nytd.dhr.alabama.gov

- State of Alabama -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 06:46:26:08:7f:23:9c:f2:cd:de:af:d4 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Alabama

Organization: State of Alabama
State / Province: AL
Locality: Montgomery
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 06:46:26:08:7f:23:9c:f2:cd:de:af:d4
Serial Number (int): 1941714472962734724424314836
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 9e:5a:87:50:74:1d:f3:55:be:5a:c4:37:36:de:8c:9e:22:d1:e0:f3
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 3d:d5:03:23:3d:e2:81:bc:f7:9f:4b:24:18:f0:f8:c8:6e:b2:71:93
Fingerprint (sha256): 00:d7:93:99:4a:bd:95:c1:c2:19:1a:ff:99:68:b4:77:5d:14:20:9e:8e:bd:10:cb:e5:76:a3:47:7b:d9:a4:0f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate nytd.dhr.alabama.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nytd.dhr.alabama.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nytd.dhr.alabama.gov

Other certificates including the domain name alabama.gov

(limited to 100 certificates)
www.boards.alabama.gov
vpn.alabama.gov
opspretrial.alabama.gov
hblb.alabama.gov
gims.dys.alabama.gov
*.adss.alabama.gov
mattest.alabama.gov
nytd.dhr.alabama.gov
alabama.gov
www.mh.alabama.gov
pdmreporting.alabama.gov
emits.ema.alabama.gov
aidcc.alabama.gov
purchasing.alabama.gov
www.ogb.state.al.us
*.alabama.gov
digital.archives.alabama.gov
GCLportal.medicaid.alabama.gov
afrwc.alabama.gov
www.stemcouncil.alabama.gov
agikace.alabama.gov
caresdev.alabama.gov
*.vote.alabama.gov
ctf.alabama.gov
aesbl.alabama.gov
www.oppal.alabama.gov
va.alabama.gov
ctf.alabama.gov
caresdev.alabama.gov
joblink.alabama.gov
grants.ema.alabama.gov
www.support.revenue.alabama.gov
acesp.alabama.gov
www.ahc.alabama.gov
kids.ema.alabama.gov
www.openmeetings.alabama.gov
aldoi.gov
*.mh.alabama.gov
Expedite.medicaid.alabama.gov
oitbilling.alabama.gov
dhr.alabama.gov
scrap.alabama.gov
GCLQAS.medicaid.alabama.gov
www.ago.state.al.us
one.alabama.gov
amhc.alabama.gov
imperva.com
alabamacares-uat-tra.alabama.gov
aboc.alabama.gov
www.revenue.alabama.gov
alabama.gov
socialwork.alabama.gov
agcb.alabama.gov
mydhropi.alabama.gov
grants.ema.alabama.gov
tls.automattic.com
nytd.dhr.alabama.gov
tls.automattic.com
alabama.gov
oitbilling.alabama.gov
governor.alabama.gov
*.vote.alabama.gov
bels.alabama.gov
www.background.alabama.gov
sonicwall.ogb.alabama.gov
ctf.alabama.gov
cybersecurity.alabama.gov
leasingmgt.alabama.gov
www.asbpa.alabama.gov
Cayosoft.Alabama.Gov
alabama.gov
alison.legislature.state.al.us
treasury.alabama.gov
rfp.alabama.gov
agi.alabama.gov
uiclaimstracker.labor.alabama.gov
giftstest.rehab.alabama.gov

medicaid.alabama.gov
alabama.gov
alabama.gov
cardservices.alabama.gov
alabama.gov
main1.isd.alabama.gov
mydhropi.alabama.gov
cp-test.alabama.gov
dhr.alabama.gov
mydhr.alabama.gov
Expedite.medicaid.alabama.gov
alabama.gov
alabama.gov
open.alabama.gov
*.dcnr.alabama.gov
verify.alabama.gov
maps.alabama.gov
www.openmeetings.alabama.gov
pgfb-app.alabama.gov
hosted.caps.center
precertethics.alabama.gov
alabama.gov

Certificate

The complete raw certificate details for nytd.dhr.alabama.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprdzcI7rXbCyRpl4JCfT
UyZuKTs/nDBbwEgrzY6/yMU0tcseBamVjoVRzP2tWgIQkIVScVddqvxDjKlj2WZw
Ola8PCAwJFCO98ZC6HRE0AtkW5fI4ZmoNSOG2H8oJVUnH8HDBvEqReuuAPRRW88F
w+pko93ySui5Qtxys34rN75QOgfdcWzuIkqDJ97nSUqAkz2dUEZZQKhWU5AJnwe/
LcnXJjP7o9PqrBV2GNhg8W/I/3juUl7eW9s7yp54ri0F/LKIe8c53LBBA4rdhJDK
zxrC8HhDu0BSoFcCK8LJFs4wdQucfKw0LDVPSYmuUv21rHIK2jz2PTflqNZ3YfV5
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1941714472962734724424314836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 15:56:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 19:20:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montgomery'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Alabama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nytd.dhr.alabama.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21046021652635339141133419127184147262605395866910419033880953946806812713917687809661794642659443031587648607662570071833343735751395997160489425136054653631903806994176254105348565898399766009038810510634922973166329665633261107954623027105892873409385234990174557169594831338514894513346732864938239335523302845985758851408175952416751969386085519430960415053795603656925904040934271975104453431822158104537673360911494310243705095136491438691000904605397811732897074134451668567007369109874967150414684077129670941166049586515891240813446867642961983513110946546171606913319199802057777246806328114838134945315089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nytd.dhr.alabama.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e5a8750741df355be5ac43736de8c9e22d1e0f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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