fs.cityofwhittier.org

- City of Whittier -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 29:c0:15:1f:f7:77:00:56:00:00:00:00:50:f6:12:89 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Whittier

Organization: City of Whittier
State / Province: California
Locality: Whittier
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:c0:15:1f:f7:77:00:56:00:00:00:00:50:f6:12:89
Serial Number (int): 55495697287281613505833676246034551433
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cf:38:3c:2e:2e:db:15:2d:59:0b:a7:b1:f0:a4:bc:ad:77:aa:18:28
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 93:b8:98:a3:3d:5c:fd:a4:59:38:5c:da:b2:ef:8e:4e:e0:bf:ad:ae
Fingerprint (sha256): 0f:5e:72:62:54:e9:cf:1a:96:d1:42:bf:01:4c:5e:8d:11:95:b9:2f:a4:cf:20:7f:64:55:d6:a1:f8:e8:e3:7e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fs.cityofwhittier.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.cityofwhittier.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.cityofwhittier.org

Other certificates including the domain name cityofwhittier.org

(limited to 100 certificates)
mail.whittierch.org
san-g2.granicusgovaccess.net
online.cityofwhittier.org
cityofwhittier.org
helpdesk.deistermachine.com
guest.cityofwhittier.org
fs.cityofwhittier.org
mail.whittierch.org
support.cityofwhittier.org
helpdesk.gapsi.com
online.cityofwhittier.org
san-a2.granicusgovaccess.net
help.lafayetteco.gov
online.cityofwhittier.org
techsupport.maxsold.com
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
support.sifco.com
san-g2.granicusgovaccess.net
hermes.whittierch.org
mail.whittierch.org
support.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
*.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
support.sifco.com
techsupport.maxsold.com
cityofwhittier.org
san-g2.granicusgovaccess.net
helpdesk.deistermachine.com
mail.whittierch.org
www.cityofwhittier.org
support.cityofwhittier.org
online.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
mail.whittierch.org
help.lafayetteco.gov
mail.whittierch.org
h2oremote.cityofwhittier.org
online.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
fs.cityofwhittier.org
online.cityofwhittier.org
hermes.whittierch.org
hermes.whittierch.org
cityofwhittier.org
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
san-f2.granicusgovaccess.net
san-a2.granicusgovaccess.net
fs.cityofwhittier.org
guest.cityofwhittier.org
help.lafayetteco.gov
san-g2.granicusgovaccess.net
online.cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
mft.cityofwhittier.org
helpdesk.gapsi.com
san-a2.granicusgovaccess.net
mft.cityofwhittier.org
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
cityofwhittier.org
online.cityofwhittier.org
san-g2.granicusgovaccess.net
san-g2.granicusgovaccess.net
guest.cityofwhittier.org
guest.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
mft.cityofwhittier.org
online.cityofwhittier.org
cityofwhittier.org
san-g2.granicusgovaccess.net
cityofwhittier.org
techsupport.maxsold.com
cityofwhittier.org
mail.cityofwhittier.org
www.cityofwhittier.org
san-a2.granicusgovaccess.net
techsupport.maxsold.com
mail.whittierch.org
www.cityofwhittier.org
fs.cityofwhittier.org
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
www.cityofwhittier.org

Certificate

The complete raw certificate details for fs.cityofwhittier.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12OSjL7I1nLKg8GvLgNW
fQHsATAPxTv1HGHRK6Q4iiKChJMtb9TSjC+ZrtOg/fMkQZJYUnO3orPJVsKw1UqR
F2nthn4ltJ1tqSAoIgQUBmtxPa9wVSbvmPDGQeyQiN3/8swyTcNWzYCXa2H3YQDH
sFxfbWzehV3ia5sauviwWO2jUpgxJLw/qGnkExofE5ri5ygcCA5CLlVvbvX4FNIF
CEzbIkQXWtP+Ac36gQLC90LKUzcw3ISbyTdXMGq05F+36GKUOnVJKQC6R51m9rrZ
2Jorf6LDYtFCEwXRsGNOSyZeG+FkpAd/+hYdvUM6jf3DaPIbiBEnthbBf/nNX5WR
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55495697287281613505833676246034551433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 10:52:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 11:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whittier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Whittier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs.cityofwhittier.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27190336577798663057494884167554057162417715907847275660168246236284733033255002647367148217024287524239606495733290536648680518045781007801341767242823484745573519412590645088638951240981603679872915703697250730804091338229612622738164994212092790871319905187469869778848191572106752044363607937824576220524965679293101388101366739656599503083634135746085513895617848283220832918000252177929131709032809904940049732138045506100079382933606173184422384111406437852694476291050016181445354068671364577811768103817633944561119881947159895883613364731205156855051921763877642731079542674556560244163711141834434897351089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.cityofwhittier.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf383c2e2edb152d590ba7b1f0a4bcad77aa1828
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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