*.emp.state.or.us

- State of Oregon -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:07:47:03:ff:90:6f:96:e2:a7:32:d8:55:b0:ef:ba was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State of Oregon

Organization: State of Oregon
State / Province: Oregon
Locality: Salem
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:07:47:03:ff:90:6f:96:e2:a7:32:d8:55:b0:ef:ba
Serial Number (int): 4025470433224128011995034882061430714
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5d:30:e3:bb:c5:c4:32:fa:e4:be:0f:79:2c:74:95:10:60:83:7c:4d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 20:59:20:d2:c0:bb:fd:5b:04:2a:0c:0a:5b:f3:1b:6c:2b:47:12:95
Fingerprint (sha256): 0a:62:e3:b7:c1:64:38:2c:f1:56:3a:c8:10:b3:15:be:bd:32:55:c0:e5:09:59:82:bb:6c:1e:22:22:d4:33:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.emp.state.or.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.emp.state.or.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.emp.state.or.us

Other certificates including the domain name state.or.us

(limited to 100 certificates)
asleds2kwebprod.hr.state.or.us
micore.prd.state.or.us
techmedweb.omb.state.or.us
*.leg.state.or.us
mds.hr.state.or.us
talkingbooks.osl.state.or.us
surveys.dhsoha.state.or.us
qa.portal.sos.state.or.us
inside.ode.state.or.us
empportal.emp.state.or.us
risktool.ocjc.state.or.us
lrn.hr.state.or.us
asm.secure.sos.state.or.us
*.deq.state.or.us
digital.osl.state.or.us
dfpatime.odf.state.or.us
ferns.odf.state.or.us
a-pebbtest.state.or.us
*.das.state.or.us
dojdev.canvasvps.com
intranet.ojd.state.or.us
dasapp.state.or.us
libcal.osl.state.or.us
*.osp.state.or.us
nrimp.dfw.state.or.us
appellate-efile.ojd.state.or.us
*.oregonlegislature.gov
*.odoe.state.or.us
ojdmail1.ojd.state.or.us
pmtinfo.das.state.or.us
sharedsystems-dev.dhsoha.state.or.us
inside.energy.state.or.us
apps.wrd.state.or.us
mallard.dfw.state.or.us
omsis.ode.state.or.us
insidetest.dhsoha.state.or.us
doc400web.state.or.us
mail.ost.state.or.us
libguides.osl.state.or.us
intranet.dhs.state.or.us
orcatrain.dhsoha.state.or.us
login.lottery.state.or.us
*.ode.state.or.us
hdchlp1.deq.state.or.us
bitlocker.ad.state.or.us
district.ode.state.or.us
www.ojd.state.or.us
apps.state.or.us
pmtinfo.das.state.or.us
ipam.state.or.us
mdm.cfb.state.or.us
or-vitalevents.hr.state.or.us
ACCESS-01.DHSOHA.STATE.OR.US
www.dhs.state.or.us
elite.hlo.state.or.us
lyncfe-test.ad.state.or.us
*.deq.state.or.us
dojdev.canvasvps.com
cbsweb2.cbs.state.or.us
intime.oya.state.or.us
cbsweb2.cbs.state.or.us
epiweb.oha.state.or.us
dojdev.canvasvps.com
phinms.hr.state.or.us
district.ode.state.or.us
asleds2kwebprod.hr.state.or.us
access-01.dhsoha.state.or.us
www.ojd.state.or.us
doc400web.state.or.us
intime.oya.state.or.us
outlook.odf.state.or.us
arcgis.wrd.state.or.us
my.oda.state.or.us
*.dasapp.state.or.us
navigator.state.or.us
webmail.osmb.state.or.us
catfish.dfw.state.or.us
mail.dhs.oregon.gov
*.emp.state.or.us
*.dhsoha.state.or.us
or-vitaleventstest.hr.state.or.us
egov.hcs.state.or.us
*.deq.state.or.us
*.dhsoha.state.or.us
webcon.ode.state.or.us
people.dash.das.state.or.us
visual-data.dhsoha.state.or.us
nwrnbs.state.or.us
mailsvr2.doj.state.or.us
www.deqtoo.org
bidev.dhsoha.state.or.us
bprod.prd.state.or.us
*.deq.state.or.us
files.mil.state.or.us
micore.prd.state.or.us
qa.secure.sos.state.or.us
*.deq.state.or.us
www.dhs.state.or.us
*.leg.state.or.us
apps.wrd.state.or.us

Certificate

The complete raw certificate details for *.emp.state.or.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4025470433224128011995034882061430714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.emp.state.or.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776760884866130043076024147145563998197058983460321793959172677097332410375479997216507244214913739781287369343278811428274975514046471072576751772920818207218883753518313983153764417342168804445080181576377135094465056078978939983974434687137700710724692671051518548337668256116627155091663550202335475098635828765926802424043341235337231497382731886688402444102044616896656818750045421115800179621199918949269810680649286383062669487807941020951903978981652583389960937714022283130814011728420819496768510253050892875997689984323313067874794670803065964073723651119644742461893598748486042386131237112620551113587003909402899175977131324363428385872279815107561031072886864254337267188539981530875530118734426784725633270108163368521089552582543759869280586382216862269638694112211523450976475850658353046295163598037217558802340237205545285849697258985231095510591472758434258200591752700958018585436935236758622040570449118579280976671142437394406776818656241828202732246306878242036759699261704585284226000256614228311010032229458321309576018045173959037342087539935816285058416844416296856592667841570247662840556135232511717573904526068182332225566250679340657998897486191518216508477587096409181364646155411887236231300212103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d30e3bbc5c432fae4be0f792c74951060837c4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emp.state.or.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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