ask.fmcsa.dot.gov

- Senture, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:c4:63:6a:54:c7:31:3a:50:75:7b:fa:96:bd:fb:ca was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Senture, LLC

Organization: Senture, LLC
State / Province: Kentucky
Locality: London
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c4:63:6a:54:c7:31:3a:50:75:7b:fa:96:bd:fb:ca
Serial Number (int): 3678162558816195523154137372551936970
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 51:50:63:36:19:90:31:d6:b4:22:42:44:50:ad:80:76:77:c6:ab:a2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): bb:1d:ad:ab:f6:db:f6:93:d6:1d:7d:81:d9:aa:84:48:ab:64:f0:28
Fingerprint (sha256): 01:69:ca:b6:0a:47:33:6f:dc:bd:57:3b:7f:e2:30:9f:86:f3:27:59:b6:d0:18:fb:9c:67:35:6c:05:c8:cd:4c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ask.fmcsa.dot.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.fmcsa.dot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.fmcsa.dot.gov

Other certificates including the domain name dot.gov

(limited to 100 certificates)
www.psp.fmcsa.dot.gov
www.dot.gov
acquia-sites.com
*.phmsa.dot.gov
vsa.volpe.dot.gov
marad.dot.gov
acquia-sites.com
www.standards.its.dot.gov
origin-www-esv.nhtsa.dot.gov
*.volpe.dot.gov
faces.fta.dot.gov
1c3rs.rita.dot.gov
itsdpro.ornl.gov
facesuat.fta.dot.gov
its2010.ornl.gov
www.faa.gov
ftp.nhtsa.dot.gov
rsac.fra.dot.gov
fl17vgisweb.hfl17do1.wfl.fld.fhwa.dot.gov
marapps.dot.gov
ask.fmcsa.dot.gov
crashstats.nhtsa.dot.gov
TSMART.VOLPE.DOT.GOV
www.dot.gov
acquia-sites.com
mcmis.fmcsa.dot.gov
its2010.ornl.gov
safeconsole.volpe.dot.gov
nhtsa.dot.gov
acquia-sites.com
NHTHQNF5B-M.nhtsa.dot.gov
fhw2xavwmup02.dmz.fhwa.dot.gov
pmars.marad.dot.gov
acquia-sites.com
dotcmsreporting.dot.gov
oetcrt.dot.gov
itsassets.ornl.gov
acquia-sites.com
acquia-sites.com
safercar.gov
enepa.fhwa.dot.gov
rspcb.safety.fhwa.dot.gov
itsassets.ornl.gov
marapps.dot.gov
www-odi.nhtsa.dot.gov
PoolSFC.dot.gov
fhw1xavwmup01.dmz.fhwa.dot.gov
flh.fhwa.dot.gov
swim.volpe.dot.gov
Access.dot.gov
www.dot.gov
www-nass.nhtsa.dot.gov
itsassets.ornl.gov
ftp.nhtsa.dot.gov
its.dot.gov
ftajira.ad.dot.gov
sphome.volpe.dot.gov
crashstats.nhtsa.dot.gov
www.environment.fhwa.dot.gov
scm.nhtsa.dot.gov
www.faa.gov
www.dot.gov
test.cdlis.dot.gov
elmsstaging.dot.gov
eas.dot.gov
crashviewer.nhtsa.dot.gov
PoolSFC.dot.gov
eas.dot.gov
transportation.gov
safety.fhwa.dot.gov
nhthqnlas865.ad.dot.gov
nhthqnwas603.ad.dot.gov
sftp.phmsa.dot.gov
score.fmcsa.dot.gov
eas.dot.gov
origin-www-odi.nhtsa.dot.gov
www.npms.phmsa.dot.gov
slfts.fhwa.dot.gov
CSAM.DOT.GOV
email.dot.gov
itsdpro.ornl.gov
www.dot.gov
fhfl15gisweb.flhd.fhwa.dot.gov
*.phmsa.dot.gov
VOLPEPHONEMGR.VOLPE.DOT.GOV
mscs.marad.dot.gov
faces.fta.dot.gov
facesdev5.fta.dot.gov
dtrack2013.ornl.gov
sra.volpe.dot.gov
hostedsites.volpe.dot.gov
smtp10.dot.gov
*.infopave.fhwa.dot.gov
www.faa.gov
nhthqnwas813.ad.dot.gov
transitapp.ost.dot.gov
elmsstaging.dot.gov
acquia-sites.com
nhthqnlas803.ad.dot.gov
rspcb.safety.fhwa.dot.gov

Certificate

The complete raw certificate details for ask.fmcsa.dot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30XkgAXWeNCpURyza9qR
lalBH0iXVYFAekxB3IqFeNt9bxPHz6AW5UhMrICczmNTP+vhwIwQDwqSS4HJV42G
fP5YeRHc1t6acxDeMco9puPXpxr07kVNvtw9LKVZ6jKgjMFWeFzQijkrV8OP03/Y
Ok8231NJol5sA7c4rQzHRs+SmfhNvDUssLylA1nNd/vYmdZKs7B4anSuW8umHh/3
uWJylw3PZW5FktUiP1XfQOM5GJ14Qa+c5jx2kc+D8XvV+xYFOpEa0kC/bDlI15Ds
7nPAZ3d11vropuH/0mSGKyTPgTN7IUG/2i9XGfdDVKCLgYbJNa0I1ZiCT2KnLXaN
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3678162558816195523154137372551936970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Senture, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.fmcsa.dot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28185607322415969502984257300956320983021412268942447590237747262941297880278710922295228501336139239833134917148738113422450036523111370850489748358466989614528675560030603515466545421538147197718479327692757824764599065781312929685118835068229525117850469673099837427681960389884542676707318055835852983080026061973166228147415903220952818962706410322711952433000693884049168798451204266953498990184801582944674471236857935333663699932450395641083845286262464340274937725012727378936590755383617805269239971708546378606319952518695310466658108618276254344470548895003042011258766522700955329191831542279638764391779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51506336199031d6b422424450ad807677c6aba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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