sdrs.faa.gov

- Federal Aviation Administration -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:7d:a6:a5:8c:4b:69:9a:50:86:ef:31:f4:b6:63:9e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Aviation Administration

Organization: Federal Aviation Administration
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:7d:a6:a5:8c:4b:69:9a:50:86:ef:31:f4:b6:63:9e
Serial Number (int): 17932381048580850338763165644604466078
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:e5:72:a4:ed:44:da:4c:46:73:92:d7:a8:00:b8:89:40:60:1f:4d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 7a:6e:4e:57:09:82:77:a2:54:1a:e5:04:ea:76:45:7d:43:be:ea:ae
Fingerprint (sha256): 01:b9:be:b9:31:97:19:bb:87:71:02:38:6b:b4:03:a1:39:c7:4f:f1:7c:a4:09:7c:54:34:cf:17:9f:0f:3b:ec

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sdrs.faa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdrs.faa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdrs.faa.gov

Other certificates including the domain name faa.gov

(limited to 100 certificates)
efsas.avs.faa.gov
asi.1.faa.gov
dmt.faa.gov
*.cf-lab.faa.gov
bpmsoa-test.faa.gov
www.faa.gov
authtest.sm.faa.gov
serviceareaapps.faa.gov
fdc3dcpap854.fcs.faa.gov
ftb-test-fims-server.faa.gov
www.faa.gov
agcinsitetest.sm.faa.gov
ama400-pvs2.amc.faa.gov
medxpress.faa.gov
caeg.faa.gov
adsftp.faa.gov
www.faa.gov
arcsight.fcs.faa.gov
csimsuat2.csnet.faa.gov
e2-satotravel-signing.sm.faa.gov
serenacmtest.amc.faa.gov
csims2.csnet.faa.gov
mail.ems365.faa.gov
fist.faa.gov
falcon.faa.gov
asmfvasp02.amc.faa.gov
help.spas-uat.faa.gov
rbrt.avs.faa.gov
iactdcpvap148.ad.faa.gov
rbrt.avs.faa.gov
enroutesupport.faa.gov
fhissso.faa.gov
sdrs.faa.gov
isbp.faa.gov
ilmits.amc.faa.gov
cdmsuat1.sm.faa.gov
asapowa.ash.faa.gov
registry.faa.gov
dev-hotline.faa.gov
part16.airports.faa.gov
home.spasdev.faa.gov
nasea.faa.gov
viewer.tc.secure-ose.faa.gov
sua.faa.gov
registermyuas.faa.gov
vpntest.faa.gov
faa-exm-00.ad.faa.gov
FAA-BelarcDA.faa.gov
extranet.asias.faa.gov
soatest.smext.faa.gov
oaps.faa.gov
dev-www.faa.gov
askmeservices.avs.faa.gov
opt.faa.gov
blackboardtest.sm.faa.gov
wwwtest.faa.gov
wifi.amc.faa.gov
avssharepoint.faa.gov
wifi.amc.faa.gov
aidaptest.naimes.faa.gov
esc-dbprotect.amc.faa.gov
magr-tst.faa.gov
*.faa.gov
amcs-preprod.faa.gov
tfmlearning.faa.gov
av-info.faa.gov
ssm-dev.amc.faa.gov
tifpa-ws.faa.gov
notamsstage.aim.faa.gov
attivio.faa.gov
iasdex.faa.gov
tsd.fly.faa.gov
oaps.faa.gov
denodo-prod3.faa.gov
tmaster.falcon.faa.gov
uis.faa.gov
dgc.eim.faa.gov
blackboard.sm.faa.gov
tsscweb01-dr.tssc.faa.gov
webservices2012-test.avs.faa.gov
aps2.faa.gov
prd.faa.gov
ncr.voicemail.faa.gov
opt.faa.gov
itams.faa.gov
act2.faa.gov
jiratest.sm.faa.gov
avsmtdashboard.avs.faa.gov
www.faa.gov
enroutesupporttest.faa.gov
aviator.faa.gov
uas.npn.faa.gov
www.faa.gov
serenasmbtest.amc.faa.gov
cims.faa.gov
ioeaaa.faa.gov
fhisdevsso.faa.gov
eda.faa.gov
icamms.faa.gov
amcrelay2.faa.gov

Certificate

The complete raw certificate details for sdrs.faa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OD44eUWaHhZZgHw7+cs
D/897vpS0esbS2xFFTOu7sWMXjEJ8ua2fOo9i1GgTT5zI+s0C0UX/oDvYrI3iT4G
p+GkTkpOumll7NOwry3zZGLYB4tzqvZfKNlrVmf9qogS2g/oQ5EVzjpjA66XFmMj
9olEt/1q+ty+1NzafptycxdM8XqXm9JBRHqVEVeshC9rONTq4sfhjgfhewgicbdS
PMY4Lr1bmsqqZYZCqkl+QvgP3pBJb/c+ngf9BeKE0pNtMjUSNi7vUMPy4gtEDy5i
PlCjjH/tCo/fFdyAeyrPUpUSfve4jkxhCxPlKPzodgWmVeB8fbpaURy01mn4B2NO
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17932381048580850338763165644604466078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sdrs.faa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29398224677121310802933482452337006337109336266763046136231244144552721841428175035465297732471039051135570361787978651193304965534870971991005182237453650048234651787003202163716729777781085240248942002728170865476860059898150141993243717804627546272121194659998753276142212836761648704894355396982978292303277801642269010314634790396070318572670251057973328519126313629743745948106877652122850807762369613671476424627552707532953088938552760755532278220668589297760207494963890147994259680955842249007147296141910739688026984830384902389918079934536054432808290773690482982571112300579640841045192203752156279557693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ace572a4ed44da4c467392d7a800b88940601f4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdrs.faa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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