OV SSL/TLS Certificate for sharedwork.dli.pa.gov Issued to Commonwealth of Pennsylvania

Certificate is witin its validity period

Issued by Entrust, Inc. (Entrust Certification Authority - L1K)

About the sharedwork.dli.pa.gov OV SSL/TLS Certificate

This certificate with serial number 03:d3:fb:09:63:32:cd:38:0e:c4:1d:01:8e:35:e3:5b for sharedwork.dli.pa.gov was issued on by Entrust, Inc..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for sharedwork.dli.pa.gov provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Entrust, Inc.

Organization: Entrust, Inc.
Organizational unit: See www.entrust.net/legal-terms
Organizational unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 03:d3:fb:09:63:32:cd:38:0e:c4:1d:01:8e:35:e3:5b
Serial Number (int): 5088350253070006828491361980251497307
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 3e:c1:92:9f:dd:8d:60:08:a8:a9:65:c5:5a:ca:d9:2d:26:c0:55:9b
Authority Key Identifier: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (SHA-1): e1:1d:a1:de:5f:d5:56:97:f3:e5:d1:46:5d:95:f3:13:e0:a9:6a:ec
Fingerprint (SHA-256): ac:1f:16:3a:9d:ea:b1:a7:0a:85:c8:af:59:89:96:19:f3:9f:47:25:7b:8a:ad:23:e5:a6:7b:cb:4a:6d:0d:18

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation Information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sharedwork.dli.pa.gov
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for sharedwork.dli.pa.gov

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for sharedwork.dli.pa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdt89SYcfhlTYkv8hqdB
QzsDZcKnyW5GKTJY5uXG9MbFGldgR8QqX1OMV4VWjoRU2F5gmb8Phhg7CZ6d2HJq
TjYlCn1xD3Het3Kt14Eq+64Hyrdu+ERCJi/rdBrJQYrBlA2w8yY9PBzyx4yXhXCp
UZY2/X/7rUi73+txK2ptXRNBMutlnObo+TzNkYNbkQlGEpkr7ahxrj9kmBtNtj+0
U/49FL2VSjaPfHFrKquPCcbTp7bl952f6h6J+V8oLVZTpPXNxcr7uulfhNlHFIeC
+IY+U6zrqgL8bn+Ld7vIsFgdtHEQ9S37j+pyj/PZkt30iPpp54zt4YtTVfY9Ns9p
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5088350253070006828491361980251497307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 11:43:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-18 11:43:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harrisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commonwealth of Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sharedwork.dli.pa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21947460382889850483989972185100156692671076108720580408195350513070774434804824559382387363920675370540469094091065324494049478020937854741402320504842269975561582552172809886821655954900003779208709919144592409284017418670755816481209582120394057231532210441218259783800519297924620181371128128630829358313818366400926976313176554202108524611044199139606757081159702318169289752104443262047634034136891661457802528678408278234889429092961145205159487426381685162745484860499643769380015929652780065816272141300489913543951264468049335076409360526330540976423994134343421957348199825342006259329042489601557726718253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ec1929fdd8d6008a8a965c55acad92d26c0559b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedwork.dli.pa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedwork.li-sec.state.pa.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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