blogs.fda.gov

- U.S. Food and Drug Administration -

Issued by Verizon Akamai SureServer CA G14-SHA1

About this certificate

This digital certificate with serial number 50:e3:87:86:71:6b:92:be:5a:c8:c8:fc:12:19:39:48:86:f3:82:a7 was issued on by Verizon Enterprise Solutions.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

U.S. Food and Drug Administration

Organization: U.S. Food and Drug Administration
Organization unit: Blogs
State / Province: MD
Locality: Rockville
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 50:e3:87:86:71:6b:92:be:5a:c8:c8:fc:12:19:39:48:86:f3:82:a7
Serial Number (int): 461793336733172884031639632809873058536394818215
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ca:33:75:17:ec:5d:35:b6:1a:c0:59:01:62:fc:d5:12:49:4b:48:c4
AuthorityKeyId: dd:6c:80:7c:ba:b5:32:17:a5:84:41:40:f0:d2:04:66:13:2f:a9:90

Fingerprint (sha1): 27:8c:2e:d1:f2:db:66:f1:d2:a6:1e:05:3c:ca:00:1f:57:f5:7e:7b
Fingerprint (sha256): 08:6c:b2:fc:93:64:ac:bb:49:65:04:04:89:3d:3a:7f:48:52:14:0c:3a:4f:6e:d7:33:6d:8d:83:40:30:06:15

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.der

Revocation information

OCSP Server: http://vassg141.ocsp.omniroot.com
CRL Distribution Point: http://vassg141.crl.omniroot.com/vassg141.crl

Check the revocation status for certificate blogs.fda.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogs.fda.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogs.fda.gov

Other certificates including the domain name fda.gov

(limited to 100 certificates)
collaborationcqauth1.fda.gov
sslvpn.fda.gov
fctakademie.com
www.access.fda.gov
adc-sfbfep1.fda.gov
trlm-ng-scan.preprod.fda.gov
www.fda.gov
rapid.fda.gov
medsun.fda.gov
poca-public.fda.gov
sslvpn.fda.gov
fms-5.collaboration.fda.gov
timsmmtamobiletrain.fda.gov
www.fda.gov
updates.fda.gov
impool2.fda.gov
scicsa.fda.gov
edkb.fda.gov
api.fda.gov
esgadmin.fda.gov
accessdata-preprod.fda.gov
esgtest.fda.gov
esghosted.test.fda.gov
www.accessdata.fda.gov
itacs.fda.gov
info1test.cfsan.fda.gov
api.fda.gov
dnahive.fda.gov
purplebooksearch.fda.gov
fms-4.collaboration.fda.gov
fms-1.collaboration.fda.gov
oralcms-test.fda.gov
esg.fda.gov
gmvs.fda.gov
esaf.preprod.fda.gov
cfsan-caemsprp.fda.gov
userfees.fda.gov
iwsfdacbp.dev.fda.gov
dcg32.test.fda.gov
blogs.fda.gov
extoam.preprod.fda.gov
mpris.preprod.fda.gov
esgtestreg.preprod.fda.gov
xmsapps.fda.gov
www-aws.fda.gov
tims.fda.gov
ufsp2.preprod.fda.gov
itacs.fda.gov
fis.fda.gov
ufsp3.preprod.fda.gov
collaborationcqpub1.fda.gov
fissweb.preprod.fda.gov
myapps-val.fda.gov
precision.fda.gov
www.access.preprod.fda.gov
faers2-validator.fda.gov
ctpportal.fda.gov
portes.fda.gov
tims.fda.gov
ceportal.fda.gov
www.access.fda.gov
ofemsapps.fda.gov
www.fda.gov
api.fda.gov
cfsanappsexternal.fda.gov
sso3.preprod.fda.gov
www.fda.gov
pvreports-rapid.preprod.fda.gov
mvpn.fda.gov
ngtims.fda.gov
sso.esaf-pilot.fda.gov
xm-preprod.fda.gov
epublication.preprod.fda.gov
ceportal.fda.gov
api.fda.gov
ngtimsmobile.preprod.fda.gov
ngtims.preprod.fda.gov
userfees.fda.gov
wcms-test-internet.fda.gov
extbi.preprod.fda.gov
api.fda.gov
timstrain.fda.gov
staging.preprod.fda.gov
epublication.fda.gov
fms-2.collaboration.fda.gov
www.fda.gov
ngtims.fda.gov
nfsdx.fda.gov
search.usa.gov
www.fda.gov
www.fda.gov
cfsan-onlinesubmissions.preprod.fda.gov
esg.fda.gov
collaborationcqpub1.fda.gov
fms-1.collaboration.fda.gov
extaccess.fda.gov
datadashboard.fda.gov
blogs.fda.gov
fissweb.preprod.fda.gov
mprisacrdr.preprod.fda.gov

Certificate

The complete raw certificate details for blogs.fda.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PfMzzJYbVTbJLQA+Jqf
A3sAd8EUh4qysn3aKMjcT0mdUklvMb67F6tdgXL/FFMdfOiBW+QN12DF22ovzgCm
qbH0xKSKbZXmZ0GLJEHIomySQZF5Y+29z/PlnpW+szccKnOTA5MAfaxrb9VRsTQQ
AzQYqpCkz8FO8k8V0nw/ntTBO1K6qB5MM2gPuWrHXwxRehWDYRtCKVg8RSkCP7UR
MHRTcpsTwwleGCnO3kGR/5/3Ink2q07B9Wz4DscULDoYfUhpe1HREZmxxaBt5UkM
1HoQkVuiruaJqSPNFVk/85Pkb2k5vomExMVu72UQgLPVXEPPZqNEN1i21yTyS8UM
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 461793336733172884031639632809873058536394818215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-30 18:38:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-30 18:38:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Food and Drug Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Blogs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogs.fda.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28904528284554896822213358481962082970226295872001629634831766672073594951430361935411249010032795458220380475445197582180380532018965217350743297429092804129390448629063291628127890568231159447116319796717638693653459385044338131170233001168035636657364086385183030942670637834216514982628846710172307894370826233013177931454487651578942270426678853803339536315199048322443364184315257463955501328535987852158725379649860920795248955365259229877935466181160227625196363296636823851032156335773468264110636512771151429235133178237501854529230438231984294841548603999282011435139562444668055960776984110603394202537091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.fda.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd6c807cbab53217a5844140f0d20466132fa990
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.crl.omniroot.com/vassg141.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca337517ec5d35b61ac0590162fcd512494b48c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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