erphcmdmo.cpa.texas.gov

- Texas Comptroller of Public Accounts -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 11:c1:68:2d:ce:db:bc:1e:a1:ad:cd:e0:91:97:76:3a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Texas Comptroller of Public Accounts

Organization: Texas Comptroller of Public Accounts
State / Province: Texas
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 11:c1:68:2d:ce:db:bc:1e:a1:ad:cd:e0:91:97:76:3a
Serial Number (int): 23601102221926439634934371866545452602
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 0c:47:d9:9b:aa:f9:2f:87:a9:fd:d8:47:19:48:b3:f9:22:5d:ce:bc
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 82:aa:2a:bc:e4:2d:94:57:c7:68:36:65:f8:38:b7:16:2a:a3:0d:a5
Fingerprint (sha256): 02:d4:0f:25:7e:9e:a3:a6:9f:64:4c:f5:b0:60:e7:9b:d3:26:1d:10:dd:39:8d:70:fb:2f:94:4a:be:64:ff:36

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate erphcmdmo.cpa.texas.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erphcmdmo.cpa.texas.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erphcmdmo.cpa.texas.gov
www.erphcmdmo.cpa.texas.gov

Other certificates including the domain name texas.gov

(limited to 100 certificates)
ptad-lms.cpa.texas.gov
www.prb.texas.gov
iteamsdev.dshs.texas.gov
ersview.ers.texas.gov
ccharchive.dps.texas.gov
crcg.hhs.texas.gov
*.comptroller.texas.gov
www80.tceq.texas.gov
cud.texas.gov
owa.ers.texas.gov
app.tmd.texas.gov
imperva.com
iteamstraining.dshs.texas.gov
incapsula.com
childsupport.oag.texas.gov
incapsula.com
www.highq.com
www80.tceq.texas.gov
incapsula.com
www.license.state.tx.us
erpfindmo.cpa.texas.gov
incapsula.com
www.volunteer.tdem.texas.gov
terponline.tceq.texas.gov
2021annualreport.cprit.texas.gov
apps.hhs.texas.gov
tiscc.texas.gov
txsubscribealerts.dps.texas.gov
fs.txo365demo.dcs.dir.texas.gov
webmail.tesrs.texas.gov
*.dir.texas.gov
www.txvendordrug.com
opuc.texas.gov
fs.tdcj.texas.gov
tiden.tceq.texas.gov
apps.txrc.texas.gov
tgpc.texas.gov
www.taylorcounty.texas.gov
www3.stg-dps.texas.gov
faq.sll.texas.gov
slrmtraining.tsl.texas.gov
guides.sll.texas.gov
incapsula.com
tmd.texas.gov
*.oag.texas.gov
incapsula.com
filer.trs.texas.gov
benweb.ers.texas.gov
tdhca.texas.gov
ssb.texas.gov
www.directory.tsswcb.texas.gov
www.cprit.texas.gov
drawbridge.dev-dps.texas.gov
pdwdata.tceq.texas.gov
incapsula.com
incapsula.com
ssb.state.tx.us
ssl-wg1.revizesites.com
LyncAccess.tabc.texas.gov
grants.tsl.texas.gov
annualreportsui.dob.texas.gov
incapsula.com
erphcmdmo.cpa.texas.gov
cpahorizon.cpa.texas.gov
vlbms.glo.texas.gov
incapsula.com
tier2-ut.tceq.texas.gov
tcco.texas.gov
*.lbb.texas.gov
*.tdi.texas.gov
svcivr.ers.texas.gov
erpphireash.cpa.texas.gov
webapps2.rrc.texas.gov
www.ers.texas.gov
*.lrl.texas.gov
websupport.glo.texas.gov
vpn.cud.texas.gov
incapsula.com
*.gov.texas.gov
kmapi.rrc.texas.gov
www.help.tsswcb.texas.gov
stageapps2.portal.texas.gov
iwmsm.dps.texas.gov
sftp-edts-uat.hhs.texas.gov
www-test.tdlr.texas.gov
ccharchive.dps.texas.gov
contracts.hhs.texas.gov
imperva.com
incapsula.com
fs.tpwd.texas.gov
tea4svdogfish.tea.state.tx.us
veterinary.texas.gov
slrmtraining.tsl.texas.gov
enthcmonbtst.cpa.texas.gov
webmail.trs.texas.gov
www.highq.com
tea4avsmitty.tea.state.tx.us
ssl-wg1.revizesites.com
www.highq.com
www.drawbridge.dps.texas.gov

Certificate

The complete raw certificate details for erphcmdmo.cpa.texas.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23601102221926439634934371866545452602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Comptroller of Public Accounts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erphcmdmo.cpa.texas.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753957158489344921780701865402466429455773338330070255422578304142440133195146334664434265410320692787104108392362832939416847712446807482056937115320865143257859340890347945233123788924228145522802659147611861546517560562690809001583668402347758497215848356198969203232497385232941842140405453680604076148978424020279969961721115720809725913585433864164634739234764106433131978987445310017234763856773993545253946508235053229215604580373617198377143676058680169539296792300617605136612023517350816482425895704603277259858347698269704840017935239946740078126246765452476013582712192699307023302573090171093609397041307086458861663766197462474571716748209221483678252166024038792594856568925506447626198502333594486708641545675472029586458300451482505239418106520157376166492328335370648787741363844659429468959093168935142452508965989268172771235612796329227468623390475707375351741901540477172116086560378658018108701237113982868573828696792169382453630511892382458097781394348884126073837029964578962543623839684353295293233258209132310945829576357197576709422872564484743108334227043986260527397964030109732322425892970589658395970522136712353390516466363551171972710174461091216426593222765666672958025401989911139505078301586247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c47d99baaf92f87a9fdd8471948b3f9225dcebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erphcmdmo.cpa.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erphcmdmo.cpa.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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