*.doc.nv.gov

- State of Nevada -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:f8:81:2f:8b:d9:ed:3e:c8:ba:81:b9:5f:63:b1:1d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Nevada

Organization: State of Nevada
State / Province: Nevada
Locality: Carson City.
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f8:81:2f:8b:d9:ed:3e:c8:ba:81:b9:5f:63:b1:1d
Serial Number (int): 10594905789255431225152696149577281821
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bf:30:0d:cb:58:0b:b5:aa:80:be:30:1f:04:af:56:37:26:69:1c:53
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d8:27:b8:5b:d0:12:be:89:41:3e:82:e4:a0:3e:71:fa:80:c4:19:4e
Fingerprint (sha256): 06:db:25:55:b8:a0:ac:b5:a3:98:3e:cc:25:e5:c2:57:09:01:b1:8c:11:e9:18:f5:e6:10:c1:64:47:51:a8:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for certificate *.doc.nv.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.doc.nv.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.doc.nv.gov
doc.nv.gov

Other certificates including the domain name nv.gov

(limited to 100 certificates)
13.distilcdn.com
*.ndep.nv.gov
imperva.com
apps.detr.nv.gov
securemail.nv.gov
san-b1.granicusgovaccess.net
gcbweb.nv.gov
detr.nv.gov
dmv.nv.gov
ptboard.nv.gov
Wse2.its.nv.gov
agowa.ag.nv.gov
5706316634914816-fe1.pantheonsite.io
13.distilcdn.com
egrants.nv.gov
prod.22.slot.cdn.salesforce-communities.com
WebIZ.nv.gov
test.detr.nv.gov
col.housing.nv.gov
tls.automattic.com
dg-0072-d73c216.client-tls.adestra.com
mail.douglas.nv.gov
red.prod.secure.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
*.doc.nv.gov
nsla.nv.gov
nvsilverflumetest.nv.gov
www.stemhub.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
5706316634914816-fe1.pantheonsite.io
firefly.iarc.nv.gov
mail.douglas.nv.gov
nwvp.nv.gov
gcbger.nv.gov
search.usa.gov
*.dwss.nv.gov
parks.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
dhcfp.nv.gov
gaming.nv.gov
WebIZtrn.nv.gov
wse2.its.nv.gov
prod.22.slot.cdn.salesforce-communities.com
nevvoter.nv.gov
*.nvcourts.nv.gov
prod.22.slot.cdn.salesforce-communities.com
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
owinn.nv.gov
NVLIVE.dmv.nv.gov
izrecord.nv.gov
nsla.nv.gov
5706316634914816-fe1.pantheonsite.io
hybrid.nv.gov
5706316634914816-fe1.pantheonsite.io
access.detr.nv.gov
5706316634914816-fe1.pantheonsite.io
webconf.doe.nv.gov
*.ndep.nv.gov
5706316634914816-fe1.pantheonsite.io
dot.nv.gov
dcnr.nv.gov
5706316634914816-fe1.pantheonsite.io
vms.puchasing.nv.gov
5706316634914816-fe1.pantheonsite.io
vitals.nv.gov
autodiscover.dot.state.nv.us
Webiz.nv.gov
*.shpo.nv.gov
tls.automattic.com
mynpwr.nv.gov
5706316634914816-fe1.pantheonsite.io
dmvintrl.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
nwvp.nv.gov
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
di.nv.gov
*.shpo.nv.gov
*.ndep.nv.gov
mail1.iarc.nv.gov
ngma.bighorn.doe.nv.gov
nvsilverflumetest.nv.gov
nwvp.nv.gov
tls.automattic.com
frontier.iarc.nv.gov
epayments.ndep.nv.gov
pasrr.medicaid.nv.gov
viewlv.its.nv.gov
di.nv.gov
prod.22.slot.cdn.salesforce-communities.com
gisappdev.dot.nv.gov
epayments.ndep.nv.gov
d2wse.its.nv.gov
npwr.nv.gov
egrants.nv.gov

Certificate

The complete raw certificate details for *.doc.nv.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99B6aAPZae+lKifBGRvk
HFPYD7me88Y9xmHZS0jh3gvLsTO6wstzspLeJ9FIw0AdcgLnNj2gCknmlj23Ml+I
UAJ85d+cfHHMCFtJK1sv4GZR0blX7/ay9udd1eBruQkHVEqY5bE8Ihl8s/dLwjjw
nC7w9pfvOaJWrTHutzDgvGZk9HebvJoHVT1/wi7BN3uuAnPlkXgCzIOHsqA8L8aa
LLb2QN9hEdVZeaopr4xrBJvD4Sj06GN4QTfQnXvVCfxbGwf1L4FbnMKLkMTlQM98
xOkuR2qx/miq40qHgN2Hnjwq0KeohQ4f8LBQG/EwCmk9r1krUplih+U+Tk8Ir/nw
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10594905789255431225152696149577281821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nevada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carson City.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Nevada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.doc.nv.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31283665733778414794082213019067353047027405297919364164332396611400440354315184444096944468406606322473546845568886991644340282115020021005350205446799527339751100111920775164553057516472753658518807203600535776969291686290814493557237814392773325520898391507051041486102610785590527816522633072667818669040400102821606755686652717474683591089578951378724466522636598218417478741989681955564010986166010001430190041950579049812909693709685282546914217375694731197972785962247383572989274871482825277398648177889020371000843740254501191407016703928216072385911124123307678382694485037553601603931311611849301007396981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf300dcb580bb5aa80be301f04af563726691c53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doc.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.nv.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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