oitbilling.alabama.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:37:ab:b1:95:ff:49:15:3c:cb:75:20:46:56:96:0d:2d was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oitbilling.alabama.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:37:ab:b1:95:ff:49:15:3c:cb:75:20:46:56:96:0d:2d
Serial Number (int): 344780036715312146407284153076458582314285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:d1:5a:85:99:5a:18:c9:15:2d:20:65:3c:58:6c:f5:1e:7d:87:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:0c:7e:7c:f8:fc:36:ad:a2:33:da:5b:5d:eb:2f:34:e6:dc:71:36
Fingerprint (sha256): 07:20:00:87:b3:6b:5f:9e:3e:e8:f9:d6:50:05:d3:6c:c1:bf:32:a8:bf:00:2b:80:29:46:88:16:a2:0e:cf:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oitbilling.alabama.gov

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oitbilling.alabama.gov

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cabilling.alabama.gov
isdbilling.alabama.gov
oitbilling.alabama.gov
www.cabilling.alabama.gov
www.isdbilling.alabama.gov
www.oitbilling.alabama.gov

Other certificates including the domain name alabama.gov

(limited to 100 certificates)
www.boards.alabama.gov
vpn.alabama.gov
opspretrial.alabama.gov
hblb.alabama.gov
gims.dys.alabama.gov
*.adss.alabama.gov
mattest.alabama.gov
nytd.dhr.alabama.gov
alabama.gov
www.mh.alabama.gov
pdmreporting.alabama.gov
emits.ema.alabama.gov
aidcc.alabama.gov
purchasing.alabama.gov
www.ogb.state.al.us
alabamacares-tst.alabama.gov
*.alabama.gov
digital.archives.alabama.gov
GCLportal.medicaid.alabama.gov
afrwc.alabama.gov
www.stemcouncil.alabama.gov
agikace.alabama.gov
caresdev.alabama.gov
*.vote.alabama.gov
ctf.alabama.gov
aesbl.alabama.gov
www.oppal.alabama.gov
va.alabama.gov
ctf.alabama.gov
caresdev.alabama.gov
joblink.alabama.gov
grants.ema.alabama.gov
www.support.revenue.alabama.gov
acesp.alabama.gov
www.ahc.alabama.gov
kids.ema.alabama.gov
www.openmeetings.alabama.gov
aldoi.gov
*.mh.alabama.gov
Expedite.medicaid.alabama.gov
oitbilling.alabama.gov
dhr.alabama.gov
scrap.alabama.gov
GCLQAS.medicaid.alabama.gov
www.ago.state.al.us
one.alabama.gov
amhc.alabama.gov
imperva.com
alabamacares-uat-tra.alabama.gov
aboc.alabama.gov
www.revenue.alabama.gov
estatenotice.medicaid.alabama.gov
alabama.gov
socialwork.alabama.gov
agcb.alabama.gov
mydhropi.alabama.gov
grants.ema.alabama.gov
tls.automattic.com
nytd.dhr.alabama.gov
tls.automattic.com
alabama.gov
oitbilling.alabama.gov
onedoor.alabama.gov
governor.alabama.gov
*.vote.alabama.gov
bels.alabama.gov
www.background.alabama.gov
sonicwall.ogb.alabama.gov
ctf.alabama.gov
cybersecurity.alabama.gov
leasingmgt.alabama.gov
www.asbpa.alabama.gov
Cayosoft.Alabama.Gov
alabama.gov
alison.legislature.state.al.us
treasury.alabama.gov
rfp.alabama.gov
dhr99aelewbsv.dhr.alabama.gov
agi.alabama.gov
uiclaimstracker.labor.alabama.gov
giftstest.rehab.alabama.gov

medicaid.alabama.gov
alabama.gov
alabama.gov
cardservices.alabama.gov
alabama.gov
main1.isd.alabama.gov
mydhropi.alabama.gov
cp-test.alabama.gov
dhr.alabama.gov
mydhr.alabama.gov
Expedite.medicaid.alabama.gov
alabama.gov
alabama.gov
open.alabama.gov
*.dcnr.alabama.gov
capitoleventspermits.alabama.gov
verify.alabama.gov
maps.alabama.gov

Certificate

The complete raw certificate details for oitbilling.alabama.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAxUZmxOcD/gHLCLaF/YO3
rHUiP7Ug+fZxno/S6JgajAwdh9h/1VPvFnngt4mWwJdyaVPSZrcdifY4lNfPajhd
C4oEGVZljPftjo4wdZdz8Nl8TdaMcyea+sYNnQoWmG/4OPmowmQxzyJW5O4fcIB2
Sxg/Q1efVc7ZQGRgdRk4NGdykz3l57wl3v31nMLmP8tkpVlFab8S7ZWQd7v1Vl+p
S0Hep52C+4vG6h/lYF4n7JZtmKZ/AdtK1n6M0vcjW8QapiP5NTpkcNPAgI9ULVcM
euAJsQbn83OGgjFbRVczAdVBFXTN4HMzx0nkxlnHjmN11pm/Zp+3KdadId/CuK9v
Ag4hWYg62e7RWADgD2WMvHWH72g7HdHEEQu5g7D+DLSFEykBISRJAlOupS/sgtcb
wbyPSCP9Gnlm0yHams8rahA+YyvSWjovCFPsb70St9tJcuPzrsQYOvMQpE+5UngW
6hRPwkGEwhTbwz7J3pDXlFIq0D8IzCYJSaxFt5tPnPwnAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344780036715312146407284153076458582314285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 14:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 14:00:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oitbilling.alabama.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4476914279143961204714715317522080506617535160848407602124805054184884338664442751924869414978422835655998021492189130136211197041667960518121815762295518731296499570342583746929953207621658421249821739518644758643195944280780064516290073440789396014614325036737653736382214343734908911595090127651946324645975625399292483040198881011969154932697228026838096063279641151135937333389923712563947776033354690161055769390367993225197943397203640932355877071242947457953489667644188270181940298524118187938414452391864303440043392762119429895346659158838631905532441076467268057384941279392682460010423458774673390126556952598563898735386012355292106430216488258887225466744700200076816780081489175266904833359566357597977018766848514502435894721412860416789255092246757870921381514014413459941468186341504168406154910585032363411858690454950397126236961629836942119250605517314421397928076744928620454642276867302435873938537511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1d15a85995a18c9152d20653c586cf51e7d87b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabilling.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isdbilling.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oitbilling.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabilling.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isdbilling.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oitbilling.alabama.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f80857e310000040300483046022100e2370a16434bd9ec3e84e4be3e8f243a32b50a96bfafcdd75b789e100fc149b4022100bf09a8e503fb8bc2f21fbe1a3c0f238178035f537659ace2200380af27851b400076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f80857ed1000004030047304502204fd1dda0750cdfe8ff564a3442ad65e93dfe0560f189f2b16328de832ee151e502210092d564b519f6e473c0c23916cf9767606f1b190933da6ddf1de40b6b44bee870
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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