alabamacares-uat-tra.alabama.gov

- Alabama Department of Public Health -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 20:4a:0a:d0:44:1a:51:1d:92:ba:2d:5c:85:70:5e:59 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Alabama Department of Public Health

Organization: Alabama Department of Public Health
Organization unit: Information Technology
State / Province: Alabama
Locality: Montgomery
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:4a:0a:d0:44:1a:51:1d:92:ba:2d:5c:85:70:5e:59
Serial Number (int): 42919745157279520457494490148259257945
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): af:8f:e7:b0:4a:3e:ec:29:8c:af:de:c6:63:7f:b7:cf:68:fb:05:a5
Fingerprint (sha256): 06:07:4e:89:87:fe:9c:71:b0:82:62:da:86:a0:54:26:4c:33:1f:f3:c4:04:37:96:34:72:91:8d:1a:86:f4:2f

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate alabamacares-uat-tra.alabama.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alabamacares-uat-tra.alabama.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamacares-uat-tra.alabama.gov

Other certificates including the domain name alabama.gov

(limited to 100 certificates)
www.boards.alabama.gov
vpn.alabama.gov
opspretrial.alabama.gov
hblb.alabama.gov
gims.dys.alabama.gov
*.adss.alabama.gov
mattest.alabama.gov
nytd.dhr.alabama.gov
alabama.gov
www.mh.alabama.gov
pdmreporting.alabama.gov
emits.ema.alabama.gov
aidcc.alabama.gov
purchasing.alabama.gov
www.ogb.state.al.us
*.alabama.gov
digital.archives.alabama.gov
GCLportal.medicaid.alabama.gov
afrwc.alabama.gov
www.stemcouncil.alabama.gov
agikace.alabama.gov
caresdev.alabama.gov
*.vote.alabama.gov
ctf.alabama.gov
aesbl.alabama.gov
www.oppal.alabama.gov
va.alabama.gov
ctf.alabama.gov
caresdev.alabama.gov
joblink.alabama.gov
grants.ema.alabama.gov
www.support.revenue.alabama.gov
acesp.alabama.gov
www.ahc.alabama.gov
kids.ema.alabama.gov
www.openmeetings.alabama.gov
aldoi.gov
*.mh.alabama.gov
Expedite.medicaid.alabama.gov
oitbilling.alabama.gov
dhr.alabama.gov
scrap.alabama.gov
GCLQAS.medicaid.alabama.gov
www.ago.state.al.us
one.alabama.gov
amhc.alabama.gov
imperva.com
alabamacares-uat-tra.alabama.gov
aboc.alabama.gov
www.revenue.alabama.gov
alabama.gov
socialwork.alabama.gov
agcb.alabama.gov
mydhropi.alabama.gov
grants.ema.alabama.gov
tls.automattic.com
nytd.dhr.alabama.gov
tls.automattic.com
alabama.gov
oitbilling.alabama.gov
onedoor.alabama.gov
governor.alabama.gov
*.vote.alabama.gov
bels.alabama.gov
www.background.alabama.gov
sonicwall.ogb.alabama.gov
ctf.alabama.gov
cybersecurity.alabama.gov
leasingmgt.alabama.gov
www.asbpa.alabama.gov
Cayosoft.Alabama.Gov
alabama.gov
alison.legislature.state.al.us
treasury.alabama.gov
rfp.alabama.gov
dhr99aelewbsv.dhr.alabama.gov
agi.alabama.gov
uiclaimstracker.labor.alabama.gov
giftstest.rehab.alabama.gov

medicaid.alabama.gov
alabama.gov
alabama.gov
cardservices.alabama.gov
alabama.gov
main1.isd.alabama.gov
mydhropi.alabama.gov
cp-test.alabama.gov
dhr.alabama.gov
mydhr.alabama.gov
Expedite.medicaid.alabama.gov
alabama.gov
alabama.gov
open.alabama.gov
*.dcnr.alabama.gov
verify.alabama.gov
maps.alabama.gov
www.openmeetings.alabama.gov
pgfb-app.alabama.gov
hosted.caps.center

Certificate

The complete raw certificate details for alabamacares-uat-tra.alabama.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGuUnvP4TPZS0n28s4d5
DAtFr9kJMGD/zMVY5D0UDX2FTRCTjKHlKiWE/oQO39Guk+16Omk68ffJmSN6c7oa
RRnlUhD0mGqFe7W+RUVkg7Biw745TBSXdUjyO2HRDIdXvLXcOjdCCFo3iH9tUbma
FrInhhgX31b6fasw7Sp+WXZHo1XNGyMDqcIXfPH7p7LdVWYrt50aY4s6atb5HxrP
Q4nabFzDwkwTZBkDHJo4Yx4DGw9yzZns7OuvJVLbk1EpOtMRXD6lGF9YHQBGEGdx
lDlOYwS0piWqtNPFL4xXHMVHzB2dTAk7+g03K7LH051VOJ3iwcnP5WzY3I8sCR1P
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42919745157279520457494490148259257945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alabama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Montgomery'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Alabama Department of Public Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'alabamacares-uat-tra.alabama.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19241272301456734291386269592679522249243708004033271946600430842384021579077540337214359837492317671425256891418876379664540051031279285435892347960692096988030629482153346762499499629507239699133572027209790165060116822243878196400099727015520476077546451791016147686703582893875927877688910045407937913103942848172732573615151300753646086093928151752958604002467535448327700658278507900508294096071828409234588208055763971455183076220154269144641761361632039423093412238337409209317393670005782123119920773817154851528076352245325327891333859881649986155214577570172156464479130086203026099849420215503611267731383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacares-uat-tra.alabama.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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