recovery.texas.gov

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:56:99:46:0d:85:4a:cb:12:15:f4:a4:8b:77:ce:1e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=recovery.texas.gov

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:56:99:46:0d:85:4a:cb:12:15:f4:a4:8b:77:ce:1e
Serial Number (int): 5766558271798838834545573948145782302
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 92:f2:98:79:20:8d:3a:5f:0d:c9:5b:8b:d7:92:fe:3f:bf:9c:fb:cf
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 5f:3e:d6:f4:9b:04:7f:82:61:55:42:e2:6b:55:7f:28:88:85:f9:6f
Fingerprint (sha256): 04:6d:bc:93:b6:58:72:0f:d3:f9:15:04:22:19:fd:98:0b:23:59:88:36:38:27:24:9e:55:bf:f6:9e:fa:19:5c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate recovery.texas.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recovery.texas.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recovery.texas.gov
www.recovery.texas.gov

Other certificates including the domain name texas.gov

(limited to 100 certificates)
ptad-lms.cpa.texas.gov
www.prb.texas.gov
iteamsdev.dshs.texas.gov
ersview.ers.texas.gov
ccharchive.dps.texas.gov
crcg.hhs.texas.gov
*.comptroller.texas.gov
www80.tceq.texas.gov
cud.texas.gov
owa.ers.texas.gov
app.tmd.texas.gov
imperva.com
iteamstraining.dshs.texas.gov
incapsula.com
childsupport.oag.texas.gov
incapsula.com
www.highq.com
www80.tceq.texas.gov
incapsula.com
www.license.state.tx.us
erpfindmo.cpa.texas.gov
incapsula.com
www.volunteer.tdem.texas.gov
terponline.tceq.texas.gov
2021annualreport.cprit.texas.gov
apps.hhs.texas.gov
tiscc.texas.gov
txsubscribealerts.dps.texas.gov
fs.txo365demo.dcs.dir.texas.gov
webmail.tesrs.texas.gov
*.dir.texas.gov
www.txvendordrug.com
opuc.texas.gov
fs.tdcj.texas.gov
tiden.tceq.texas.gov
apps.txrc.texas.gov
tgpc.texas.gov
www.taylorcounty.texas.gov
www3.stg-dps.texas.gov
faq.sll.texas.gov
slrmtraining.tsl.texas.gov
guides.sll.texas.gov
incapsula.com
tmd.texas.gov
*.oag.texas.gov
incapsula.com
filer.trs.texas.gov
benweb.ers.texas.gov
tdhca.texas.gov
ssb.texas.gov
www.directory.tsswcb.texas.gov
www.cprit.texas.gov
drawbridge.dev-dps.texas.gov
pdwdata.tceq.texas.gov
incapsula.com
incapsula.com
ssb.state.tx.us
ssl-wg1.revizesites.com
LyncAccess.tabc.texas.gov
grants.tsl.texas.gov
annualreportsui.dob.texas.gov
incapsula.com
erphcmdmo.cpa.texas.gov
cpahorizon.cpa.texas.gov
vlbms.glo.texas.gov
incapsula.com
tier2-ut.tceq.texas.gov
tcco.texas.gov
*.lbb.texas.gov
*.tdi.texas.gov
svcivr.ers.texas.gov
erpphireash.cpa.texas.gov
webapps2.rrc.texas.gov
www.ers.texas.gov
*.lrl.texas.gov
websupport.glo.texas.gov
vpn.cud.texas.gov
incapsula.com
*.gov.texas.gov
kmapi.rrc.texas.gov
www.help.tsswcb.texas.gov
stageapps2.portal.texas.gov
iwmsm.dps.texas.gov
sftp-edts-uat.hhs.texas.gov
www-test.tdlr.texas.gov
ccharchive.dps.texas.gov
contracts.hhs.texas.gov
imperva.com
incapsula.com
fs.tpwd.texas.gov
tea4svdogfish.tea.state.tx.us
veterinary.texas.gov
slrmtraining.tsl.texas.gov
enthcmonbtst.cpa.texas.gov
webmail.trs.texas.gov
www.highq.com
tea4avsmitty.tea.state.tx.us
ssl-wg1.revizesites.com
www.highq.com
www.drawbridge.dps.texas.gov

Certificate

The complete raw certificate details for recovery.texas.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfsIBl9IQP/d0STDjpi2
bb1lYpyK7F2vkltbSEYj6k3j+9kjkJfwkpYEuy+d3E4PrxpoFKqqwMXp+ave86bc
Ml4/yZtHb5a7GpnwAaKmK2Mp0XDgYugQe7n1wQdfBA7vVh9TTjsa9lwMYevzPjCA
3W8YPOstTFKOc3YSUbu75QJEZ+atQn4FoSGPc4CLhvq3g0uNrDsbBrvgV0FigJ3t
mpzGwLqFi+S7OvIcacm1U6i4shZf9+DRwJmA6ACR6lMqUAwSFxU6rmIkQt+x8IpM
GZQC/LV8upSXWS2EQwBXvWXtsqB6LC3Of1lAhMWFHb7sjR3K7Zcj/4oS7FUlArsX
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5766558271798838834545573948145782302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recovery.texas.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21963014930096554110047471478190942778281597871038888028575025563005442617147503834037258881907257806596845954734282710080027110481934600194669544952508372709583927360889787058464948876194594492014279919243687036666317799633286506323638749310729795167243339902699637790460231814430021234577946368638086511007212505626632300438446401309094705136355517342397579452504940755104216918073701385967945581060759254647765493262262271255308087600782733412920889725232034772415613977901837733875985422038834453194794809929341946078160475766704654836584774210166531228957953819358307533028498815927908984021913852346448828110739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92f29879208d3a5f0dc95b8bd792fe3fbf9cfbcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recovery.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00837d01f7ab25374e8c3902ee45d3a964009b904d7ef7c0f4eead91d3ac55dac4e3ed27a72eadc6e24a405e024abb0f73871d2afcec7dd20f6e8edd077e9af08286f64c84ff9db753004655e0004418be639540d646e7f11edd99a4ca174f15d46db32d76ba76079515cc59242b372349c225546fd36d547cfbaee79cf8c39f323dc9471d6400381f216371037beed122de9a7d762c27ef7fbd87ef62082360ecf67af58bd1095b6f5a862554ecc6712f27c8d755911e6acc99a71493a7d15ef00238b29ac5f281fa3ef79fb39530be2eb0bb8e5b3ff584b5d104f2624fc6e5511ae818e2ebf3503a51195dd10b75fe8c85bc91a690f53d91084be68bffa3afcf