.dealersdr.penndot.gov
dealersdr.penndot.gov
www.hub.business.pa.gov
hub.business.pa.gov
apras.penndot.gov
www.apras.penndot.gov
bams.penndot.gov
www.bams.penndot.gov
www.urms.penndot.gov
urms.penndot.gov
pay.penndot.gov
www.pay.penndot.gov
centric.pdot.state.pa.us
www.dotdmv10.state.pa.us
www.dot1.state.pa.us
www.dotcmv.pa.gov
dotcmv.pa.gov
www.dotimage.pa.gov
dotimage.pa.gov
www.psaps.pema.pa.gov
psaps.pema.pa.gov
www.ecamms.pa.gov
ecamms.pa.gov
mvdlsdr.penndot.gov
www.mvdlsdr.penndot.gov
pa-copos.dced.pa.gov
www.pa-copos.dced.pa.gov
wap.dced.pa.gov
www.wap.dced.pa.gov
www.eprocurement.pa.gov
eprocurement.pa.gov
www.tes.penndot.gov
tes.penndot.gov
autotab9.penndot.gov
www.autotab9.penndot.gov
autotab.penndot.gov
www.autotab.penndot.gov
www.ecs9.penndot.gov
ecs9.penndot.gov
www.ecs.penndot.gov
ecs.penndot.gov
www.ecsexceptions9.penndot.gov
ecsexceptions9.penndot.gov
www.ecsexceptions.penndot.gov
ecsexceptions.penndot.gov
www.adoptahighway9.penndot.gov
adoptahighway9.penndot.gov
www.adoptahighway.penndot.gov
adoptahighway.penndot.gov
www.findmyride.penndot.pa.gov
findmyride.penndot.pa.gov
www.apply.findmyride.penndot.pa.gov
apply.findmyride.penndot.pa.gov
jacip.dot.pa.gov
www.segmentchange.penndot.pa.gov
segmentchange.penndot.pa.gov
www.astaportal.dot.pa.gov
astaportal.dot.pa.gov
www.centric.penndot.pa.gov
centric.penndot.pa.gov
www.fa.penndot.pa.gov
fa.penndot.pa.gov
www.pdcc.penndot.pa.gov
pdcc.penndot.pa.gov
www.dotgrants.penndot.pa.gov
dotgrants.penndot.pa.gov
crashinfo.penndot.pa.gov
www.crashinfo.penndot.pa.gov
www.placard.penndot.pa.gov
placard.penndot.pa.gov
www.jacip.penndot.pa.gov
jacip.penndot.pa.gov

Other certificates including the domain name pa.gov

(limited to 100 certificates)
www.penndotesafety.pa.gov
www.puc.state.pa.us
www.dotdom3.state.pa.us
www.uctax.beta.pa.gov
forms.dced.pa.gov
www.crashinfo.penndot.gov
forms.dced.pa.gov
www.snet.jnet.pa.gov
www.bpp.ob.pa.gov
ESECagSANCertProd.dot.pa.gov
www.swifpay.pa.gov
peuaa.SWIF.pa.gov
dliimagesua.pa.gov
pasmallbiz.dced.pa.gov
openscapewebconfw2.pa.gov
forms.dced.pa.gov
www.cfrs.pa.gov
padlsonline.pa.gov
www.ethics.pa.gov
PUC.eServices-DOT-CarrierID.pa.gov
www.oig.pa.gov
www.compas.dli.pa.gov
forms.dced.pa.gov
www.dlisecureweb.pa.gov
dsemms.pa.gov
ESECagSANCertSyst.dot.pa.gov
www.lablicensure.health.pa.gov
portal.pccd.beta.pa.gov
sts.beta.pa.gov
www.notaryreg.pa.gov
www.scicoll.pa.gov
ws.jnet.beta.pa.gov
spapps.pa.gov
gis.penndot.gov
www.portalxl.jnet.pa.gov
www.jobgatewaytr.pa.gov
epics.beta.pa.gov
docs.dcnr.pa.gov
www.pawatersupplyservicearea.pa.gov
services.dcnr.uat.pa.gov
www.puc.state.pa.us
*.pa.gov
www.inet.jnet.pa.gov
SMProxySANCertPROD.dot.pa.gov
events.dcnr.pa.gov
forms.dced.pa.gov
www.PaFoodSafety.beta.pa.gov
www.employment.pa.gov
sais.health.pa.gov
mail01.pa.gov
www.uctax-reg.beta.pa.gov
*.openrecords.pa.gov
www.agtrans.pa.gov
www.idprovider.dev.pa.gov
telcosmftp.pa.gov
dynxrm.dev.pa.gov
www.dos.pa.gov
forms.dced.pa.gov
www.agtrans.state.pa.us
www.lcb.pa.gov
www.cupss.pa.gov
dev-bppcs.pd.pa.gov
www.campaignfinanceonline.beta.pa.gov
www.wmapi.trn.wm.pa.gov
mysite.pa.gov
www.agriculture.pa.gov
www.gis.dcnr.beta.state.pa.us
www.rbaprovider.pa.gov
fdcbids.dcnr.pa.gov
www.PAFoodSafety.pa.gov
dced.pa.gov
damageprevention.puc.pa.gov
