ctpportal.fda.gov

- US Department of Health and Human Services -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:87:0a:52:e9:df:e7:64:c8:59:81:4d:c4:98:d5 was issued on by IdenTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Department of Health and Human Services

Organization: US Department of Health and Human Services
State / Province: District of Columbia
Locality: Washington
Country: US

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:01:87:0a:52:e9:df:e7:64:c8:59:81:4d:c4:98:d5
Serial Number (int): 85078522970331776689129009170587359445
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 59:7e:fd:0c:e5:a9:45:51:de:50:75:9a:12:67:42:f7:9e:10:ee:65
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): ce:61:11:b5:ef:ed:53:37:fd:3f:99:ed:95:dc:07:03:e2:c7:fa:0c
Fingerprint (sha256): 0b:c7:9c:a4:04:41:79:b6:9f:5e:88:59:06:be:5f:b9:8c:65:92:9c:3c:4a:5f:c3:94:9b:fa:e8:11:45:ec:88

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate ctpportal.fda.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctpportal.fda.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctpportal.fda.gov

Other certificates including the domain name fda.gov

(limited to 100 certificates)
collaborationcqauth1.fda.gov
sslvpn.fda.gov
fctakademie.com
www.access.fda.gov
adc-sfbfep1.fda.gov
trlm-ng-scan.preprod.fda.gov
www.fda.gov
rapid.fda.gov
medsun.fda.gov
poca-public.fda.gov
sslvpn.fda.gov
fms-5.collaboration.fda.gov
timsmmtamobiletrain.fda.gov
www.fda.gov
updates.fda.gov
impool2.fda.gov
scicsa.fda.gov
edkb.fda.gov
api.fda.gov
esgadmin.fda.gov
accessdata-preprod.fda.gov
esgtest.fda.gov
esghosted.test.fda.gov
www.accessdata.fda.gov
itacs.fda.gov
as2safetyreporting.preprod.fda.gov
info1test.cfsan.fda.gov
api.fda.gov
dnahive.fda.gov
purplebooksearch.fda.gov
fms-4.collaboration.fda.gov
fms-1.collaboration.fda.gov
oralcms-test.fda.gov
esg.fda.gov
gmvs.fda.gov
esaf.preprod.fda.gov
cfsan-caemsprp.fda.gov
userfees.fda.gov
iwsfdacbp.dev.fda.gov
dcg32.test.fda.gov
blogs.fda.gov
extoam.preprod.fda.gov
mpris.preprod.fda.gov
esgtestreg.preprod.fda.gov
xmsapps.fda.gov
www-aws.fda.gov
tims.fda.gov
ufsp2.preprod.fda.gov
itacs.fda.gov
fis.fda.gov
ufsp3.preprod.fda.gov
collaborationcqpub1.fda.gov
fissweb.preprod.fda.gov
myapps-val.fda.gov
force-dsc.fda.gov
precision.fda.gov
www.access.preprod.fda.gov
faers2-validator.fda.gov
ctpportal.fda.gov
portes.fda.gov
tims.fda.gov
ceportal.fda.gov
www.access.fda.gov
ofemsapps.fda.gov
www.fda.gov
api.fda.gov
cfsanappsexternal.fda.gov
sso3.preprod.fda.gov
www.fda.gov
pvreports-rapid.preprod.fda.gov
mvpn.fda.gov
ngtims.fda.gov
sso.esaf-pilot.fda.gov
xm-preprod.fda.gov
epublication.preprod.fda.gov
ceportal.fda.gov
api.fda.gov
ngtimsmobile.preprod.fda.gov
ngtims.preprod.fda.gov
userfees.fda.gov
wcms-test-internet.fda.gov
extbi.preprod.fda.gov
api.fda.gov
timstrain.fda.gov
staging.preprod.fda.gov
epublication.fda.gov
fms-2.collaboration.fda.gov
www.fda.gov
ngtims.fda.gov
nfsdx.fda.gov
search.usa.gov
www.fda.gov
www.fda.gov
cfsan-onlinesubmissions.preprod.fda.gov
esg.fda.gov
collaborationcqpub1.fda.gov
fms-1.collaboration.fda.gov
extaccess.fda.gov
datadashboard.fda.gov
blogs.fda.gov

Certificate

The complete raw certificate details for ctpportal.fda.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopeC4qSS2FV318yRupr1
xw8oYVN+MH4hg1KRsfluMcOIUV/5N7PXtxb+PRjefvsPq/CxgTSZnsL8rq4826R7
k5SBa7CAFAy3uMMOOdlI6U6qFlEZgeS8+Jbc6PvC4dTGaAmTCRAYIFbrb7z+KnDu
a+qIhvn8DtW0DznErx6+hjOabXvEsLz6gSD6+gaBxWLlV8ahxQ96e5Qb6QW7tl9d
0qPFkcEgoAgJ4W+Ycwn4qmEouY/Ek/QQf3GuDB6/Mpio+NkZI0tCMxY+ZPYqQJ+e
ZnweAgjG38/oy+eIFfzjHkKrHnWsWWqQtBlN06ah7Gd6kApouRgDwZaUOQMEX+MK
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078522970331776689129009170587359445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 17:16:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 17:15:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctpportal.fda.gov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Department of Health and Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20525318396722200441082667196578501259857183280257163347776436288871345939467383910743144404610615532158682570459479419711166356656117725833957067941018580660786174660451300124486938439794505958236603281946903904265262132866620681197552827252072151834800984368534791981345269432596084019932784557100605823351957980849821038959266760388849824472388725611550793921281076806545576844110858113561094042564174793083120581637560718363410818837568866992269830605412033358465510772852350868092391543568318543740494823388196115769996831145402336643831220729112860759426346675185309639771902584677110508428158040790165293828747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctpportal.fda.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							597efd0ce5a94551de50759a126742f79e10ee65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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