*.dot.ga.gov

- Georgia Department of Transportation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:6d:25:fb:b9:25:52:d0:59:53:46:90:ed:83:68:46 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Georgia Department of Transportation

Organization: Georgia Department of Transportation
State / Province: Georgia
Locality: Atlanta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:6d:25:fb:b9:25:52:d0:59:53:46:90:ed:83:68:46
Serial Number (int): 12529782712368513409484017186996709446
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:99:79:a8:0c:24:9e:9f:fd:8b:2c:2b:f4:ef:03:c2:b4:a2:d9:27
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e9:28:54:64:cb:8d:50:06:df:f3:ef:e6:70:3e:92:30:91:c7:1f:71
Fingerprint (sha256): 0c:5c:e5:48:e0:fb:d7:d9:3b:2e:ff:a6:7c:34:44:54:b3:e1:2f:2c:f5:dc:0b:b7:41:ed:47:7c:42:9d:8e:8d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.dot.ga.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dot.ga.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dot.ga.gov
dot.ga.gov

Other certificates including the domain name ga.gov

(limited to 100 certificates)
vpn.gsfic.ga.gov
maps.crc.ga.gov
*.audits.ga.gov
5657535201673216-fe3.pantheonsite.io
desk.nrroofs.com
docimg.spo.ga.gov
rdb.gema.ga.gov
csrarc.ga.gov
www.bats.ga.gov
imppub.gema.ga.gov
lists.dor.ga.gov
*.dbhdd.ga.gov
service-desk.awansoft.biz
eresponse.gdol.ga.gov
helpdesk.tranter.com
gtaconnect.cloud.ga.gov
ready.ga.gov
sslx.gta.ga.gov
lists.dor.ga.gov
*.gema.ga.gov
*.audits.ga.gov
*.gema.ga.gov
testservices.georgia.gov
*.audits.ga.gov
access.gba.ga.gov
helpdesk.brownbear.com
cwl.status.cloudsigma.com
*.wiki.ga.gov
www.srta.ga.gov
helpdesk.brownbear.com
www.legis.ga.gov
learning.gvra.ga.gov
csrarc.ga.gov
learning.gvra.ga.gov
support.precisio.services
gateway.ga.gov
ethics.ga.gov
*.gema.ga.gov
*.gema.ga.gov
*.dbhdd.ga.gov
boacd19.gdol.ga.gov
itsupport.ghllc.com
csrarc.ga.gov
*.gema.ga.gov
gaefile.dor.ga.gov
atltransit.ga.gov
service-desk.awansoft.biz
training.gema.ga.gov
*.audits.ga.gov
ersexpe01.ers.ga.gov
metropax.doit.dev.br
webmail.gdol.ga.gov
*.doas.ga.gov
*.gta.ga.gov
*.audits.ga.gov
*.audits.ga.gov
webmail.dot.ga.gov
help.revian.com
help.simplesclique.com.br
www.cybercenter.georgia.gov
*.hpd.ga.gov
service-desk.awansoft.biz
dellweb03.sog.ga.gov
bk.dca.ga.gov
support.wisdomtree.com.au
*.sos.ga.gov
sitcmv.dor.ga.gov
georgiamortgageassistance.ga.gov
servicedesk.cannondesign.com
service-desk.awansoft.biz
*.dbhdd.ga.gov
*.audits.ga.gov
support.soriansolutions.com
*.doas.ga.gov
*.drives.ga.gov
qualityrated.decal.ga.gov
ethics.ga.gov
dcs-cisco-edge-2.dcs.ga.gov
vpn.dca.ga.gov
*.doas.ga.gov
*.gema.ga.gov
5657535201673216-fe3.pantheonsite.io
helpdesk.brownbear.com
management.gsfic.ga.gov
*.audits.ga.gov
*.osah.ga.gov
service-desk.awansoft.biz
*.sbwc.ga.gov
*.gema.ga.gov
*.dot.ga.gov
servicedesk.pap.ga.gov
www.coastalrc.ga.gov
cdbg.dca.ga.gov
apps.dca.ga.gov
serviceportal.dot.ga.gov
*.dds.ga.gov
secure.ers.ga.gov
remote.gmrc.ga.gov
*.sos.ga.gov
atendimento.agenteverde.com.br

Certificate

The complete raw certificate details for *.dot.ga.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTQ+Ky4dFNid/PTxiufC
ishsTqsdsrm1RNomDIKjPj6kSlhz2PPxAT8BWpWxUyB9M2S0fGiDsdJnESRyvv5W
22478CvQZVm6UqRzf+dWNF6kTaAbAZj2OPWw+Nhs2YkPK4pvYW0sIDDMP8/HrEvP
NLLZ1LpCWy/ERc9/vjvIHSQLDPDZK/64K430cxGOUbpXWQf7luZBZGqgAODm9SL9
eA4ZNYH/8YGcdkZ73ca2MWUc6Eun3upfzmF8UZ7Ayq4t7DBYFLEOvXhgIygUdSm2
oVXSdyeihmH66AS0ob3eXmZMcZjyoW5wDIVfoT2oYa4dtjqTKd6MLlBvabGUuODq
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12529782712368513409484017186996709446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dot.ga.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22369941886700084637169944835232854501795099216145318497931307558091194502280302804882227036517363485543143975617922077918682224676600715232020442532534676092520926307751200072737588523267293915443070771896228439985340498996435889389566730117412370562506959989143870389302941462705844388804552855875967772293596929045239264739030321582712384716715006687962028948428186863538368558779194776012936489001516087275167717895597921848287029405532622431474571155411842118136695155824644040165500485067892176138549200892518272615098779820472402261718725431704469289755027719109407032465750090799235347765733631695681944087221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							899979a80c249e9ffd8b2c2bf4ef03c2b4a2d927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dot.ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.ga.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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