NVLIVE.dmv.nv.gov

- State of Nevada Department of Motor Vehicles -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:66:3a:bd:83:8e:4f:c2:6b:5a:58:14:26:02:ea:66 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Nevada Department of Motor Vehicles

Organization: State of Nevada Department of Motor Vehicles
State / Province: Nevada
Locality: Carson City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:66:3a:bd:83:8e:4f:c2:6b:5a:58:14:26:02:ea:66
Serial Number (int): 1860033669949775690195882307144051302
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 71:1b:a0:19:84:89:f4:92:34:05:5b:1f:36:ba:5a:ac:db:c1:b1:a3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3d:13:89:ea:c1:2a:00:b2:b9:2c:86:f3:94:e7:72:81:ad:cc:b7:5d
Fingerprint (sha256): 0e:9e:25:86:06:a4:fe:c9:bb:c2:fe:95:8e:30:d2:08:23:51:77:c2:a5:ef:96:62:7a:61:9b:e3:75:29:0b:e4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate NVLIVE.dmv.nv.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NVLIVE.dmv.nv.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

NVLIVE.dmv.nv.gov

Other certificates including the domain name nv.gov

(limited to 100 certificates)
13.distilcdn.com
*.ndep.nv.gov
imperva.com
apps.detr.nv.gov
securemail.nv.gov
san-b1.granicusgovaccess.net
gcbweb.nv.gov
detr.nv.gov
dmv.nv.gov
ptboard.nv.gov
Wse2.its.nv.gov
agowa.ag.nv.gov
5706316634914816-fe1.pantheonsite.io
13.distilcdn.com
egrants.nv.gov
prod.22.slot.cdn.salesforce-communities.com
WebIZ.nv.gov
test.detr.nv.gov
col.housing.nv.gov
tls.automattic.com
dg-0072-d73c216.client-tls.adestra.com
mail.douglas.nv.gov
red.prod.secure.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
*.doc.nv.gov
nsla.nv.gov
nvsilverflumetest.nv.gov
www.stemhub.nv.gov
5706316634914816-fe1.pantheonsite.io
tmc.its.nv.gov
5706316634914816-fe1.pantheonsite.io
firefly.iarc.nv.gov
mail.douglas.nv.gov
nwvp.nv.gov
gcbger.nv.gov
search.usa.gov
*.dwss.nv.gov
parks.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
dhcfp.nv.gov
gaming.nv.gov
WebIZtrn.nv.gov
wse2.its.nv.gov
prod.22.slot.cdn.salesforce-communities.com
nevvoter.nv.gov
*.nvcourts.nv.gov
prod.22.slot.cdn.salesforce-communities.com
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
owinn.nv.gov
NVLIVE.dmv.nv.gov
izrecord.nv.gov
nsla.nv.gov
5706316634914816-fe1.pantheonsite.io
hybrid.nv.gov
5706316634914816-fe1.pantheonsite.io
access.detr.nv.gov
5706316634914816-fe1.pantheonsite.io
webconf.doe.nv.gov
*.ndep.nv.gov
5706316634914816-fe1.pantheonsite.io
dot.nv.gov
dcnr.nv.gov
5706316634914816-fe1.pantheonsite.io
vms.puchasing.nv.gov
5706316634914816-fe1.pantheonsite.io
vitals.nv.gov
autodiscover.dot.state.nv.us
Webiz.nv.gov
*.shpo.nv.gov
tls.automattic.com
mynpwr.nv.gov
5706316634914816-fe1.pantheonsite.io
dmvintrl.nv.gov
mail.douglas.nv.gov
5706316634914816-fe1.pantheonsite.io
nwvp.nv.gov
5706316634914816-fe1.pantheonsite.io
*.doc.nv.gov
di.nv.gov
*.shpo.nv.gov
*.ndep.nv.gov
mail1.iarc.nv.gov
ngma.bighorn.doe.nv.gov
nvsilverflumetest.nv.gov
nwvp.nv.gov
tls.automattic.com
frontier.iarc.nv.gov
epayments.ndep.nv.gov
pasrr.medicaid.nv.gov
viewlv.its.nv.gov
di.nv.gov
prod.22.slot.cdn.salesforce-communities.com
gisappdev.dot.nv.gov
epayments.ndep.nv.gov
d2wse.its.nv.gov
npwr.nv.gov
egrants.nv.gov

Certificate

The complete raw certificate details for NVLIVE.dmv.nv.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqluIcBIcOLW3pTUrQjmK
EgW6LbEMezTx0zx0Z1nr613yowK5hneGH2h+cKefc6i/vf5I9RGBt8Ur4YQBJLGh
ji1iAkUs8z5qhSgBeAoO0EaA2nhdAvJKRTMnOoTZdfzB6wFQTtgHg5EZJvrjUsOz
2lsNZKBvmtj7H2sR1eWrcTmcvlCqnxfiU9Vhh16KRRMfaS0vLC/15TWa+8+GSJ/f
W8eiPWWM1urt/yS+C260XLt+DS90cQmyg8Sc7vyddLHDGsIl0xIN9/d+y8Nm3qxk
UsBWDkb0sRoChf9ewHKmXjJhjf6RnSPYhVa6rNxhOnDHUYzS/x1L0W5bdFLz8JcA
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1860033669949775690195882307144051302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nevada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Nevada Department of Motor Vehicles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NVLIVE.dmv.nv.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21505648429100996120407962116390609469834599947944950983414666859910547878215671302707479706075411815699514946195087718246726803414444313968026649024187389779462444576389770002868075184175793190585986720708550967256416539302324832738121046190123267184488030510147242826413493356038845142993539824084381690903868557037135097178291597123519589212208804461813508096716880926971138439253946784766247923275805500402370528778899131654506894936322506195120317357985961272099965585852744419445833770410888618781608372859801677288090594250554563501286433229850347367069002932529607839208395845360778606666363478215781588074649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							711ba0198489f49234055b1f36ba5aacdbc1b1a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NVLIVE.dmv.nv.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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