ssb.state.tx.us

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:7a:60:53:1f:e4:92:33:a2:8f:a5:67:24:e2:25:59:d4 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssb.state.tx.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d9:7a:60:53:1f:e4:92:33:a2:8f:a5:67:24:e2:25:59:d4
Serial Number (int): 422453083310835621708273675235396178762196
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 50:74:7a:da:0f:1f:4a:7c:f0:ac:94:0b:d7:ae:7d:69:a1:b3:a9:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:5b:ea:e6:60:b1:19:d3:e1:16:dc:9f:16:1f:87:a0:a9:79:da:34
Fingerprint (sha256): 02:80:7e:51:35:47:d5:cc:94:3a:6b:8a:d0:1a:76:de:a9:ec:79:93:58:0b:c1:dc:11:c9:e3:4d:c3:22:bc:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssb.state.tx.us

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssb.state.tx.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssb.state.tx.us
ssb.texas.gov
www.ssb.state.tx.us
www.ssb.texas.gov

Other certificates including the domain name state.tx.us

(limited to 100 certificates)
txdotsg.dot.state.tx.us
wildnet.tpwd.state.tx.us
owa.ers.texas.gov
registryplus.dshs.state.tx.us
sab.state.tx.us
ra.dshs.state.tx.us
ftworth.courts.state.tx.us
apps.twc.state.tx.us
webconnect.oag.state.tx.us
www.provision.legis.state.tx.us
mvs1.cpa.state.tx.us
www.dads.state.tx.us
sab.state.tx.us
bhips.dshs.state.tx.us
incapsula.com
cpafmprd.cpa.state.tx.us
ewsshare.dshs.state.tx.us
www.license.state.tx.us
www.tsbpa.state.tx.us
web.twc.state.tx.us
voltage-ps-0000.dshs.state.tx.us
ts-rdstest.tpwd.state.tx.us
qmvisit.dads.state.tx.us
txdot4aves-p3.dot.state.tx.us
voltage-pp-0000.hhsc.state.tx.us
aac.woccisd.net
sab.state.tx.us
avp13.ad.agr.state.tx.us
tgpc.texas.gov
remote.tbae.state.tx.us
*.governor.state.tx.us
helmnet.thecb.state.tx.us
sab.state.tx.us
*.trec.state.tx.us
sab.state.tx.us
tea4avhood.tea.state.tx.us
ise-moody.tea.state.tx.us
filer.trs.texas.gov
www.txsg.state.tx.us
wittrain.twc.state.tx.us
benweb.ers.texas.gov
ts-rdstest01.tpwd.state.tx.us
hronline.dot.state.tx.us
idvp1.hhs.state.tx.us
wwwprod.dshs.state.tx.us
mx1.cpa.state.tx.us
www.cprit.texas.gov
fives.dads.state.tx.us
texaslmi.com
maps.dot.state.tx.us
ssb.state.tx.us
mppm.txdot.gov
dshs-savcxgw01.dshs.state.tx.us
LyncAccess.tabc.texas.gov
tea4svildap2tst.tea.state.tx.us
sab.state.tx.us
*.oag.state.tx.us
tea4avyeareven.tea.state.tx.us
mailvip01_esa.hhs.state.tx.us
*.trs.state.tx.us
www.sorm.state.tx.us
webapps2.rrc.texas.gov
www.ers.texas.gov
*.txphp.state.tx.us
fs.twc.state.tx.us
vpn.cs.oag.state.tx.us
SAO-AD02.sao.state.tx.us
www.twices.dshs.state.tx.us
www-test.tdlr.texas.gov
twcstt.twc.state.tx.us
rds.tpwd.state.tx.us
casper.tsd.state.tx.us
tea4svdogfish.tea.state.tx.us
www2.arts.state.tx.us
veterinary.texas.gov
webmail.trs.texas.gov
txrtn.txdot.gov
dshssmc.dshs.state.tx.us
sendfiles.tea.state.tx.us
citrix.nsoc.dir.state.tx.us
services.twc.state.tx.us
tea4avsmitty.tea.state.tx.us
*.oag.state.tx.us
cmbhslst.dshs.state.tx.us
tsbpe.texas.gov
aristotle.twc.state.tx.us
gbep.texas.gov
remote.tpwd.state.tx.us
crisdev.dot.state.tx.us
texaseducationinfo.org
tmb.state.tx.us
incapsula.com
opic.state.tx.us
crossroadsuat.dot.state.tx.us
exchange.thc.state.tx.us
twcra1.twc.state.tx.us
incapsula.com
mppm.txdot.gov
uat-immtrac.dshs.state.tx.us
*.dfps.state.tx.us

Certificate

The complete raw certificate details for ssb.state.tx.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NsWmTRVAQDIQtijY7IF
ChrbYbzMi9D5pXFUKuTzr4cxUDo61XxNsvlLKWDT3RV3cz4JVoi/OMmwtAauM/1w
QMXrYUGS2rFyxJPbdcSRrxTvKz7Vx59xl1WOSQEurqbYrHhFbpbKEjJjKMFQhEBk
ZM2i1j8Bi+Mz/6Cem7Z+/nlkzLe0LDy0OWhYsPIGWx2s9Ei2JR4IIsaDoTCfN9fU
GFdveDIEVEi7rC4oZXj9ajX2aUu43zbgq+FsqRrvaCiZCZ7T3/AsV6DCH5Jpebag
fqYZKA9wQWTfxug2SB+u5glwEui5fK6Dt/rIwkoQvqT8EFrmWLSkg0XoyqvGNNsj
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422453083310835621708273675235396178762196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 20:23:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 20:23:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssb.state.tx.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26365603888022020054182952909213694892847603346272007836097928171824029219773158544556361972160893691235534062345157623953640564146302237480595995607468109342413350331847036459936718878941297701375190031849795316760464905053902176821838036028662618151308740328379845815401759087756007150976022602879802560733117109706954652116223058003031196850924691444203121764031289623181868535406724888663938587561668692501917536470476888199485100145018144156389440057319161574304766533865918587681888656114680190024749622027815245760265857470075538413247687182617321639407515670122780304541976104002721948570083415782586081551109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50747ada0f1f4a7cf0ac940bd7ae7d69a1b3a9d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssb.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssb.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssb.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssb.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018da45a93410000040300473045022100d46a0696355a91354db84bc2dc5f9552c552cb92899807c9563d7d50b520da9a02206dac4aa9f1f3cce9ea2abe03fdc09ba9b54df394a81b5c824119476a9ef74c1100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018da45a939b000004030046304402204f12c8da9e98daf18beb0c1a635d1c210124e67f6e68ec1038736b39c0e4fadc02202e8ea258069b44196e2044fc481eb504458c8e7c573f2ba985519d168ea15a59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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