serviceportal.dot.ga.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:dd:66:5f:74:ed:48:dd:9e:1a:2a:d8:5f:d7:4e:cd:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=serviceportal.dot.ga.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:dd:66:5f:74:ed:48:dd:9e:1a:2a:d8:5f:d7:4e:cd:0b
Serial Number (int): 343639199160667761829984318675167839440139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:a6:c5:0f:4f:85:8d:dc:3f:ab:c0:28:b0:da:e5:b2:a1:ec:80:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:49:a2:31:e0:1d:08:0a:67:63:36:95:bb:3c:68:ae:9c:16:46:1d
Fingerprint (sha256): 0c:9e:dc:db:56:cd:44:63:48:eb:b4:b8:ca:61:b6:96:53:5c:36:15:22:f9:95:21:ed:16:26:2d:88:06:de:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate serviceportal.dot.ga.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for serviceportal.dot.ga.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

serviceportal.dot.ga.gov

Other certificates including the domain name ga.gov

(limited to 100 certificates)
vpn.gsfic.ga.gov
maps.crc.ga.gov
*.audits.ga.gov
5657535201673216-fe3.pantheonsite.io
desk.nrroofs.com
docimg.spo.ga.gov
rdb.gema.ga.gov
csrarc.ga.gov
www.bats.ga.gov
imppub.gema.ga.gov
lists.dor.ga.gov
*.dbhdd.ga.gov
service-desk.awansoft.biz
eresponse.gdol.ga.gov
helpdesk.tranter.com
gtaconnect.cloud.ga.gov
ready.ga.gov
sslx.gta.ga.gov
lists.dor.ga.gov
*.gema.ga.gov
*.audits.ga.gov
*.gema.ga.gov
testservices.georgia.gov
*.audits.ga.gov
access.gba.ga.gov
helpdesk.brownbear.com
cwl.status.cloudsigma.com
*.wiki.ga.gov
www.srta.ga.gov
helpdesk.brownbear.com
www.legis.ga.gov
learning.gvra.ga.gov
csrarc.ga.gov
learning.gvra.ga.gov
support.precisio.services
gateway.ga.gov
ethics.ga.gov
*.gema.ga.gov
*.gema.ga.gov
*.dbhdd.ga.gov
boacd19.gdol.ga.gov
itsupport.ghllc.com
csrarc.ga.gov
*.gema.ga.gov
gaefile.dor.ga.gov
atltransit.ga.gov
service-desk.awansoft.biz
training.gema.ga.gov
*.audits.ga.gov
ersexpe01.ers.ga.gov
metropax.doit.dev.br
webmail.gdol.ga.gov
*.doas.ga.gov
*.gta.ga.gov
*.audits.ga.gov
*.audits.ga.gov
webmail.dot.ga.gov
help.revian.com
help.simplesclique.com.br
www.cybercenter.georgia.gov
*.hpd.ga.gov
service-desk.awansoft.biz
dellweb03.sog.ga.gov
bk.dca.ga.gov
support.wisdomtree.com.au
*.sos.ga.gov
sitcmv.dor.ga.gov
georgiamortgageassistance.ga.gov
servicedesk.cannondesign.com
service-desk.awansoft.biz
*.dbhdd.ga.gov
*.audits.ga.gov
support.soriansolutions.com
*.doas.ga.gov
*.drives.ga.gov
qualityrated.decal.ga.gov
ethics.ga.gov
dcs-cisco-edge-2.dcs.ga.gov
vpn.dca.ga.gov
*.doas.ga.gov
*.gema.ga.gov
5657535201673216-fe3.pantheonsite.io
helpdesk.brownbear.com
management.gsfic.ga.gov
*.audits.ga.gov
*.osah.ga.gov
service-desk.awansoft.biz
*.sbwc.ga.gov
*.gema.ga.gov
*.dot.ga.gov
servicedesk.pap.ga.gov
www.coastalrc.ga.gov
cdbg.dca.ga.gov
apps.dca.ga.gov
serviceportal.dot.ga.gov
*.dds.ga.gov
secure.ers.ga.gov
remote.gmrc.ga.gov
*.sos.ga.gov
atendimento.agenteverde.com.br

Certificate

The complete raw certificate details for serviceportal.dot.ga.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343639199160667761829984318675167839440139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 20:30:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 20:30:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'serviceportal.dot.ga.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686299628019036246138470838753099104475107413660347582832032585661419775888313452893633768602614010217351421859117265321091542248155838877872614093403787798479000015398335647627548025384446573203258825725202781236376676167448955466250815983652681824100085115763467084945406443772904515446634573163322026297174180278379601836357586267533007309009255580764428878093189554686382605262935574142884998013657821574642903799573457012952840409584368204187161389520690198860902093226268322384552705599128219258847566389586080947347412490275172220107586643559504616456372901266541982241428554144263289565358747291057081281028318533197312900879757517561210759899309798037770376351464550414370793981841327843668366375663166703685887020384944756698491105137386373165896339238525138609149684765577311968831484132457995688189458103410605642737161838507066733458623183050179417049681390348236325171286922356239206025020043891325594193600484632654117712939683921392242345393090030968680290858030993704895656687189118184289856117137170274886602747679518221279061749607793748456192024321889106614244577708921759679425560079580606304000896485361163024094460197753049322066559378247183365736068160506015730598535195546252947978275280000230030474663671773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eda6c50f4f858ddc3fabc028b0dae5b2a1ec8018
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceportal.dot.ga.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae2da0de0000004030046304402203ea63807daf6925204652bc18b3466e84e0e54f7739c5c2f7a632f65f1da4600022014ded329d58137eb5e6187739d992122270c70378191bcc155abf41914bee4c7007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae2da0e480000040300483046022100bf183f3942d566da96a59cec9056384ef937bb02f0990c542496c8a5e8fa211f022100f9f158948b1ef9eccb1dee378745047343bd3e24d8616c89da015d8589cdd94f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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