datahub.transportation.gov

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 48:a4:fe:8c:b1:72:df:43:8d:12:6e:45 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=datahub.transportation.gov

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:a4:fe:8c:b1:72:df:43:8d:12:6e:45
Serial Number (int): 22482386617970991115338411589
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b7:8e:91:82:25:7b:3d:aa:93:0d:a1:72:9c:75:a4:87:74:d1:17:fa
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 0c:7e:5f:fb:85:ad:b1:fb:ae:4e:3d:bb:fa:fe:af:fc:6f:70:d3:9e
Fingerprint (sha256): 06:49:c6:1e:05:24:31:c4:69:0d:eb:d2:50:fa:a4:27:c3:91:5b:a2:97:ac:49:54:1a:81:40:95:be:0b:bd:e2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate datahub.transportation.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datahub.transportation.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datahub.transportation.gov

Other certificates including the domain name transportation.gov

(limited to 100 certificates)
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
www.dot.gov
transportation.gov
www.dot.gov
datahub.transportation.gov
www.dot.gov
datahub.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
transportation.gov
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
transportation.gov
www.dot.gov
datahub.transportation.gov
datahub.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
datahub.transportation.gov
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
datahub.transportation.gov
transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
data.transportation.gov
datahub.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
transportation.gov
data.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov
www.dot.gov
data.transportation.gov
www.dot.gov
www.dot.gov
www.dot.gov

Certificate

The complete raw certificate details for datahub.transportation.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkORGHktpnrpgWm//zJLT
WlF9yz2ezjE4F+PYQg3kJlNQNq7BNcD32eE2YG5V/teh3vQMjuW1y/AbUGLWScm5
J4Gxh7E9orK3bNkDAdP+zFN1+zC8Gc17FPN4GQuXdYJ1dS712MGqT0keoI2zUCNq
KoFfWNsUPniCPdq3EKJpVHGnHARUkdUqsL+ZIq0nT22cMybqLVyTmFCND+iPD1tY
KnH0aX0hreCQwF6ZzF+z2npfX86viAcToX+vJ/allh1EVBL+tvPBFb8nId080VHj
ivBj8hookxQfRMHPb0WZAGKSNEulJ6huNS+UmQrkCWwtLGhLhCMs4H5ybhM7Uces
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22482386617970991115338411589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 22:19:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 22:19:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datahub.transportation.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18290881970477750722954949902159695869083722252778195363417563015292000025608918491452926904308654007452668246045906008440102419450423748913281248170545191057321534144088511599566495914205491512069387654683047324631502159475447871378917854295032631473337830731247099770819555418221703370038785030359074195580390765643128923131479236141618642172731224829644783568007627895054329860122462067195842727567450351991738058626660589584218819212696293471261460614451826129841987385500915347402872557111283750910654581350825183250362950888728056430804011893060240198222278358777379110223857598001175264953534825512073949588639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub.transportation.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b78e9182257b3daa930da1729c75a48774d117fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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