sua.faa.gov

- Federal Aviation Administration -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:42:dc:41:f5:38:63:5c:49:fe:b9:12:87:23:ee:8d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Aviation Administration

Organization: Federal Aviation Administration
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:42:dc:41:f5:38:63:5c:49:fe:b9:12:87:23:ee:8d
Serial Number (int): 6993298927423241251519382480360828557
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9a:76:17:a0:3e:b7:50:64:2e:f5:ae:dc:75:68:e7:36:cd:6f:21:58
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 74:b2:ea:b7:ab:70:c9:6b:78:68:a1:a8:07:d3:45:a0:0a:55:de:e1
Fingerprint (sha256): 02:24:ed:c4:16:91:99:cb:11:a7:38:2a:b0:6e:4f:7f:f1:6a:27:9d:ce:28:3f:78:d5:7e:c7:0c:a5:38:46:b7

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate sua.faa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sua.faa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sua.faa.gov

Other certificates including the domain name faa.gov

(limited to 100 certificates)
efsas.avs.faa.gov
asi.1.faa.gov
dmt.faa.gov
*.cf-lab.faa.gov
bpmsoa-test.faa.gov
www.faa.gov
authtest.sm.faa.gov
serviceareaapps.faa.gov
fdc3dcpap854.fcs.faa.gov
ftb-test-fims-server.faa.gov
www.faa.gov
agcinsitetest.sm.faa.gov
ama400-pvs2.amc.faa.gov
medxpress.faa.gov
caeg.faa.gov
adsftp.faa.gov
www.faa.gov
arcsight.fcs.faa.gov
csimsuat2.csnet.faa.gov
e2-satotravel-signing.sm.faa.gov
serenacmtest.amc.faa.gov
csims2.csnet.faa.gov
mail.ems365.faa.gov
fist.faa.gov
falcon.faa.gov
asmfvasp02.amc.faa.gov
help.spas-uat.faa.gov
rbrt.avs.faa.gov
iactdcpvap148.ad.faa.gov
rbrt.avs.faa.gov
enroutesupport.faa.gov
fhissso.faa.gov
sdrs.faa.gov
isbp.faa.gov
ilmits.amc.faa.gov
cdmsuat1.sm.faa.gov
asapowa.ash.faa.gov
registry.faa.gov
dev-hotline.faa.gov
part16.airports.faa.gov
home.spasdev.faa.gov
nasea.faa.gov
viewer.tc.secure-ose.faa.gov
sua.faa.gov
registermyuas.faa.gov
vpntest.faa.gov
faa-exm-00.ad.faa.gov
FAA-BelarcDA.faa.gov
extranet.asias.faa.gov
soatest.smext.faa.gov
oaps.faa.gov
dev-www.faa.gov
askmeservices.avs.faa.gov
opt.faa.gov
blackboardtest.sm.faa.gov
wwwtest.faa.gov
wifi.amc.faa.gov
avssharepoint.faa.gov
wifi.amc.faa.gov
aidaptest.naimes.faa.gov
esc-dbprotect.amc.faa.gov
magr-tst.faa.gov
dz-dev-alb.dz.faa.gov
*.faa.gov
amcs-preprod.faa.gov
tfmlearning.faa.gov
av-info.faa.gov
ssm-dev.amc.faa.gov
tifpa-ws.faa.gov
notamsstage.aim.faa.gov
attivio.faa.gov
iasdex.faa.gov
tsd.fly.faa.gov
oaps.faa.gov
denodo-prod3.faa.gov
tmaster.falcon.faa.gov
uis.faa.gov
dgc.eim.faa.gov
blackboard.sm.faa.gov
tsscweb01-dr.tssc.faa.gov
webservices2012-test.avs.faa.gov
aps2.faa.gov
prd.faa.gov
ncr.voicemail.faa.gov
opt.faa.gov
itams.faa.gov
act2.faa.gov
jiratest.sm.faa.gov
avsmtdashboard.avs.faa.gov
www.faa.gov
enroutesupporttest.faa.gov
aviator.faa.gov
uas.npn.faa.gov
www.faa.gov
serenasmbtest.amc.faa.gov
cims.faa.gov
ioeaaa.faa.gov
fhisdevsso.faa.gov
eda.faa.gov
icamms.faa.gov

Certificate

The complete raw certificate details for sua.faa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1KXbaiFG0zNn2OHt7Fq
uTgcpK+KCkuAg1VRRzYmgVlY36Yb0GhfKKi/ttjP6qSKmXXb7acPuYNGKrnKQGrT
D1y2wH2JhXgNgFAx1cUs6JQI+uxxz0STDfUD5DD6qnvHQ6Vj+kuva+cYHIdBj7Hg
hU2ATlJRtl99Q+0G2wVxY+xoIux8esGn22B9EQRUtG+8mHg9qxw6ZT+TwsUe+96q
OpZ+MAM37dbnOXWgyc9n6EA1vVK5fpJsjPKilLEdqvLlvCcvA0qMXapF9dn2s32J
Ifg8Ym+v8yv+ZTzgoIOm5ErEWrB4g3tO/+EvCAVltTh++aETZMaFTMI18VujGLQf
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6993298927423241251519382480360828557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sua.faa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21122524324296559603222111018648799264638644687444860079521014319372555998115873213607973792723792974227940630678991209071311503404187551367432455108769823787890589859823954150154910637529657680396176487563238718188625497030664761136209067643718605598956232292245118833243840743585398142807653282026832142473391375118479761690648790339059941553969301157058723028751769379231977345489266441386396400999511861785870117797567252639102695611300521529410503971973145036488656343970157210046435056674471016249303899840094404755473518352504799975124800949638794126248060020235916584262899340929698055177811327558843993694207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a7617a03eb750642ef5aedc7568e736cd6f2158
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sua.faa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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