www.denvergov.org

Issued by Entrust Certification Authority - L1M

About this certificate


This digital certificate with serial number f5:f2:95:54:00:00:00:00:54:cc:4a:90 was issued on by Entrust, Inc. .

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

City and County of Denver

Company registration number: 01-01-1902
Organization: City and County of Denver
State / Province: Colorado
Locality: Denver
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
State / Province: Colorado
Locality: Denver
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): f5:f2:95:54:00:00:00:00:54:cc:4a:90
Serial Number (int): 76117092636708731868012104336
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: a7:50:9a:05:49:74:4c:ec:61:58:20:df:9d:09:b0:09:68:ab:96:a9
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): f5:53:6f:74:70:fb:5e:fd:b2:d5:3d:99:e2:2c:11:e3:36:9d:33:53
Fingerprint (sha256): 0b:46:00:99:ff:4d:3e:f2:17:9b:12:c0:6b:57:36:31:95:96:fc:ba:f6:38:d7:cd:4f:75:8d:d5:84:1a:74:ab

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for the current certificate on www.denvergov.org
21
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.denvergov.org
spowaqa.denvergov.org
qaauthor.denvergov.org
denvergov.org
devauthor.denvergov.org
author.denvergov.org
data.denvergov.org
qamysites.denvergov.org
spowa.denvergov.org
mysites.denvergov.org
qasecure-gov.denvergov.org
qasecure-sfty.denvergov.org
secure-gov.denvergov.org
payqa.denvergov.org
secure-sfty.denvergov.org
dev.denvergov.org
pay.denvergov.org
qa.denvergov.org
prod.denvergov.org
test.denvergov.org
api.denvergov.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIaTCCB1GgAwIBAgINAPXylVQAAAAAVMxKkDANBgkqhkiG9w0BAQsFADCBujEL MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1Nl ZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDE0 IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UE AxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0xNTEw MDgxOTAzMzZaFw0xNjA3MDExOTMzMzRaMIHSMQswCQYDVQQGEwJVUzERMA8GA1UE CBMIQ29sb3JhZG8xDzANBgNVBAcTBkRlbnZlcjETMBEGCysGAQQBgjc8AgEDEwJV UzEZMBcGCysGAQQBgjc8AgECEwhDb2xvcmFkbzEiMCAGA1UEChMZQ2l0eSBhbmQg Q291bnR5IG9mIERlbnZlcjEaMBgGA1UEDxMRR292ZXJubWVudCBFbnRpdHkxEzAR BgNVBAUTCjAxLTAxLTE5MDIxGjAYBgNVBAMTEXd3dy5kZW52ZXJnb3Yub3JnMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqsFmsWNWtJF1PCaYQzHIIl8I +ISfuQYOtVqPpybjUwyabThj4A+qJN2YzgOOfDdtezPbpzlQ4SYnowJ5lnq1SAGT 1JCysS2iNRHXMtgZrhk2GCWhHh79P5nuNMBZI2Unx7tE168tl6BmOTbQAZMAP1TG S9B1OGGSbtPJtS+46D42jjVeqCDYDjE4/qhXqlLR0FvMdXlNgv66pmm+N5r5ONRR zM3OaXO/y321pfzilsuk/JC55VMXhtriAjR9Eop5Tu8WfjPDGU0lQEetBSneCz1J m1gFZ8tvyt1lhXUzbEx8BID0c8QBfJVpuwnXaMmZXV5fqMmwfeO0Rd7papFAIlIv Btngs/JBzvief/ppCKUH/WoWenIwPOe92z9jgfIO4sCWTkIVjoYKn96bbi3FYl0Y 1Qzlqaxz+P7/SD7lJ8xcYU+fgOCkdSBz4lE/GVKrxdoU7F6u8CF+l/r5wcI3qppW 2y8IEFV8hKXUY4R6EgWocoP6VyKvQib1IwcX+t9NtMkF3EYQbhjp3beFxR7/mh+g x5Z8yd78rO+4BDvaU5L4NwRracj6U5B6sP/rZaQBRheJtrfRxrp31OOkHuHXwaSW a6HScA/hcxvLDG942xES3ItTBtkPdVpCm8OIcy/S8zwerVyatsEZjf+MRQAFAUPL KJgDAZ+2lGDZ/I1Wgn8CAwEAAaOCA1IwggNOMBMGCisGAQQB1nkCBAMBAf8EAgUA MIIB3AYDVR0RBIIB0zCCAc+CEXd3dy5kZW52ZXJnb3Yub3JnghVzcG93YXFhLmRl bnZlcmdvdi5vcmeCFnFhYXV0aG9yLmRlbnZlcmdvdi5vcmeCDWRlbnZlcmdvdi5v cmeCF2RldmF1dGhvci5kZW52ZXJnb3Yub3JnghRhdXRob3IuZGVudmVyZ292Lm9y Z4ISZGF0YS5kZW52ZXJnb3Yub3JnghdxYW15c2l0ZXMuZGVudmVyZ292Lm9yZ4IT c3Bvd2EuZGVudmVyZ292Lm9yZ4IVbXlzaXRlcy5kZW52ZXJnb3Yub3JnghpxYXNl Y3VyZS1nb3YuZGVudmVyZ292Lm9yZ4IbcWFzZWN1cmUtc2Z0eS5kZW52ZXJnb3Yu b3JnghhzZWN1cmUtZ292LmRlbnZlcmdvdi5vcmeCE3BheXFhLmRlbnZlcmdvdi5v cmeCGXNlY3VyZS1zZnR5LmRlbnZlcmdvdi5vcmeCEWRldi5kZW52ZXJnb3Yub3Jn ghFwYXkuZGVudmVyZ292Lm9yZ4IQcWEuZGVudmVyZ292Lm9yZ4IScHJvZC5kZW52 ZXJnb3Yub3JnghJ0ZXN0LmRlbnZlcmdvdi5vcmeCEWFwaS5kZW52ZXJnb3Yub3Jn MAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaAYI KwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5l dDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMW0tY2hhaW4y NTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQv bGV2ZWwxbS5jcmwwQQYDVR0gBDowODA2BgpghkgBhvpsCgECMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMB8GA1UdIwQYMBaAFMP30LUq