adoreapi.txdot.gov

- Texas Department of Transportation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:01:1e:e9:17:f1:4b:02:96:80:65:ad:f7:da:7d:27 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Texas Department of Transportation

Organization: Texas Department of Transportation
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:01:1e:e9:17:f1:4b:02:96:80:65:ad:f7:da:7d:27
Serial Number (int): 13298099194567529504012524095566150951
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:eb:83:2d:8d:fd:4a:46:1c:b5:e3:2c:a9:d3:20:16:19:19:a9:6b
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a6:70:e9:12:8f:c6:f5:71:c8:ba:fb:af:89:b3:34:9d:91:c3:cd:7c
Fingerprint (sha256): 02:18:68:e8:ab:df:60:df:ad:f2:4f:ca:94:61:13:d6:f1:4f:a9:5d:46:29:97:8f:0d:75:9d:70:1b:8a:57:72

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate adoreapi.txdot.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adoreapi.txdot.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adoreapi.txdot.gov

Other certificates including the domain name txdot.gov

(limited to 100 certificates)
sb20pca.txdot.gov
testporta.txdot.gov
adoreapi.txdot.gov
mppm.txdot.gov
edit.drivetexas.txdot.gov
testportal.txdot.gov
txrtn.txdot.gov
crisdev.dot.state.tx.us
po.txdotconnect.txdot.gov
mppm.txdot.gov
webex-sso.txdot.gov
arcgis.mppm.txdot.gov
www.dot.state.tx.us
crisuat.dot.state.tx.us
ftp.txdot.gov
testmap.drivetexas.txdot.gov
ADFS.TXDOT.GOV
jaspere2eext.txdotconnect.txdot.gov
externalusers.txdot.gov
publicdocs.txdot.gov
mycitrixsf.txdot.gov
edit.drivetexas.txdot.gov
apps.dot.state.tx.us
cgust.txdot.gov
cgwuat.txdot.gov
hr.txdot.gov
editmap2.drivetexas.txdot.gov
dev.txdotconnect.txdot.gov
cris.dot.state.tx.us
hcmust.txdot.gov
remote.txdot.gov
apps2.dot.state.tx.us
contractsinternal.txdot.gov
txdot4sverpweb1.txdot.gov
txdotconnect.txdot.gov
cris.dot.state.tx.us
its.txdot.gov
ecmmobile.txdot.gov
e2eext.txdotconnect.txdot.gov
ftp.txdot.gov
oc1.txdot.gov
www.txdot.gov
externalusers.txdot.gov
cris.dot.state.tx.us
uatext.txdotconnect.txdot.gov
mycitrixsf.TxDOT.gov
AVNMET.txdot.gov
avnmetfiles.txdot.gov
fbde.txdotconnect.txdot.gov
webex-sso.txdot.gov
externalusers.txdot.gov
mppm-ref.txdot.gov
qa2.txdotconnect.txdot.gov
dev.txdotconnect.txdot.gov
fin.txdot.gov
testportal.txdot.gov
ADFS.TXDOT.GOV
txdotconnect.txdot.gov
www.txdot.gov
citrix.txdot.gov
edit.drivetexas.txdot.gov
txdot4azitsmon1.dot.state.tx.us
ecmmobile.txdot.gov
AAHUAT.txdot.gov
last.mppm.txdot.gov
matsuat.txdot.gov
TXDOT4AZK2WPRD1.dot.state.tx.us
ftp.txdot.gov
remote.txdot.gov
adfs.txdot.gov
sb20pca.txdot.gov
crossroadsuat.txdot.gov
txdot-xenweb.dot.state.tx.us
enabler.txdotconnect.txdot.gov
ftp.txdot.gov
cris.dot.state.tx.us
txdot4sverpdlx1.txdot.gov
oc1.txdot.gov
editmap.drivetexas.txdot.gov
cgust.txdot.gov
apps2.dot.state.tx.us
elm.txdot.gov
editmap.drivetexas.txdot.gov
mycitrix.txdot.gov
finust.txdot.gov
avnmet.txdot.gov
apps2.dot.state.tx.us
TNTODAY.dot.state.tx.us
www.txdot.gov
testmap2.drivetexas.txdot.gov
mppm.txdot.gov
devarcgis.txdotconnect.txdot.gov
apps.dot.state.tx.us
externalusers.txdot.gov
reports.txdot.gov
*.mppm.txdot.gov
txrtn.txdot.gov
fbqa.txdotconnect.txdot.gov
edit.drivetexas.txdot.gov
vcsc1.txdot.gov

Certificate

The complete raw certificate details for adoreapi.txdot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13298099194567529504012524095566150951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adoreapi.txdot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812653356655119775668423720163758825496470402716153622868570265417543741690942096375446449114454670107455258184971724112685055176446268997082489839372433641711623536201828809980843503001448467377130666410184158904711179739149704902258091024698149178695359535880248638185700805056620287149345593950504664079601702643635611113575505578693267565991885606987252233155758633000716390874707383161080287141388062165862548135494417372064623519793980455387834310168593295168408255022674825362255311171515712417948389444066516083983775780610535252820557653676521372973853779898244862788419023841530324334142081688579209178177510179513939450547447821968008284070976676030015235778978760740481993080496992852845117265519952225607657447371026515859665700364878595603668679397272516328773932194118229483543881464382513967829189469166040962288650258226652590193258691548675867444330520777977579940843309049542993645610734454206038286446387163469145603374246265491005917453041671089310650294204790153416277990444976771086897458193442627056927164858763648230508580775516795755340034707910657981669670168707864219316563684920399418636669848455956928565153104610669941572486081656762639586179943334209835764132223152027201236407271512861812198043333279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8eeb832d8dfd4a461cb5e32ca9d320161919a96b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoreapi.txdot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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