amp.cdc.gov

- Centers for Disease Control and Prevention -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9a:67:aa:cc:9c:82:47:89:00:00:00:00:50:e8:67:85 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centers for Disease Control and Prevention

Organization: Centers for Disease Control and Prevention
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9a:67:aa:cc:9c:82:47:89:00:00:00:00:50:e8:67:85
Serial Number (int): 205239382147921065070725822878921025413
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 45:b5:45:f3:24:b0:3e:14:7d:57:d3:af:ff:e3:2d:a8:19:c1:48:ea
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): db:53:95:eb:54:6b:e1:07:22:5b:e5:c6:24:23:fb:3b:a0:a1:68:a1
Fingerprint (sha256): 01:51:b9:62:db:bd:ef:06:7c:62:48:e3:8a:f7:11:93:82:ce:8b:c9:ad:03:f6:10:ab:be:20:a0:9a:db:db:5d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate amp.cdc.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amp.cdc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amp.cdc.gov

Other certificates including the domain name cdc.gov

(limited to 100 certificates)
prism-simulation.cdc.gov
simsrec.cdc.gov
phdirectory.cdc.gov
register.vams.cdc.gov
sharefile-atl-200.cdc.gov
hhs.test.esp.cdc.gov
VTrckS-GRANTEE.CDC.GOV
m.subscribe.cdc.gov
vetoviolence.cdc.gov
sftp.cdc.gov
performs-stage.cdc.gov
vtrcks-grantee2-s1.cdc.gov
npp.cdc.gov
assz-pdir-10.cdc.gov
citgotemp.cdc.gov
dcipher.cdc.gov
securid.cdc.gov
mail.cn.cdc.gov
amp.cdc.gov
dsdv-dtbe-zsql1.hce.cdc.gov
ehseleafio.cdc.gov
nccd.cdc.gov
citgo.cdc.gov
covidresp.cdc.gov
mugsicms.cdc.gov
www.cdc.gov
performs.cdc.gov
diabetespath2prevention.cdc.gov
tbcarefinderadmin-dev.cdc.gov
nppt.cdc.gov
calicinet-usa.cdc.gov
access-ipsas.cdc.gov
npptest.cdc.gov
CL21VCSE1.vtc.cdc.gov
vtrcks-provider-training.cdc.gov
npp.cdc.gov
search.usa.gov
Tools.cdc.gov
share.cdc.gov
www.cdc.gov
pids-stg.cdc.gov
AWWV-SAMS-IIM01.cdc.gov
Saml.cdc.gov
remoteiptv-piv.cdc.gov
cra.cdc.gov
Saml.cdc.gov
ImmunizationInvestmentsAPI.cdc.gov
ut-mmria.services.cdc.gov
webdev.philab.cdc.gov
NDMSIA.cdc.gov
rastauth2.cdc.gov
WIPZ-INFW-ASP.cdcres.org
mvpiccs.viz.cdc.gov
AWPV-SAMS-IIG03.cdc.gov
www.cdc.gov
AWPV-SAMS-IIG04.cdc.gov
ftp.cdc.gov
easauth2.cdc.gov
nhsn2.cdc.gov
prod.12.slot.cdn.salesforce-communities.com
nccd.cdc.gov
reach-dev.cdc.gov
az-mmria.services.cdc.gov
pulsenet-usa.cdc.gov
pids-phase9-stg.cdc.gov
www.cdc.gov
testinglocator.cdc.gov
www.cdc.gov
as2-stg.cdc.gov
lgconfweb-ext.cdc.gov
www.cdc.gov
ncird-ifund-api.cdc.gov
wphss.cdc.gov
IMATS.cdc.gov
remoteiptv-piv.cdc.gov
webmail.ug.cdc.gov
fsap.cdc.gov
lrnb.cdc.gov
ehdidash.cdc.gov
WIWV-SAMS-IWB01.cdc.gov
mobam.cdc.gov
webmail.rw.cdc.gov
mets.cdc.gov
SmartFindDEV.cdc.gov
Epix2.cdc.gov
acdc-cdm-splk-shdp0.cdc.gov
phinmqfstg.cdc.gov
xnc.cdc.gov
phinvads.cdc.gov
access-ipsas-piv.cdc.gov
webmail.vn.cdc.gov
cdcmail.cdc.gov
access.cdc.gov
AUPC-CLRPASS3.cdc.gov
API-WSMob.cdc.gov
access-piv.cdc.gov
www.cdc.gov
WIPZ-INFW-ASP.cdcres.org
CL21VCSE1.vtc.cdc.gov
prod.12.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for amp.cdc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZlIFsbN6tSzi9iB6kxk
kzRz58tkPb+vZxrCTD964pkE6WrmcyTXBl/7ckCNnmCL7bbdA6Rfug20C/b7yUps
gAMhXCkxhn7Og0AtlC8rbceBZanwidnQmSWJG9O+qsBZEIbaBFrEbVzObx9wrX7S
I37Pe5bND/CLVWwXJ3p0a6BogDZTzAQRnx1GRxrz/waEtKmHgWGXf3rl84Jbin4k
io8vDnjWu/8kjTa0+WmTInxRoJ7MAbvIm5EA2Nw5W0iGktR6pSZxeaRTJUJl/rIb
a56zy45R/wLfpX7ueW6cJga4VMdfNiOQdQVQrbQ3pE/M47DtZ60Gfv4cyHuJWAG7
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 205239382147921065070725822878921025413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 16:47:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 17:17:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centers for Disease Control and Prevention'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amp.cdc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24944532051189801660544291216334676538063487381182674415376475499248370925915244479559777349177901117687359852959126614513641780036827550120423468826299976589989192495879138953687535900787358354108296321503152164792566019987217079519378891295813488460186516341226055267952134060811916467655430154243969453014836351324302434965183093020349347537107346092975140207055772060622441010814186528305120412281821069631292047426503817016280697503675635333618261243888837491274714140756743712439073307324304597110075895872187274488623911619281772809266945399003442349221725244021301858950821043015328700400556100732482366847887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.cdc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45b545f324b03e147d57d3afffe32da819c148ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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