MK2vDZEhcDlU3byJcMc6MB0GA1UdDgQWBBSnUJoFSXRM7GFYIN+dCbAJaKuWqTAJ BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBieDRSbdN7b1yNVcGzrOng8rK6 G0MjqGUUzLV1ZJqTQU9HxOTfXQBz9eO0OVli9mbsn4l8CbAikHlUlg9kL9NWYpWx RsToZm5Xvr292K3C8eMaS6Y6rCIQaSCmcB5s8luMzh2o26kkfGlzlp06O4Z6HgkK 88SrWxkSN5L7P5fzwYtNo/LoXUPkgh4U2sXvrYXcF0kuVt/OJao+ld+A1wRQBb1w 59uduOHDQT8Ama+gGLl7sNBChQJmbZ9avpXJTyRqZGKBcgANzpbBi+4MWxbM+mhw D6NiNNMXB8o7vhSSID5JabFWs842rZiXrd2njYMD34URpiBLMK+UAs4T67nq -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqsFmsWNWtJF1PCaYQzHI Il8I+ISfuQYOtVqPpybjUwyabThj4A+qJN2YzgOOfDdtezPbpzlQ4SYnowJ5lnq1 SAGT1JCysS2iNRHXMtgZrhk2GCWhHh79P5nuNMBZI2Unx7tE168tl6BmOTbQAZMA P1TGS9B1OGGSbtPJtS+46D42jjVeqCDYDjE4/qhXqlLR0FvMdXlNgv66pmm+N5r5 ONRRzM3OaXO/y321pfzilsuk/JC55VMXhtriAjR9Eop5Tu8WfjPDGU0lQEetBSne Cz1Jm1gFZ8tvyt1lhXUzbEx8BID0c8QBfJVpuwnXaMmZXV5fqMmwfeO0Rd7papFA IlIvBtngs/JBzvief/ppCKUH/WoWenIwPOe92z9jgfIO4sCWTkIVjoYKn96bbi3F Yl0Y1Qzlqaxz+P7/SD7lJ8xcYU+fgOCkdSBz4lE/GVKrxdoU7F6u8CF+l/r5wcI3 qppW2y8IEFV8hKXUY4R6EgWocoP6VyKvQib1IwcX+t9NtMkF3EYQbhjp3beFxR7/ mh+gx5Z8yd78rO+4BDvaU5L4NwRracj6U5B6sP/rZaQBRheJtrfRxrp31OOkHuHX waSWa6HScA/hcxvLDG942xES3ItTBtkPdVpCm8OIcy/S8zwerVyatsEZjf+MRQAF AUPLKJgDAZ+2lGDZ/I1Wgn8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 76117092636708731868012104336 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-08 19:03:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-01 19:33:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Denver' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City and County of Denver' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01-01-1902' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.denvergov.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696621553402455995963958275312736914449846648568466965404052712746102554215347520726748921294154540136621828074512095881426785168950937470771368608867493612062608190803158021562958075919635749050355592665873648907666443141901425168204337529561313779241968484285576348579496718439564549631802480108924889271004770870498259495166493626257591138000561503030186933555627598307887061777331514335853294137905754505456884441250882771023075228785499890902326772603132876905915291221795692028031286836445922481428415690235268723069475517890976181931840507111245965143033190843003051713272150063063525663703897229935937572385409457016990872710226739611238285362062313222417310605301575251801843347689742400662503265102567389545324999466501865570784361578953996938437338946908352224411075002521790990544030123614889460927420875726634080728411406548135263118839583908305584513994025118454179976135593885856225529337372165762968230380566054604181315636504972416652689003889227016257311536142256815938515047128338855336109169687034484907227599873989039955540191264592906049770708410922765207447805545524741216807412539235029209406483665786827331360774301351046672486282156698526986282925525623982258190467310603191091978553598261278798984479408767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spowaqa.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaauthor.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devauthor.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qamysites.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spowa.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysites.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasecure-gov.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasecure-sfty.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-gov.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payqa.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-sfty.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.denvergov.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.denvergov.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a7509a0549744cec615820df9d09b00968ab96a9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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