mo2fss.mo.gov

- State of Missouri, Office of Administration -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f6:6c:b0:e9:e5:91:2e:10:00:00:00:00:50:fc:bb:2c was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f6:6c:b0:e9:e5:91:2e:10:00:00:00:00:50:fc:bb:2c
Serial Number (int): 327554443259110753652741363597185956652
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 47:48:37:bf:8a:17:ca:b5:ee:ef:70:ef:6a:94:a4:f2:41:1a:32:8d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 74:a2:2e:1f:9b:e6:5a:fb:56:8e:b6:70:c3:b2:b1:eb:94:0c:57:46
Fingerprint (sha256): 05:88:17:61:28:d0:ca:08:48:bf:c9:42:73:0b:14:39:d4:6d:3c:be:fa:22:58:21:25:7e:00:ec:e4:83:26:d4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mo2fss.mo.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mo2fss.mo.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mo2fss.mo.gov
www.mo2fss.mo.gov

Other certificates including the domain name mo.gov

(limited to 100 certificates)
apidata-dev.dese.mo.gov
renew.pr.mo.gov
mo.gov
Securemail.mo.gov
Mail.sos.mo.gov
www.mostops.ago.mo.gov
www.courts.mo.gov
imperva.com
momail.mo.gov
5685057352105984-fe4.pantheonsite.io
airwatch4.mo.gov
incapsula.com
stoadf.treasurer.mo.gov
5659822271758336-fe3.pantheonsite.io
webmail2.auditor.mo.gov
mail.senate.mo.gov
mdc5test.mdc.mo.gov
mo.gov
oscna0013.courts.mo.gov
5658638538506240-fe4.pantheonsite.io
achieve.escoffier.edu
www.training.oa.mo.gov
appadmin-dev.dese.mo.gov
on.mo.gov
5685057352105984-fe4.pantheonsite.io
mo.gov
MoLogin.mo.gov
s1.sos.mo.gov
pr.mo.gov
cbafs.mo.gov
media.senate.mo.gov
lists.mo.gov
securemail.mo.gov
mcs.modot.mo.gov
mail.house.mo.gov
www.mshp.dps.mo.gov
mo.gov
WWW.MO.GOV
mo.gov
imperva.com
www.mosac.mo.gov
publicdefender.mo.gov
imperva.com
imperva.com
nature.mdc.mo.gov
incapsula.com
imperva.com
mo.gov
incapsula.com
vpn.sos.mo.gov
vpn.psc.mo.gov
achieve.escoffier.edu
www.MissouriEmployer.dss.mo.gov
molisapitest.legislativeoversight.mo.gov
*.house.mo.gov
medesfdshprod.dss.mo.gov
lyncaccess.modot.mo.gov
5659822271758336-fe3.pantheonsite.io
moaccount.mo.gov
incapsula.com
connect.mdc.mo.gov
incapsula.com
5658638538506240-fe4.pantheonsite.io
mo2fss.mo.gov
5659822271758336-fe3.pantheonsite.io
myworkspace.mo.gov
moadfs.mo.gov
achieve.escoffier.edu
extra.mdc.mo.gov
imperva.com
mymdc.mo.gov
mo.gov
legislativeoversight.mo.gov
ucceegainws.state.mo.us
5685057352105984-fe4.pantheonsite.io
connector-c.mshp.dps.mo.gov
mophin1.dhss.mo.gov
cobra.mshp.dps.mo.gov
www3.modot.mo.gov
mosso.mo.gov
5659822271758336-fe3.pantheonsite.io
mymdc.mo.gov
uisidestest.labor.mo.gov
imperva.com
5658638538506240-fe4.pantheonsite.io
remoteaccess.sos.mo.gov
incapsula.com
machs.mo.gov
achieve.escoffier.edu
*.courts.mo.gov
incapsula.com
www.courts.mo.gov
Evetest.mo.gov
mail.senate.mo.gov
incapsula.com
achieve.escoffier.edu
Airwatch1.mo.gov
gisblue.mdc.mo.gov
mo.gov
imperva.com

Certificate

The complete raw certificate details for mo2fss.mo.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327554443259110753652741363597185956652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 21:46:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 22:16:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mo2fss.mo.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691109727285006424845206179667120347647993381275107496251311173756590817259615222333015077024833582963015271685755998680376680961254450805889090725799058739083222017397726263461983481718152522444852140159228657812651721311938568547465112365218389998380240159263610458922262303918713696138020959024943706868661214290656082081821723683907295721877843513252788784718570031829689203105720284510597772203797853166737274061480240776147977121903066643117739256999580330770541638379200042020919043858390336305864686440147770575127403880338901341902883698267781209203503948107895705535798786351562499543052220876891583678673915436639229579886724298144125310209729281666631236164914851195311058268648810294242958416655777700740175329292574484360915270107472094622423146905574574986731799562408155759309437308579728410385219762435676079727418441547548733973392831344432629995190922173270379522508666828544650721248882388572311494456182726385368466395858496548890701444574500995744454447574671021870681007791417960489968816296757716174626227827979041438321616462368922074298757451411323576434118835550727444359580132053324903534299348602378291206329340779550766804342148020811718266947911474653869296406596299108101924214332124849047433783490091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo2fss.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mo2fss.mo.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							474837bf8a17cab5eeef70ef6a94a4f2411a328d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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