spo.seattle.gov

- City of Seattle -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 35:3d:66:a9:43:61:3b:34:48:d4:ab:7f:1b:1c:70:75 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Seattle

Organization: City of Seattle
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:3d:66:a9:43:61:3b:34:48:d4:ab:7f:1b:1c:70:75
Serial Number (int): 70767896101163244176932358204168106101
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 93:bd:90:03:b3:1d:7a:6c:64:53:6a:8e:bc:84:f3:f5:f8:92:30:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 77:b2:9c:19:93:00:3d:c5:e8:01:ca:0b:d2:66:c8:95:35:4b:fa:d9
Fingerprint (sha256): 0f:61:90:31:0d:a4:65:31:c3:b6:36:c3:43:21:d9:e1:4b:e6:1a:b4:e9:a3:4a:79:58:56:20:7c:3a:49:97:20

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate spo.seattle.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spo.seattle.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spo.seattle.gov

Other certificates including the domain name seattle.gov

(limited to 100 certificates)
acceladevextsvc.seattle.gov
tls.automattic.com
my.seattle.gov
vsrvcjisprod01.seattle.gov
housing.seattle.gov
alert.seattle.gov
atyourservice.seattle.gov
news.seattle.gov
welcoming.seattle.gov
www.spdblotter.seattle.gov
atyourservice.seattle.gov
murray.seattle.gov
gtechna-test.seattle.gov
powerlines.seattle.gov
techtalk.seattle.gov
harrell.seattle.gov
council.seattle.gov
spuconnect.seattle.gov
slice.seattle.gov
designreviewoutreach.seattle.gov
wald1.seattle.gov
login.seattle.gov
juarez.seattle.gov
homelessness.seattle.gov
communityconnector.seattle.gov
amwo.seattle.gov
www.seattle.gov
strauss.seattle.gov
cosip-api.seattle.gov
rainwise.seattle.gov
talk2.seattle.gov
cttab.seattle.gov
perspectives.seattle.gov
data.seattle.gov
citylight.seattle.gov
gisdata.seattle.gov
council.seattle.gov
herbold.seattle.gov
mobe.seattle.gov
inweb.seattle.gov
herbold.seattle.gov
council.seattle.gov
webeoc.seattle.gov
consultants.seattle.gov
slice.seattle.gov
centerspotlight.seattle.gov
mydpdservicesqa.seattle.gov
opengis.seattle.gov
centerspotlight.seattle.gov
email.seattle.gov
webqa6.seattle.gov
webqa7.seattle.gov
web1.seattle.gov
greenspace.seattle.gov
www.perspectives.seattle.gov
council.seattle.gov
seattlerdy.seattle.gov
bagshaw.seattle.gov
pgp.seattle.gov
www.frontporch.seattle.gov
gonzalez.seattle.gov
resupdates.seattle.gov
thebuyline.seattle.gov
housing.seattle.gov
maps.seattle.gov
slice.seattle.gov
parkways.seattle.gov
data.seattle.gov
connect.seattle.gov
data.seattle.gov
smcivrextqa.seattle.gov
capitalprojects.seattle.gov
obrien.seattle.gov
climatechange.seattle.gov
data.seattle.gov
frontporch.seattle.gov
cosip-api-stage.seattle.gov
www.seattle.gov
bagshaw.seattle.gov
spo.seattle.gov
civiform.seattle.gov
tls.automattic.com
connect.seattle.gov
email.seattle.gov
cosaccela.seattle.gov
itchat.seattle.gov
citylight.seattle.gov
accelaextsvc.seattle.gov
durkan.seattle.gov
news.seattle.gov
hrisapi.seattle.gov
sawant.seattle.gov
webqa6.seattle.gov
cos-stage-nlb.seattle.gov
www.thescoop.seattle.gov
married.seattle.gov
olp.seattle.gov
consultants.seattle.gov
web1.seattle.gov
durkan.seattle.gov

Certificate

The complete raw certificate details for spo.seattle.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70767896101163244176932358204168106101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 18:38:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 18:38:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spo.seattle.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802561514052795399386244908174560048177117990059639217404093203650743057422553191612988789539981367132066913012084593369931208929161798394321205332968787456928684508173070133888083639159988568443522139255204312947704902708387728298299967787659709505383550724465567482307412109641644002063579172235080337830317589454632342744580757383601219975769941386722833699298103736984134168706424397258429598407264959720934209374531896652168892806649563470710753969286153912805392258196643623215657849778787714486707636885374311577660986799057298005125653660952239503370525199246098071078330038688575214312125307455669654973284488391078639287554684947372832600699060440385557808031827431457114575291523152251098472473559821232478236843287101399350966645709832278176523028189402542084316705189872012866446077868153682893077570631584065749554793409984797866479303298816490338391540203283076326981631558981113649688235250438864494382788432539843756533195814110095060771040780534399701709804655139466868728784559057248179581880446208781057588040375199200507511697257343741976736086031162627061735696343621476272270285052363841712609464271364709276621668097322286868492617520242627869242162882465091079049137928682951327089977748108954923279986419139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93bd9003b31d7a6c64536a8ebc84f3f5f892308a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spo.seattle.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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