texaslmi.com

- Texas Workforce Commission -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:4c:e1:d5:46:d3:1d:87:3e:75:af:0f:b1:1f:1f:3e was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Texas Workforce Commission

Organization: Texas Workforce Commission
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:4c:e1:d5:46:d3:1d:87:3e:75:af:0f:b1:1f:1f:3e
Serial Number (int): 17679158946131163890539095682721980222
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:67:a7:97:6c:42:cf:62:26:61:b8:a0:d9:fd:bc:84:61:f3:64:ce
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 80:07:ed:f1:ec:93:88:a3:1a:6d:81:27:c6:7e:13:ce:38:36:f2:d2
Fingerprint (sha256): 06:cd:d2:ca:b5:8b:8b:bd:ff:91:e3:5b:36:fa:78:b0:2b:8c:45:b5:c0:8f:1b:09:ce:3d:2f:5f:e6:3c:96:d9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate texaslmi.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for texaslmi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

texaslmi.com
texasworkprep.com
texaswages.com
lmci.state.tx.us
www.texaswages.com
www.texaslmi.com
www.lmci.state.tx.us
www.texasworkprep.com
lmi.twc.texas.gov

Other certificates including the domain name texaslmi.com

(limited to 100 certificates)
texaslmi.com
texaslmi.com
texaslmi.com
www.texaslmi.com
texaslmi.com
www.texaslmi.com
texaslmi.com
texaslmi.com
texaslmi.com

Certificate

The complete raw certificate details for texaslmi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17679158946131163890539095682721980222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Workforce Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'texaslmi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673934080210028791460907431737627098787267230329454963313161259770118648143489674021998031208028326765884283247265480088861262209696516945541855285492404486357179632654793331290024833195444437977389755037332951634168698253554680877096524599971520228816805500581395924215055038687071862484744843017154480935948218712431840030345416934098508778513871642112834631147336247013576234808071923634078715041119176505243874199441821763189087320193159392999388496426167328666490313395221193573174585464656967825893039933690209955188950737555647282026854308895118963517526203369785439754545557253845520533640756868176161567671127777711652447159391704711393028448347641951338810655731581383985424091270364101321692966903244057868314183930062200784064323661417122491626383941709420076792412961271859260003933703473111073631857170972495536334010168141858837450123863374482080651937925350780850276021079349403398411089940247391829112417675298898952754007324956516226900317872804004097988339973931326984764901699284424733722103446370504317040362474320541367926888125404659715391486821665305813699519008422367740439457973100898758258321501390659845575182828481637746585177290665863112929855811045121909355672791806934996733750375149702067712970875387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc67a7976c42cf622661b8a0d9fdbc8461f364ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaslmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasworkprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmci.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texaswages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texaslmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmci.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasworkprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.twc.texas.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079c3da222a41ae59f951cf998e83b4886d96096c6372d7df363fcb09018d31faa8364273f2a3d1c69b423d3976eba39694642920579c749bbe500e7174294267b3a84c9c1737f64b7afcb1cda5194a69ec298876c4cc7d9cdda6934b9623719e85e2e14f34aa5800f4ad02b22b1135b146d58fd0c10c67ad5b47cfaf1afc14911e940eb172aead69d66aeccb170ae5c0a555c6c4bd12e408ffb8908d6a5cf7fbe5ec9dbe105815245e34de3991360d92ac1b05fede528588f6bd9a781bff7e2356ec2a18a75e6a43b5144ed44a9405164c78b7773ea552c52b6de9c7a86380116fc76b84541e8598507749a7650d43806ffa8c0bb66323f22d0ad6ba570adb40