BGcheck.dhhs.nv.gov

- State of Nevada, Health Division -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 1b:51:68:80:a8:e6:7d:3a:e9:58:55:5c:fa:1c:1b:df was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

State of Nevada, Health Division

Organization: State of Nevada, Health Division
Organization unit: Administration
Organization unit: Issued through State of Nevada, Health Division E-PKI Manager
Organization unit: SGC SSL
Address: 4150 Technology Way, Ste 101
Postal code: 89706
State / Province: NV
Locality: Carson City
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:51:68:80:a8:e6:7d:3a:e9:58:55:5c:fa:1c:1b:df
Serial Number (int): 36311851495809757176906197621356108767
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: dd:9a:85:ed:16:73:c6:37:36:17:80:09:bb:fb:d5:01:08:5e:80:3e
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): 15:06:5b:18:7d:52:55:d9:02:9a:6b:d0:e5:71:88:80:23:bf:a0:63
Fingerprint (sha256): c6:a6:a2:91:22:a0:65:dc:88:f3:81:19:73:1d:1f:1d:47:4a:72:74:c2:3d:a2:0f:1a:29:2e:d9:92:e5:8a:f5

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate BGcheck.dhhs.nv.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for BGcheck.dhhs.nv.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

BGcheck.dhhs.nv.gov
www.bgcheck.dhhs.nv.gov

Other certificates including the domain name nv.gov

(limited to 100 certificates)
13.distilcdn.com
*.ndep.nv.gov
imperva.com
apps.detr.nv.gov
securemail.nv.gov
san-b1.granicusgovaccess.net
gcbweb.nv.gov
dmv.nv.gov
ptboard.nv.gov
Wse2.its.nv.gov
agowa.ag.nv.gov
5706316634914816-fe1.pantheonsite.io
13.distilcdn.com
egrants.nv.gov
prod.22.slot.cdn.salesforce-communities.com
WebIZ.nv.gov
test.detr.nv.gov
col.housing.nv.gov
tls.automattic.com
dg-0072-d73c216.client-tls.adestra.com
mail.douglas.nv.gov
red.prod.secure.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
*.doc.nv.gov
nsla.nv.gov
nvsilverflumetest.nv.gov
www.stemhub.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
5706316634914816-fe1.pantheonsite.io
firefly.iarc.nv.gov
mail.douglas.nv.gov
nwvp.nv.gov
gcbger.nv.gov
search.usa.gov
*.dwss.nv.gov
parks.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
dhcfp.nv.gov
gaming.nv.gov
WebIZtrn.nv.gov
wse2.its.nv.gov
prod.22.slot.cdn.salesforce-communities.com
nevvoter.nv.gov
*.nvcourts.nv.gov
prod.22.slot.cdn.salesforce-communities.com
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
owinn.nv.gov
NVLIVE.dmv.nv.gov
izrecord.nv.gov
nsla.nv.gov
5706316634914816-fe1.pantheonsite.io
hybrid.nv.gov
5706316634914816-fe1.pantheonsite.io
access.detr.nv.gov
5706316634914816-fe1.pantheonsite.io
webconf.doe.nv.gov
*.ndep.nv.gov
5706316634914816-fe1.pantheonsite.io
dot.nv.gov
dcnr.nv.gov
5706316634914816-fe1.pantheonsite.io
vms.puchasing.nv.gov
5706316634914816-fe1.pantheonsite.io
vitals.nv.gov
autodiscover.dot.state.nv.us
Webiz.nv.gov
*.shpo.nv.gov
tls.automattic.com
mynpwr.nv.gov
5706316634914816-fe1.pantheonsite.io
dmvintrl.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
nwvp.nv.gov
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
di.nv.gov
*.shpo.nv.gov
*.ndep.nv.gov
mail1.iarc.nv.gov
ngma.bighorn.doe.nv.gov
nvsilverflumetest.nv.gov
nwvp.nv.gov
frontier.iarc.nv.gov
epayments.ndep.nv.gov
pasrr.medicaid.nv.gov
viewlv.its.nv.gov
di.nv.gov
prod.22.slot.cdn.salesforce-communities.com
gisappdev.dot.nv.gov
epayments.ndep.nv.gov
d2wse.its.nv.gov
npwr.nv.gov
egrants.nv.gov
dot.nv.gov
5706316634914816-fe1.pantheonsite.io

Certificate

The complete raw certificate details for BGcheck.dhhs.nv.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsR5wYDSwRbOp48y6hZ6
nhMLScXq9Yxv3dVXKWBSEtifTa83uBU+ZC+8sPvZEKahM3yhu9mNQQSejA6bfMpD
gvFhFRahCerjwLAJ3DoxQ1NWINC8zvwTWqQATpEDfGWaYanG7ZCEPEXczRykN2Eb
IeXT+d8Jz4dq/uBfcgitOHs2iL7f15GjP9ulpfWu3eDOHEbhNJSFheausocE7Z7J
lY/J8T/sRaIa93KBax8Ip56JDax0ijHC3o6YJaUAZLXwpL8SUyuz3fmrZxMv3ECx
YcUhXcYWli55leaodotYHdOz89ftOHc71EJUzmCqc6spw2ikxQe35CMvcaY5NT7H
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36311851495809757176906197621356108767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '89706'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4150 Technology Way, Ste 101'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Nevada, Health Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through State of Nevada, Health Division E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SGC SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BGcheck.dhhs.nv.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24082163677268025747624770100119559820025405101064068396085673277708523293458295961214031644338758631150012825438934860858565001816591131433226434419942202635823632090518382127720553724621130206473073478365928349359948106697798352526926526782619446850503898962327494387993289479116862380062125460338536450368493906776475890701382776991958828514227379025795696466578924156169984356230917285752069815371331241626451624418989316151110127160376612174260941707550814539764976070217445552978135831913503396806939148067819550716412498795581141925173568185245398733008198160363881881656272896751287421395930332004137339635473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd9a85ed1673c63736178009bbfbd501085e803e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BGcheck.dhhs.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgcheck.dhhs.nv.gov'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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