ecf-train.ilcb.uscourts.gov

- Administrative Office of the United States Courts -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 4b:8f:2a:3a:8b:87:b5:13:4e:36:0e:31:9e:c0:e8:c0 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Administrative Office of the United States Courts

Organization: Administrative Office of the United States Courts
Organization unit: ilcb
State / Province: District of Columbia
Locality: Washington
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:8f:2a:3a:8b:87:b5:13:4e:36:0e:31:9e:c0:e8:c0
Serial Number (int): 100435454634258426471426960593782892736
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): da:02:c5:94:47:6d:89:2a:b3:48:8b:b0:a8:a7:cb:28:ff:d9:06:d9
Fingerprint (sha256): 00:63:2c:16:56:2c:8f:31:6f:3e:2c:25:a5:04:c0:0e:33:7b:71:17:03:f6:18:65:52:05:b6:01:ff:f6:fd:70

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate ecf-train.ilcb.uscourts.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecf-train.ilcb.uscourts.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecf-train.ilcb.uscourts.gov

Other certificates including the domain name uscourts.gov

(limited to 100 certificates)
www.cacd.uscourts.gov
psds.uscourts.gov
ecf.pamb.uscourts.gov
ecf-test.sa8a.aotx.uscourts.gov
www.mdd.uscourts.gov
ecf.tc8d.aztc.uscourts.gov
ecf-train.gasb.uscourts.gov
ecf.cacb.uscourts.gov
ecf-test.ilcb.uscourts.gov
ecf-train.tnwb.uscourts.gov
ecf-test.lawb.uscourts.gov
ecf-test.wieb.uscourts.gov
ecf.jpml.uscourts.gov
ecf.kyed.uscourts.gov
ecf.sdd.uscourts.gov
ecf-test.wiwd.uscourts.gov
www.canp.uscourts.gov
www2.flsd.uscourts.gov
ecf.mssb.uscourts.gov
ecf-test.vtb.uscourts.gov
pacer-go.pacer.gov
ecf-train.ilcb.uscourts.gov
ecf.innb.uscourts.gov
ecf-train.alsd.uscourts.gov
www.stag.jdart-hst.uscourts.gov
jport-t.uscourts.gov
ecf.cand.uscourts.gov
ecf.cmlb.aocms.uscourts.gov
ecf-test.nyed.uscourts.gov
ecf.pv2a.aocms.uscourts.gov
jury.flsd.uscourts.gov
ecf-test.alnb.uscourts.gov
ecf.ca4.uscourts.gov
ecf.gamd.uscourts.gov
ecf-train.vawb.uscourts.gov
ecf-train.txwd.uscourts.gov
ecf.caed.uscourts.gov
ecf-test.vawb.uscourts.gov
static.txwd.uscourts.gov
ecf-train.nmib.uscourts.gov
ecf-test.insb.uscourts.gov
ecf.txnb.uscourts.gov
ecf-train.mieb.uscourts.gov
ecf.ilsd.uscourts.gov
ecf-test.nhd.uscourts.gov
ecf-train.wied.uscourts.gov
coop.pawd.uscourts.gov
ecf-test.laed.uscourts.gov
www.armfor.uscourts.gov
ecf-train.nmid.uscourts.gov
ecf-train.tnwd.uscourts.gov
ecf-test.tc2a.aztc.uscourts.gov
ecf-test.okeb.uscourts.gov
ecf-train.azd.uscourts.gov
ecf.cacb.uscourts.gov
ecf.gand.uscourts.gov
ecf.idd.uscourts.gov
ecf-train.wyb.uscourts.gov
ecf.meb.uscourts.gov
ecf-train.wied.uscourts.gov
ecf.meb.uscourts.gov
ecf.iasb.uscourts.gov
ecf-test.cacd.uscourts.gov
apps.flmd.uscourts.gov
ecf-test.mssd.uscourts.gov
ecf-test.wiwd.uscourts.gov
ecf.mdd.uscourts.gov
ecf.iasb.uscourts.gov
ecf.tc8a.aztc.uscourts.gov
ecf-test.cacb.uscourts.gov
ecf-test.gasd.uscourts.gov
www.vid.uscourts.gov
ecf-test.azb.uscourts.gov
ecf.flnb.uscourts.gov
ecf-train.paed.uscourts.gov
ecf-train.vawb.uscourts.gov
jport-e.uscourts.gov
ecf-test.cofc.uscourts.gov
www.waeb.uscourts.gov
ecf-train.miwb.uscourts.gov
ecf-train.wvnd.uscourts.gov
www.ndd.uscourts.gov
confreg.ce9.uscourts.gov
ecf-test.innb.uscourts.gov
ecf.ca11.uscourts.gov
ecf-train.idb.uscourts.gov
ecf-train.gasb.uscourts.gov
mail5.uscourts.gov
www.lb7.uscourts.gov
ecf-train.laed.uscourts.gov
ecf.kyed.uscourts.gov
www.scd.uscourts.gov
www.pacer.gov
search.usa.gov
ecf.dcd.uscourts.gov
ecf.njd.uscourts.gov
ecf-train.nhb.uscourts.gov
ecf-test.ncmb.uscourts.gov
ecf.cmxd.aocms.uscourts.gov
ecf-test.hid.uscourts.gov

Certificate

The complete raw certificate details for ecf-train.ilcb.uscourts.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCCB90666Yft0FznsuYD
2xSLoMqSuuRiBtBOSu0CqRDWFyWN3ICf2Anxm1ZrBWyzKA3KKGLqbRBdRO0teqin
Hc+C+AVKcNmqUtOP/2A/Ch8fGB30LKSaa6JX6nuKFywqjkDAZAlQlM6bPNzVdJyw
NdooD5QJ4LqQrbu1F+YPzsCE1uP4NTUK788v1JxcsuM3++tBOjpVqqnzH8IiL0bI
dx6JODV9Gxm8madO9ETQxChHbzsWcdhf1lXVMEKjUZPjzB37FeUEOHjcTlCh+ney
Xil8huQ7jjVkMD1rM2c7UzDo3Pg9F3qqC+xuGjodi13YQ5xOdb8cTDX4bJP2x4aC
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100435454634258426471426960593782892736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Administrative Office of the United States Courts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ilcb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ecf-train.ilcb.uscourts.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21729018588554104778746900161417653534241544402939793490531777939316973572343181290227482452422820770057113658290586560810880587457309273461175282968463711692556885373228897338791460819305813049135551262161247300759548332166786139294851843180108576443099768788417199852627722146889576781574444073941753298138677975631753892609464095070236558386580678748753136831345143369999748596069829809865319729553269095515288632431206451876793331066704306411793569911292652616661673738494319702011240282956015229974706845979783390025242128874944232047876327418294147414984072856072574036880335570973743776090797458532047492907637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecf-train.ilcb.uscourts.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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