www.wcais.pa.gov
www.penndotesafetyqat.pa.gov
*.cor.beta.pa.gov
greenport.dev.pa.gov
staffalert.pa.gov
SMProxySANCertProd.dot.pa.gov
www.pcssmuat.dot.pa.gov
www.boardofappeals.state.pa.us
mysites.pa.gov
www.pgc.pa.gov
www.erstest.health.pa.gov
www.mypdeapps.pa.gov
osfc.sfa.pa.gov
edwin.dcnr.pa.gov
forms.dced.pa.gov
www.iwacs.phmc.pa.gov
ESECSanCertProd128.dot.pa.gov
apps.pwp.pa.gov
www.dominoextsyst.pa.gov
sso.SWIF.pa.gov
boe.ebr.uat.pa.gov
dynxrm.pa.gov
www.corporations.pa.gov
www.pawatersupplyservicearea.pa.gov
goals.governor.pa.gov
ndxs-dev.dhs.pa.gov
www.dot16.pa.gov
mysites.pa.gov

Certificate

The complete raw certificate details for ESECagSANCertProd.dot.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRZDCCEEygAwIBAgIQA2GD/OlWRi5vc4COHomM7zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAxMjQxMjQ3MjZaFw0yNTAyMjQxMjQ3MjVaMIGHMQswCQYDVQQGEwJVUzEVMBMG
A1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpIYXJyaXNidXJnMSUwIwYDVQQK
ExxDb21tb253ZWFsdGggb2YgUGVubnN5bHZhbmlhMSUwIwYDVQQDExxFU0VDYWdT
QU5DZXJ0UHJvZC5kb3QucGEuZ292MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvGy5wCUwzLO8nRigd61K7HHH2xIXQ1uGWwKpIeoK/h+5ZWLCdgmVeY22
uavXL2oDzTqJKqsZtJqPsHcowbaJIDspyAS6gtrthMkkG87YJzsPbHDDiZNzNG2J
toDlZoGXdafNJkSPSf+i+HQEzaxrrtdJvJv7hsYhIFzj4OhFh/E7Khvri2fiOOww
zfEXuxtk9DxKARIMare1kG/SwcJGt4pT6QN6FLCMt0i58iWJECJDg2yR1Lo1aGoV
jAxq8inumkPFnxyad0A54s8k9SkwMcM0a31XX4T83N4gaxzicfMQ7tj/MIVo8N9W
2tENRCXGGso4nkpEe2rLNgwI2oEhrwIDAQABo4INlTCCDZEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUT83jUvuKc3QEbbLCCE8xdxxWKVUwHwYDVR0jBBgwFoAUgqJw
dN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdo
dHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5l
bnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0
dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwggraBgNVHREEggrRMIIK
zYIcRVNFQ2FnU0FOQ2VydFByb2QuZG90LnBhLmdvdoIgd3d3LkVTRUNhZ1NBTkNl
cnRQcm9kLmRvdC5wYS5nb3aCFmlkc2VydmljZXMucGVubmRvdC5nb3aCGnd3dy5p
ZHNlcnZpY2VzLnBlbm5kb3QuZ292ghdlc2VjcmVmYXBwMS5wZW5uZG90LmdvdoIX
d3d3LnBsYWNhcmQucGVubmRvdC5nb3aCE3BsYWNhcmQucGVubmRvdC5nb3aCG3d3
dy5pbnNwZWN0aW9ucy5wZW5uZG90LmdvdoIXaW5zcGVjdGlvbnMucGVubmRvdC5n
b3aCGXd3dy5wbGFjYXJkZHIucGVubmRvdC5nb3aCFXBsYWNhcmRkci5wZW5uZG90
LmdvdoIcd3d3LnBkamZhZG1pbmFwcC5wZW5uZG90LmdvdoIYcGRqZmFkbWluYXBw
LnBlbm5kb3QuZ292ghFpZHNlcnZpY2VzLnBhLmdvdoIVd3d3Lmlkc2VydmljZXMu
cGEuZ292ggtrZWVzLnBhLmdvdoIPd3d3LmtlZXMucGEuZ292ghJ3d3cuZmEucGVu
bmRvdC5nb3aCDmZhLnBlbm5kb3QuZ292ghd3d3cuZGVhbGVycy5wZW5uZG90Lmdv
doITZGVhbGVycy5wZW5uZG90LmdvdoIZd3d3LmNyYXNoaW5mby5wZW5uZG90Lmdv
doIVY3Jhc2hpbmZvLnBlbm5kb3QuZ292ghd3d3cuZG90Y3Jhc2hpbmZvLnBhLmdv
doITZG90Y3Jhc2hpbmZvLnBhLmdvdoIdd3d3Lmluc3BlY3Rpb25zZHIucGVubmRv
dC5nb3aCGWluc3BlY3Rpb25zZHIucGVubmRvdC5nb3aCFHd3dy5mYWRyLnBlbm5k
b3QuZ292ghBmYWRyLnBlbm5kb3QuZ292ghN3d3cuY2ZhLnBlbm5kb3QuZ292gg9j
ZmEucGVubmRvdC5nb3aCFHd3dy5kbGlzLnBlbm5kb3QuZ292ghBkbGlzLnBlbm5k
b3QuZ292ghl3d3cuZG90Z3JhbnRzLnBlbm5kb3QuZ292ghVkb3RncmFudHMucGVu
bmRvdC5nb3aCGXd3dy5kb3RncmFudHMuc3RhdGUucGEudXOCFWRvdGdyYW50cy5z
dGF0ZS5wYS51c4IVd3d3LmRvdDM0LnN0YXRlLnBhLnVzghFkb3QzNC5zdGF0ZS5w
YS51c4IZd3d3LnBhbXNzdGFnZS5wZW5uZG90LmdvdoIVcGFtc3N0YWdlLnBlbm5k
b3QuZ292ghZ3d3cucHNhcHRjLnBlbWEucGEuZ292ghJwc2FwdGMucGVtYS5wYS5n
b3aCEW12ZGxzLnBlbm5kb3QuZ292ghV3d3cubXZkbHMucGVubmRvdC5nb3aCGXd3
