cpahorizon.cpa.texas.gov

- Texas Comptroller of Public Accounts -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number eb:eb:26:f2:cc:8e:3d:7f:db:50:77:37:b5:a5:1d:46 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Texas Comptroller of Public Accounts

Organization: Texas Comptroller of Public Accounts
State / Province: Texas
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): eb:eb:26:f2:cc:8e:3d:7f:db:50:77:37:b5:a5:1d:46
Serial Number (int): 313589558739298081733380019382164725062
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bf:03:47:d5:be:60:fc:c1:c2:04:dd:07:03:4e:dc:0c:e6:c6:45:54
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 76:89:a1:54:42:ca:dd:46:50:69:1f:de:c4:26:0f:e9:db:da:17:ec
Fingerprint (sha256): 02:f1:a7:df:d3:34:de:1a:44:0e:28:a9:21:d3:0b:e0:d5:e3:ef:1c:f1:75:7e:47:bd:29:46:87:e7:15:e7:6e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate cpahorizon.cpa.texas.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpahorizon.cpa.texas.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpahorizon.cpa.texas.gov
www.cpahorizon.cpa.texas.gov

Other certificates including the domain name texas.gov

(limited to 100 certificates)
ptad-lms.cpa.texas.gov
www.prb.texas.gov
iteamsdev.dshs.texas.gov
ersview.ers.texas.gov
ccharchive.dps.texas.gov
crcg.hhs.texas.gov
*.comptroller.texas.gov
www80.tceq.texas.gov
cud.texas.gov
owa.ers.texas.gov
app.tmd.texas.gov
imperva.com
iteamstraining.dshs.texas.gov
incapsula.com
childsupport.oag.texas.gov
incapsula.com
www.highq.com
www80.tceq.texas.gov
incapsula.com
www.license.state.tx.us
erpfindmo.cpa.texas.gov
incapsula.com
www.volunteer.tdem.texas.gov
terponline.tceq.texas.gov
2021annualreport.cprit.texas.gov
apps.hhs.texas.gov
tiscc.texas.gov
txsubscribealerts.dps.texas.gov
fs.txo365demo.dcs.dir.texas.gov
webmail.tesrs.texas.gov
*.dir.texas.gov
www.txvendordrug.com
opuc.texas.gov
fs.tdcj.texas.gov
tiden.tceq.texas.gov
apps.txrc.texas.gov
tgpc.texas.gov
www.taylorcounty.texas.gov
www3.stg-dps.texas.gov
faq.sll.texas.gov
slrmtraining.tsl.texas.gov
guides.sll.texas.gov
incapsula.com
tmd.texas.gov
*.oag.texas.gov
incapsula.com
filer.trs.texas.gov
benweb.ers.texas.gov
tdhca.texas.gov
ssb.texas.gov
www.directory.tsswcb.texas.gov
www.cprit.texas.gov
drawbridge.dev-dps.texas.gov
pdwdata.tceq.texas.gov
incapsula.com
incapsula.com
ssb.state.tx.us
ssl-wg1.revizesites.com
LyncAccess.tabc.texas.gov
grants.tsl.texas.gov
annualreportsui.dob.texas.gov
incapsula.com
erphcmdmo.cpa.texas.gov
cpahorizon.cpa.texas.gov
vlbms.glo.texas.gov
incapsula.com
tier2-ut.tceq.texas.gov
tcco.texas.gov
*.lbb.texas.gov
*.tdi.texas.gov
svcivr.ers.texas.gov
erpphireash.cpa.texas.gov
webapps2.rrc.texas.gov
www.ers.texas.gov
*.lrl.texas.gov
websupport.glo.texas.gov
vpn.cud.texas.gov
incapsula.com
*.gov.texas.gov
kmapi.rrc.texas.gov
www.help.tsswcb.texas.gov
stageapps2.portal.texas.gov
iwmsm.dps.texas.gov
sftp-edts-uat.hhs.texas.gov
www-test.tdlr.texas.gov
ccharchive.dps.texas.gov
contracts.hhs.texas.gov
imperva.com
incapsula.com
fs.tpwd.texas.gov
tea4svdogfish.tea.state.tx.us
veterinary.texas.gov
slrmtraining.tsl.texas.gov
enthcmonbtst.cpa.texas.gov
webmail.trs.texas.gov
www.highq.com
tea4avsmitty.tea.state.tx.us
ssl-wg1.revizesites.com
www.highq.com
www.drawbridge.dps.texas.gov

Certificate

The complete raw certificate details for cpahorizon.cpa.texas.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313589558739298081733380019382164725062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Comptroller of Public Accounts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpahorizon.cpa.texas.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853213316289997249450929704408384078497605673667792125706468226732429470307083921431442955838137694163278910002972561023804094237095633920849320367150852721487183846998677161253288956310487593800905214623563128178846942463257314574649707018149664355149131078281194761963746730446414945229984713899828173275463595212183232416691649425217896564818248187512631139874807863480033460411487165267292314393715797453693495702354781433045558934672212975439044406366171598470640612346267412776571399204286860890850374133961798750039980686775632706369694377780684083353239706226582369207701481259928301927197040755520515779763843755264433371894388766078558480620321289792627267509747536321748886300443382802447077397742058190673396417353202313349184898055552718419473303512288768596755833575146389140015523126260961245355006655801027126223977285689572645463938422822792031361551215152193504830377479385291466191667296148666569335504845291379917766231622014856117295236488826677887314245756479896672533637682601904316239786268830889341560195072350792462312527533898243197473411899737181369291850105983757786937328877892634241535224654960418577006522476236580016066610355387773587963553918427676990435338952344353889766274013568465422939807946493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf0347d5be60fcc1c204dd07034edc0ce6c64554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpahorizon.cpa.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpahorizon.cpa.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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