stoadf.treasurer.mo.gov

- State of Missouri, Office of Administration -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 57:b5:28:d6:86:7d:ec:30:00:00:00:00:50:f8:05:69 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:b5:28:d6:86:7d:ec:30:00:00:00:00:50:f8:05:69
Serial Number (int): 116583469657516631270226177620081902953
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fe:1b:7a:85:fd:a3:71:77:6e:be:a6:54:0b:58:48:2f:86:72:9a:fc
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 13:30:14:19:5a:9b:59:b0:b7:4d:f0:d9:0b:71:da:9e:c3:81:bd:cb
Fingerprint (sha256): 00:d9:7b:93:17:4f:b8:6e:bc:2e:d0:2b:74:e8:51:c5:6d:d1:a6:a1:75:9a:e7:bb:3e:d5:6b:6d:85:c3:f3:7e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate stoadf.treasurer.mo.gov

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stoadf.treasurer.mo.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stoadf.treasurer.mo.gov
www.stoadf.treasurer.mo.gov
www.stowebmail.treasurer.mo.gov

Other certificates including the domain name mo.gov

(limited to 100 certificates)
apidata-dev.dese.mo.gov
renew.pr.mo.gov
mo.gov
Securemail.mo.gov
Mail.sos.mo.gov
www.mostops.ago.mo.gov
www.courts.mo.gov
imperva.com
momail.mo.gov
5685057352105984-fe4.pantheonsite.io
airwatch4.mo.gov
incapsula.com
stoadf.treasurer.mo.gov
5659822271758336-fe3.pantheonsite.io
webmail2.auditor.mo.gov
mail.senate.mo.gov
mdc5test.mdc.mo.gov
mo.gov
oscna0013.courts.mo.gov
5658638538506240-fe4.pantheonsite.io
achieve.escoffier.edu
www.training.oa.mo.gov
appadmin-dev.dese.mo.gov
on.mo.gov
5685057352105984-fe4.pantheonsite.io
mo.gov
MoLogin.mo.gov
s1.sos.mo.gov
pr.mo.gov
cbafs.mo.gov
media.senate.mo.gov
lists.mo.gov
securemail.mo.gov
mcs.modot.mo.gov
mail.house.mo.gov
www.mshp.dps.mo.gov
mo.gov
WWW.MO.GOV
mo.gov
imperva.com
www.mosac.mo.gov
publicdefender.mo.gov
imperva.com
imperva.com
nature.mdc.mo.gov
incapsula.com
imperva.com
mo.gov
incapsula.com
vpn.sos.mo.gov
vpn.psc.mo.gov
achieve.escoffier.edu
www.MissouriEmployer.dss.mo.gov
molisapitest.legislativeoversight.mo.gov
*.house.mo.gov
medesfdshprod.dss.mo.gov
lyncaccess.modot.mo.gov
5659822271758336-fe3.pantheonsite.io
moaccount.mo.gov
incapsula.com
connect.mdc.mo.gov
incapsula.com
5658638538506240-fe4.pantheonsite.io
mo2fss.mo.gov
5659822271758336-fe3.pantheonsite.io
myworkspace.mo.gov
moadfs.mo.gov
achieve.escoffier.edu
extra.mdc.mo.gov
imperva.com
mymdc.mo.gov
mo.gov
legislativeoversight.mo.gov
ucceegainws.state.mo.us
5685057352105984-fe4.pantheonsite.io
connector-c.mshp.dps.mo.gov
mophin1.dhss.mo.gov
cobra.mshp.dps.mo.gov
www3.modot.mo.gov
mosso.mo.gov
5659822271758336-fe3.pantheonsite.io
mymdc.mo.gov
uisidestest.labor.mo.gov
imperva.com
5658638538506240-fe4.pantheonsite.io
remoteaccess.sos.mo.gov
incapsula.com
machs.mo.gov
achieve.escoffier.edu
*.courts.mo.gov
incapsula.com
www.courts.mo.gov
Evetest.mo.gov
mail.senate.mo.gov
incapsula.com
achieve.escoffier.edu
Airwatch1.mo.gov
gisblue.mdc.mo.gov
mo.gov
imperva.com

Certificate

The complete raw certificate details for stoadf.treasurer.mo.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116583469657516631270226177620081902953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 19:55:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-19 20:25:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stoadf.treasurer.mo.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821442561921535754103978150506733819991586398776106040361021687572558814167914140733198949092604323973045640783595392083546820007793719507060804279136833048369145224311799712704268881822119124537927377111315322023179799412689795326449602014303362981096053942983909310266557736764810415801319799128744521297845183961832038164247839533255436033196026753546795279719427541493841646128883504200618098576077438299137621650718563459003654075434184879743448472879685585455097453175840736191151485846074002820928277479991092600842459127338097204954765763760146588059570013007033915236961815425105673148043817062573873840753123734770799642165187342402501016154649354512502801381395658308158065974592987512918595814102739591324873743314040424286155221502043838229626672126190203742375899934247760145744765102616104905611308620037661935997819926990740729344993005977222311021145977599761803600332471281084617635315261915754832719511979803301479307301341470489339841626802205118302234657593135549039425491143471842151906030051367114203473539842826063976326676738914901725314570887709904114345564979018657066118976073814935164639343486991193526120937123971611518780037013353381382687892280494471211469646900998383474018505156160797397352895274063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoadf.treasurer.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoadf.treasurer.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stowebmail.treasurer.mo.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe1b7a85fda371776ebea6540b58482f86729afc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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