dy5kZWFsZXJzZHIucGVubmRvdC5nb3aCFWRlYWxlcnNkci5wZW5uZG90LmdvdoIX
d3d3Lmh1Yi5idXNpbmVzcy5wYS5nb3aCE2h1Yi5idXNpbmVzcy5wYS5nb3aCEWFw
cmFzLnBlbm5kb3QuZ292ghV3d3cuYXByYXMucGVubmRvdC5nb3aCEGJhbXMucGVu
bmRvdC5nb3aCFHd3dy5iYW1zLnBlbm5kb3QuZ292ghR3d3cudXJtcy5wZW5uZG90
LmdvdoIQdXJtcy5wZW5uZG90LmdvdoIPcGF5LnBlbm5kb3QuZ292ghN3d3cucGF5
LnBlbm5kb3QuZ292ghhjZW50cmljLnBkb3Quc3RhdGUucGEudXOCGHd3dy5kb3Rk
bXYxMC5zdGF0ZS5wYS51c4IUd3d3LmRvdDEuc3RhdGUucGEudXOCEXd3dy5kb3Rj
bXYucGEuZ292gg1kb3RjbXYucGEuZ292ghN3d3cuZG90aW1hZ2UucGEuZ292gg9k
b3RpbWFnZS5wYS5nb3aCFXd3dy5wc2Fwcy5wZW1hLnBhLmdvdoIRcHNhcHMucGVt
YS5wYS5nb3aCEXd3dy5lY2FtbXMucGEuZ292gg1lY2FtbXMucGEuZ292ghNtdmRs
c2RyLnBlbm5kb3QuZ292ghd3d3cubXZkbHNkci5wZW5uZG90LmdvdoIUcGEtY29w
b3MuZGNlZC5wYS5nb3aCGHd3dy5wYS1jb3Bvcy5kY2VkLnBhLmdvdoIPd2FwLmRj
ZWQucGEuZ292ghN3d3cud2FwLmRjZWQucGEuZ292ghd3d3cuZXByb2N1cmVtZW50
LnBhLmdvdoITZXByb2N1cmVtZW50LnBhLmdvdoITd3d3LnRlcy5wZW5uZG90Lmdv
doIPdGVzLnBlbm5kb3QuZ292ghRhdXRvdGFiOS5wZW5uZG90LmdvdoIYd3d3LmF1
dG90YWI5LnBlbm5kb3QuZ292ghNhdXRvdGFiLnBlbm5kb3QuZ292ghd3d3cuYXV0
b3RhYi5wZW5uZG90LmdvdoIUd3d3LmVjczkucGVubmRvdC5nb3aCEGVjczkucGVu
bmRvdC5nb3aCE3d3dy5lY3MucGVubmRvdC5nb3aCD2Vjcy5wZW5uZG90LmdvdoIe
d3d3LmVjc2V4Y2VwdGlvbnM5LnBlbm5kb3QuZ292ghplY3NleGNlcHRpb25zOS5w
ZW5uZG90LmdvdoIdd3d3LmVjc2V4Y2VwdGlvbnMucGVubmRvdC5nb3aCGWVjc2V4
Y2VwdGlvbnMucGVubmRvdC5nb3aCHnd3dy5hZG9wdGFoaWdod2F5OS5wZW5uZG90
LmdvdoIaYWRvcHRhaGlnaHdheTkucGVubmRvdC5nb3aCHXd3dy5hZG9wdGFoaWdo
d2F5LnBlbm5kb3QuZ292ghlhZG9wdGFoaWdod2F5LnBlbm5kb3QuZ292gh13d3cu
ZmluZG15cmlkZS5wZW5uZG90LnBhLmdvdoIZZmluZG15cmlkZS5wZW5uZG90LnBh
LmdvdoIjd3d3LmFwcGx5LmZpbmRteXJpZGUucGVubmRvdC5wYS5nb3aCH2FwcGx5
LmZpbmRteXJpZGUucGVubmRvdC5wYS5nb3aCEGphY2lwLmRvdC5wYS5nb3aCIHd3
dy5zZWdtZW50Y2hhbmdlLnBlbm5kb3QucGEuZ292ghxzZWdtZW50Y2hhbmdlLnBl
bm5kb3QucGEuZ292ghl3d3cuYXN0YXBvcnRhbC5kb3QucGEuZ292ghVhc3RhcG9y
dGFsLmRvdC5wYS5nb3aCGnd3dy5jZW50cmljLnBlbm5kb3QucGEuZ292ghZjZW50
cmljLnBlbm5kb3QucGEuZ292ghV3d3cuZmEucGVubmRvdC5wYS5nb3aCEWZhLnBl
bm5kb3QucGEuZ292ghd3d3cucGRjYy5wZW5uZG90LnBhLmdvdoITcGRjYy5wZW5u
ZG90LnBhLmdvdoIcd3d3LmRvdGdyYW50cy5wZW5uZG90LnBhLmdvdoIYZG90Z3Jh
bnRzLnBlbm5kb3QucGEuZ292ghhjcmFzaGluZm8ucGVubmRvdC5wYS5nb3aCHHd3
dy5jcmFzaGluZm8ucGVubmRvdC5wYS5nb3aCGnd3dy5wbGFjYXJkLnBlbm5kb3Qu
cGEuZ292ghZwbGFjYXJkLnBlbm5kb3QucGEuZ292ghh3d3cuamFjaXAucGVubmRv
dC5wYS5nb3aCFGphY2lwLnBlbm5kb3QucGEuZ292MA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAIBgZngQwB
AgIwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AObSMWNAd4zBEEEG13G5zsHS
QPaWhIb7uocyHf0eN45QAAABjTuC1OYAAAQDAEcwRQIhALGpF3aS9IbykVWNJzVd
AKtgZlMybfPj1gSTaH3bwWthAiAziFY2DbPVkdJGmLVMMRyq9D9hAh4At6tt78gp
NPxnGAB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjTuC1RQA
AAQDAEcwRQIhANDUmNcVLzS3AT3yqiT1NiusEu6vPWe9QbwjLFjcsSiDAiAD3WKg
ozKDHRvTI6s0xtgB1cXhyO06IU/AXOP5H/lwkQB2AE51oydcmhDDOFts1N8/Uusd
8OCOG41pwLH6ZLFimjnfAAABjTuC1UUAAAQDAEcwRQIgGs3Lsy7TEAiZmsmqXhUw
xuFxomQ4eAfZLY3pY39kwM4CIQCN5h4k0b1inWoO3uw/4qYjm+sfhYI7h7+rKpUr
GBOx+TANBgkqhkiG9w0BAQsFAAOCAQEAAujHqtriJYpQL58Lj9Ja6zQY64AdH+sq
F2mzUZ5ZitdAF34Yrql6+vlZInjPISk4I8dpe6vALIu4UYExL/RllNxDKOpU23jE
4SA/nk/3tQuMgDqL7UkFYEXBty3mCucBlpQA+pu6sM/dO0Ag2NLMH4R6jLNilKfH
Ak0DQnhtdJ4Q+WcqzIUGlZaTS3MBfreSAM0pxIHNIBS4LSNetEWQ/v1apwLnfpWx
66pV+QYQJ02GpnW4Rwma0nWGvDinbu55egKca7IIOGmcYsKMfwwFvoC4pbVUJou0
