webqa7.seattle.gov

- City of Seattle -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 78:91:a9:0f:bc:42:b7:a3:00:00:00:00:50:ed:f5:71 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Seattle

Organization: City of Seattle
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:91:a9:0f:bc:42:b7:a3:00:00:00:00:50:ed:f5:71
Serial Number (int): 160263671512586747751253567796883092849
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 04:59:b8:82:1a:f3:66:9f:99:83:ce:b0:c0:4e:b9:f8:35:cb:1d:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): be:3d:5c:36:80:a4:e5:08:42:d9:c5:f1:0c:5d:b3:e9:4d:61:88:78
Fingerprint (sha256): 09:d4:a1:21:ac:d0:c4:2e:a4:e8:89:4a:6c:49:8f:7a:71:13:5f:b7:f5:7a:d7:42:c3:f6:23:96:66:1b:40:84

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webqa7.seattle.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webqa7.seattle.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webqa7.seattle.gov

Other certificates including the domain name seattle.gov

(limited to 100 certificates)
acceladevextsvc.seattle.gov
tls.automattic.com
my.seattle.gov
vsrvcjisprod01.seattle.gov
housing.seattle.gov
alert.seattle.gov
atyourservice.seattle.gov
news.seattle.gov
welcoming.seattle.gov
www.spdblotter.seattle.gov
atyourservice.seattle.gov
murray.seattle.gov
gtechna-test.seattle.gov
powerlines.seattle.gov
techtalk.seattle.gov
harrell.seattle.gov
council.seattle.gov
spuconnect.seattle.gov
slice.seattle.gov
designreviewoutreach.seattle.gov
wald1.seattle.gov
login.seattle.gov
juarez.seattle.gov
homelessness.seattle.gov
communityconnector.seattle.gov
amwo.seattle.gov
www.seattle.gov
strauss.seattle.gov
cosip-api.seattle.gov
rainwise.seattle.gov
talk2.seattle.gov
cttab.seattle.gov
perspectives.seattle.gov
data.seattle.gov
citylight.seattle.gov
gisdata.seattle.gov
council.seattle.gov
herbold.seattle.gov
mobe.seattle.gov
inweb.seattle.gov
herbold.seattle.gov
council.seattle.gov
webeoc.seattle.gov
consultants.seattle.gov
slice.seattle.gov
centerspotlight.seattle.gov
mydpdservicesqa.seattle.gov
opengis.seattle.gov
centerspotlight.seattle.gov
email.seattle.gov
webqa6.seattle.gov
webqa7.seattle.gov
web1.seattle.gov
greenspace.seattle.gov
www.perspectives.seattle.gov
council.seattle.gov
seattlerdy.seattle.gov
bagshaw.seattle.gov
pgp.seattle.gov
www.frontporch.seattle.gov
gonzalez.seattle.gov
resupdates.seattle.gov
thebuyline.seattle.gov
housing.seattle.gov
maps.seattle.gov
slice.seattle.gov
parkways.seattle.gov
data.seattle.gov
connect.seattle.gov
data.seattle.gov
smcivrextqa.seattle.gov
capitalprojects.seattle.gov
obrien.seattle.gov
climatechange.seattle.gov
data.seattle.gov
frontporch.seattle.gov
cosip-api-stage.seattle.gov
www.seattle.gov
bagshaw.seattle.gov
spo.seattle.gov
civiform.seattle.gov
tls.automattic.com
connect.seattle.gov
email.seattle.gov
cosaccela.seattle.gov
itchat.seattle.gov
citylight.seattle.gov
accelaextsvc.seattle.gov
durkan.seattle.gov
news.seattle.gov
hrisapi.seattle.gov
sawant.seattle.gov
webqa6.seattle.gov
cos-stage-nlb.seattle.gov
www.thescoop.seattle.gov
married.seattle.gov
olp.seattle.gov
consultants.seattle.gov
web1.seattle.gov
durkan.seattle.gov

Certificate

The complete raw certificate details for webqa7.seattle.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYK0zfi9ByAM8O5mJKso
HGzXHttWMyYpOr5K4oww39BrH/vCzBBbFlevS+XWnZbku8MppEkC9QwHb3JCl67j
Yd+gOxsz89QKlqZSCHj+0L99k7kE6Oj7WE0DMVIjyLF1Z76+uCfyN5Sv9IsgD7FT
ER0SnimsqXOXr+gqLrAl0dMGYYRR/mJKL9vospI1+IF9tSSg/skimz0LdRg+BoZA
WQzsbeIPkW9roObdMwpcTsvEdIGF2YOKeWV/86xa+QfgVV1LKplITqnaAj0kaxtp
p5ZzU2lTlzUdxioHVTAJSUbz8T/CiX1iLtfMyE3HGgdkIAczzYeLq6RfHS/UFk6Q
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160263671512586747751253567796883092849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 23:45:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 00:15:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webqa7.seattle.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24933399741224967021737015336747442322670696941914530598974325633110700012395394426351173430747493294858783784809140717427217813826504907470070013679899101434838208537841074340751284788700279676960999684858981209393859997282677935741017184554291941923652556800310778356833697534922580926399728422982600207377333844122145809635550308815814952587528241677343786793142969873514084516753812978597683925462906324494379324218247875933306105772391037803591183047193473096540321470829338200362432786200123341854083514294791715674776533549103634051627580624081585919036475597710074207955628921118869816554793960105899581149437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webqa7.seattle.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0459b8821af3669f9983ceb0c04eb9f835cb1d8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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