dmt.faa.gov

- Federal Aviation Administration -

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0a:bb:02:e1:59:67:54:49:e7:75:d4:6d:f7:5f:07:5e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Aviation Administration

Organization: Federal Aviation Administration
Organization unit: AJW-1B
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:bb:02:e1:59:67:54:49:e7:75:d4:6d:f7:5f:07:5e
Serial Number (int): 14263297889220027783985446574557693790
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:44:05:14:ab:d3:68:e5:d0:b9:a8:0f:d6:ac:c7:b1:27:1e:8c:63
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): b5:69:1e:a6:69:27:d8:97:3c:f5:66:e2:53:18:52:fb:1a:69:d7:40
Fingerprint (sha256): 00:49:b7:5f:fd:82:82:68:7b:27:a3:21:0d:61:df:fb:e5:b4:94:89:73:fb:ba:58:c1:28:4c:ae:38:55:78:c7

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate dmt.faa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmt.faa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dmt.faa.gov

Other certificates including the domain name faa.gov

(limited to 100 certificates)
efsas.avs.faa.gov
asi.1.faa.gov
dmt.faa.gov
*.cf-lab.faa.gov
bpmsoa-test.faa.gov
www.faa.gov
authtest.sm.faa.gov
serviceareaapps.faa.gov
fdc3dcpap854.fcs.faa.gov
ftb-test-fims-server.faa.gov
www.faa.gov
agcinsitetest.sm.faa.gov
ama400-pvs2.amc.faa.gov
medxpress.faa.gov
caeg.faa.gov
adsftp.faa.gov
www.faa.gov
arcsight.fcs.faa.gov
csimsuat2.csnet.faa.gov
e2-satotravel-signing.sm.faa.gov
serenacmtest.amc.faa.gov
csims2.csnet.faa.gov
mail.ems365.faa.gov
fist.faa.gov
falcon.faa.gov
asmfvasp02.amc.faa.gov
help.spas-uat.faa.gov
rbrt.avs.faa.gov
iactdcpvap148.ad.faa.gov
rbrt.avs.faa.gov
enroutesupport.faa.gov
fhissso.faa.gov
sdrs.faa.gov
isbp.faa.gov
ilmits.amc.faa.gov
cdmsuat1.sm.faa.gov
asapowa.ash.faa.gov
registry.faa.gov
dev-hotline.faa.gov
part16.airports.faa.gov
home.spasdev.faa.gov
nasea.faa.gov
viewer.tc.secure-ose.faa.gov
sua.faa.gov
registermyuas.faa.gov
vpntest.faa.gov
faa-exm-00.ad.faa.gov
FAA-BelarcDA.faa.gov
extranet.asias.faa.gov
soatest.smext.faa.gov
oaps.faa.gov
dev-www.faa.gov
askmeservices.avs.faa.gov
opt.faa.gov
blackboardtest.sm.faa.gov
wwwtest.faa.gov
wifi.amc.faa.gov
avssharepoint.faa.gov
wifi.amc.faa.gov
aidaptest.naimes.faa.gov
esc-dbprotect.amc.faa.gov
magr-tst.faa.gov
*.faa.gov
amcs-preprod.faa.gov
tfmlearning.faa.gov
av-info.faa.gov
ssm-dev.amc.faa.gov
tifpa-ws.faa.gov
notamsstage.aim.faa.gov
attivio.faa.gov
iasdex.faa.gov
tsd.fly.faa.gov
oaps.faa.gov
denodo-prod3.faa.gov
tmaster.falcon.faa.gov
uis.faa.gov
dgc.eim.faa.gov
blackboard.sm.faa.gov
tsscweb01-dr.tssc.faa.gov
webservices2012-test.avs.faa.gov
aps2.faa.gov
prd.faa.gov
ncr.voicemail.faa.gov
opt.faa.gov
itams.faa.gov
act2.faa.gov
jiratest.sm.faa.gov
avsmtdashboard.avs.faa.gov
www.faa.gov
enroutesupporttest.faa.gov
aviator.faa.gov
uas.npn.faa.gov
www.faa.gov
serenasmbtest.amc.faa.gov
cims.faa.gov
ioeaaa.faa.gov
fhisdevsso.faa.gov
eda.faa.gov
icamms.faa.gov
amcrelay2.faa.gov

Certificate

The complete raw certificate details for dmt.faa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d1GZ26RkWGNBjx4iS0M
AqmJkPgQ041YLgD0tDGe8/mHDm4Iaa7UJykTYvQ17Bx8XhIaniYZJFeMhCsdlTzM
xnJF9z0/1LBcLqSN/QPX/iAn4i7N6t8G5vPri3ZIOT7dYr57U51NewAi/MZNtrqF
0SBQn4JKHRQqNF+Pq2Lzd65leHde8toxGNzLKD61IdBq263bAAaRTUBOcAXgNXiS
CZHbqn3f441vJZLnsguyJmV5Az7uX3drCQHXcBIlFl5pl01tbZ0UaeeOJSeGuYry
qeeX0drRAN6Sduz9S8C9iEIP6Y2DUQ5B2YBfAWytZ1ljNUfrrlQWhQ3eTDsiwrQE
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14263297889220027783985446574557693790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AJW-1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmt.faa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28512733394390815793128484629451695454597630044447374309199887075554217426784458179534683775113588143118467977601379356297529767659235758776849915208063415655294682668791922865904144021116989622910451177596922347234234368421121117017038253265081807798730021639406811521439492929262073591853657104968494666674982030519329206458701614208867119630421464146611958686646521048043812599073745232084823568073305976452528908151904858664648321174387951435970708180779248923172818440645593214505384238280510372736769464111122697027134015504552460747964753405880276625526949079253802340765967554349646025191281329799043239642171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92440514abd368e5d0b9a80fd6acc7b1271e8c63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmt.faa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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