F1mpLZ7s9miNIu99o6qLzclBju2KsHYEkk8/fstTGgAI+rYciZR5/w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGy5wCUwzLO8nRigd61K
7HHH2xIXQ1uGWwKpIeoK/h+5ZWLCdgmVeY22uavXL2oDzTqJKqsZtJqPsHcowbaJ
IDspyAS6gtrthMkkG87YJzsPbHDDiZNzNG2JtoDlZoGXdafNJkSPSf+i+HQEzaxr
rtdJvJv7hsYhIFzj4OhFh/E7Khvri2fiOOwwzfEXuxtk9DxKARIMare1kG/SwcJG
t4pT6QN6FLCMt0i58iWJECJDg2yR1Lo1aGoVjAxq8inumkPFnxyad0A54s8k9Skw
McM0a31XX4T83N4gaxzicfMQ7tj/MIVo8N9W2tENRCXGGso4nkpEe2rLNgwI2oEh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4494013816001964193212681283890154735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 12:47:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-24 12:47:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23786415919380850167083015695625875250659217349815863004112332241563140350971354812851000508377506513099454331658729294321038290835080219025107910331828350621420825029248208797107109011856467376501544901741566456737472247175230687180893812465330893858426692947593725953429281724297736004194773685490182209243775452125246693521539452507556357490394831410415715753825019231693129681208500816939616470003998462213413676610901838164647028977508658119253930479773056289099066855053286763461177323377059752722930006436381987357384151282436874302000050656527999967006669594760158244530140763684307567260616875419051199898031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fcde352fb8a7374046db2c2084f31771c562955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ESECagSANCertProd.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esecrefapp1.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placard.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspections.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placarddr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdjfadminapp.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idservices.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kees.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealers.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crashinfo.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcrashinfo.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectionsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fadr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlis.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot34.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamsstage.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaptc.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdls.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealersdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.business.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apras.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bams.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urms.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centric.pdot.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotdmv10.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot1.state.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcmv.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotimage.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaps.pema.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecamms.