www3.stg-dps.texas.gov

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:cb:87:a5:cb:e3:a6:3c:29:18:0b:15:2f:72:ce:2d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www3.stg-dps.texas.gov

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:cb:87:a5:cb:e3:a6:3c:29:18:0b:15:2f:72:ce:2d
Serial Number (int): 15678295476960620617044003729672687149
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:7d:61:97:f6:1c:39:b6:e4:f8:fb:e6:9f:64:86:53:6b:a6:14:16
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ac:ab:09:d6:54:4b:45:7f:dc:9b:9f:a1:7b:8a:11:88:c5:c8:05:cc
Fingerprint (sha256): 01:85:96:2d:2a:49:c2:79:d7:af:5b:72:8a:74:03:a6:9b:ed:4b:84:f5:27:4a:7f:91:5c:c8:9c:eb:e4:4d:34

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www3.stg-dps.texas.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www3.stg-dps.texas.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www3.stg-dps.texas.gov
cdn.www3.stg-dps.texas.gov

Other certificates including the domain name texas.gov

(limited to 100 certificates)
ptad-lms.cpa.texas.gov
www.prb.texas.gov
iteamsdev.dshs.texas.gov
ersview.ers.texas.gov
ccharchive.dps.texas.gov
crcg.hhs.texas.gov
*.comptroller.texas.gov
www80.tceq.texas.gov
cud.texas.gov
owa.ers.texas.gov
app.tmd.texas.gov
imperva.com
iteamstraining.dshs.texas.gov
incapsula.com
childsupport.oag.texas.gov
incapsula.com
www.highq.com
www80.tceq.texas.gov
incapsula.com
www.license.state.tx.us
erpfindmo.cpa.texas.gov
incapsula.com
www.volunteer.tdem.texas.gov
terponline.tceq.texas.gov
2021annualreport.cprit.texas.gov
apps.hhs.texas.gov
tiscc.texas.gov
txsubscribealerts.dps.texas.gov
fs.txo365demo.dcs.dir.texas.gov
webmail.tesrs.texas.gov
*.dir.texas.gov
www.txvendordrug.com
opuc.texas.gov
fs.tdcj.texas.gov
tiden.tceq.texas.gov
apps.txrc.texas.gov
tgpc.texas.gov
www.taylorcounty.texas.gov
www3.stg-dps.texas.gov
faq.sll.texas.gov
slrmtraining.tsl.texas.gov
guides.sll.texas.gov
incapsula.com
tmd.texas.gov
*.oag.texas.gov
incapsula.com
filer.trs.texas.gov
benweb.ers.texas.gov
tdhca.texas.gov
ssb.texas.gov
www.directory.tsswcb.texas.gov
www.cprit.texas.gov
drawbridge.dev-dps.texas.gov
pdwdata.tceq.texas.gov
incapsula.com
incapsula.com
ssb.state.tx.us
ssl-wg1.revizesites.com
LyncAccess.tabc.texas.gov
grants.tsl.texas.gov
annualreportsui.dob.texas.gov
incapsula.com
erphcmdmo.cpa.texas.gov
cpahorizon.cpa.texas.gov
vlbms.glo.texas.gov
incapsula.com
tier2-ut.tceq.texas.gov
tcco.texas.gov
*.lbb.texas.gov
*.tdi.texas.gov
svcivr.ers.texas.gov
erpphireash.cpa.texas.gov
webapps2.rrc.texas.gov
www.ers.texas.gov
*.lrl.texas.gov
websupport.glo.texas.gov
vpn.cud.texas.gov
incapsula.com
*.gov.texas.gov
kmapi.rrc.texas.gov
www.help.tsswcb.texas.gov
stageapps2.portal.texas.gov
iwmsm.dps.texas.gov
sftp-edts-uat.hhs.texas.gov
www-test.tdlr.texas.gov
ccharchive.dps.texas.gov
contracts.hhs.texas.gov
imperva.com
incapsula.com
fs.tpwd.texas.gov
tea4svdogfish.tea.state.tx.us
veterinary.texas.gov
slrmtraining.tsl.texas.gov
enthcmonbtst.cpa.texas.gov
webmail.trs.texas.gov
www.highq.com
tea4avsmitty.tea.state.tx.us
ssl-wg1.revizesites.com
www.highq.com
www.drawbridge.dps.texas.gov

Certificate

The complete raw certificate details for www3.stg-dps.texas.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAYx+vmq+Nn/e9bgB+Hu
EB9xRUBXRBtggk7t/bmOX71bIRCNoVMNJZhKbK3Dkc3mjidXeGY9Jas5dKu0MYCq
0Np9FL9BYg+QCUFakekd+USujd31TxF3Y8iqZUIx8bSpGJXQGpcRsHeiR+m3CfWj
WN7z33eEE9BMcsOEeWNHoASu3UoKIEfoD6MkgMvcCK7wJLMYytYnXkJ6uT5DoDWL
0Ctup0N/Vec0AAKh2iFtwzR+t+4vGsnYX+UbnQj+gm7WCQMG7v1Yp7HCFVffnodt
RrcQF6nOYBzWSePiie+6HwHa/A90aDyQot+M5Y0/LwX6yEPhp1IWAFJT85Tnqx9B
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15678295476960620617044003729672687149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www3.stg-dps.texas.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20706136999081548468270192791073403833977469883262675463996123705562273080528673363142955278041828481271109590330991044666896420429720547441859633906892708773862065701959841854714733541675845676907660079937049538037287541281440722360385680482779190882697387538788804288212179405634136734505537223337905133716713503926833609260293007165901906066817557437300783749389884600536248262987076934703445901830208926607204633013426344682498246285109357696326681262257744295217813607399320689705980056307295817441134832979350387990399957025035618513915641297688269007786058398729144896391260756452576426825809375227207892287989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							497d6197f61c39b6e4f8fbe69f6486536ba61416
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.stg-dps.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www3.stg-dps.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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