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvdlsdr.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-copos.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-copos.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wap.dced.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eprocurement.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprocurement.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tes.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotab9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autotab9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotab.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autotab.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecs9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecs9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecs.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecs.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecsexceptions9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecsexceptions9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecsexceptions.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecsexceptions.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoptahighway9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptahighway9.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoptahighway.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptahighway.penndot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apply.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.findmyride.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacip.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segmentchange.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segmentchange.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astaportal.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astaportal.dot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centric.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centric.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fa.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdcc.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdcc.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotgrants.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotgrants.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crashinfo.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crashinfo.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placard.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placard.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacip.penndot.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacip.penndot.pa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002e8c7aadae2258a502f9f0b8fd25aeb3418eb801d1feb2a1769b3519e598ad740177e18aea97afaf9592278cf21293823c7697babc02c8bb85181312ff46594dc4328ea54db78c4e1203f9e4ff7b50b8c803a8bed49056045c1b72de60ae701969400fa9bbab0cfdd3b4020d8d2cc1f847a8cb36294a7c7024d0342786d749e10f9672acc85069596934b73017eb79200cd29c481cd2014b82d235eb44590fefd5aa702e77e95b1ebaa55f90610274d86a675b847099ad27586bc38a76eee797a029c6bb20838699c62c28c7f0c05be80b8a5b554268bb41759a92d9eecf6688d22ef7da3aa8bcdc9418eed8ab07604924f3f7ecb531a0008fab61c899479ff