webqa6.seattle.gov

- City of Seattle -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a9:82:42:a9:c2:d8:33:ff:00:00:00:00:50:fa:7c:4c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Seattle

Organization: City of Seattle
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a9:82:42:a9:c2:d8:33:ff:00:00:00:00:50:fa:7c:4c
Serial Number (int): 225315881968155081460361459921233542220
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d8:88:72:a4:64:73:83:44:0d:9e:2e:0d:04:7c:c8:48:60:a2:af:8e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4f:06:e0:48:f7:78:6f:d4:23:8c:14:05:75:77:f0:f4:52:d0:1b:51
Fingerprint (sha256): 12:7d:29:6a:22:b6:81:53:6c:51:a1:ce:e5:ea:a4:81:79:ff:f8:24:33:07:78:d1:09:f2:21:5c:9a:e0:bb:93

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webqa6.seattle.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webqa6.seattle.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webqa6.seattle.gov

Other certificates including the domain name seattle.gov

(limited to 100 certificates)
acceladevextsvc.seattle.gov
tls.automattic.com
my.seattle.gov
vsrvcjisprod01.seattle.gov
housing.seattle.gov
alert.seattle.gov
atyourservice.seattle.gov
news.seattle.gov
welcoming.seattle.gov
www.spdblotter.seattle.gov
atyourservice.seattle.gov
murray.seattle.gov
gtechna-test.seattle.gov
powerlines.seattle.gov
techtalk.seattle.gov
harrell.seattle.gov
council.seattle.gov
spuconnect.seattle.gov
slice.seattle.gov
designreviewoutreach.seattle.gov
wald1.seattle.gov
login.seattle.gov
juarez.seattle.gov
homelessness.seattle.gov
communityconnector.seattle.gov
amwo.seattle.gov
www.seattle.gov
strauss.seattle.gov
cosip-api.seattle.gov
rainwise.seattle.gov
talk2.seattle.gov
cttab.seattle.gov
perspectives.seattle.gov
data.seattle.gov
citylight.seattle.gov
gisdata.seattle.gov
council.seattle.gov
herbold.seattle.gov
mobe.seattle.gov
inweb.seattle.gov
herbold.seattle.gov
council.seattle.gov
webeoc.seattle.gov
consultants.seattle.gov
slice.seattle.gov
centerspotlight.seattle.gov
mydpdservicesqa.seattle.gov
opengis.seattle.gov
centerspotlight.seattle.gov
email.seattle.gov
webqa6.seattle.gov
webqa7.seattle.gov
web1.seattle.gov
greenspace.seattle.gov
www.perspectives.seattle.gov
council.seattle.gov
seattlerdy.seattle.gov
bagshaw.seattle.gov
pgp.seattle.gov
www.frontporch.seattle.gov
gonzalez.seattle.gov
resupdates.seattle.gov
thebuyline.seattle.gov
housing.seattle.gov
maps.seattle.gov
slice.seattle.gov
parkways.seattle.gov
data.seattle.gov
connect.seattle.gov
data.seattle.gov
smcivrextqa.seattle.gov
capitalprojects.seattle.gov
obrien.seattle.gov
climatechange.seattle.gov
data.seattle.gov
frontporch.seattle.gov
cosip-api-stage.seattle.gov
www.seattle.gov
bagshaw.seattle.gov
spo.seattle.gov
civiform.seattle.gov
tls.automattic.com
connect.seattle.gov
email.seattle.gov
cosaccela.seattle.gov
itchat.seattle.gov
citylight.seattle.gov
accelaextsvc.seattle.gov
durkan.seattle.gov
news.seattle.gov
hrisapi.seattle.gov
sawant.seattle.gov
webqa6.seattle.gov
cos-stage-nlb.seattle.gov
www.thescoop.seattle.gov
married.seattle.gov
olp.seattle.gov
consultants.seattle.gov
web1.seattle.gov
durkan.seattle.gov

Certificate

The complete raw certificate details for webqa6.seattle.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225315881968155081460361459921233542220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 16:47:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 17:17:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webqa6.seattle.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861129894188718388930394571187384991345453680419544391945876721056711294194508107172592731439354407463552969345072332529953310210207022274910157551218660009050688105947808142600537980759257861229884077116667151128917383531095042214483678314603526591205165259187084111898442815332130131038773445664384132949655322942653001813715281412581884806180440862274110893638237987649892600345299079413793050819403929041413541647769088475503634361526206109171583689501538123002021529045457010069069145770386191345042043678521912812227844865311978895611002380244067576679192770319068272059038457465390387524506715382173491115945872937989835625537628501367693074484979721450426646210647161430223727283888952108329361803954628210059688675502680546378501178606180880138836914507546772596677304542110949791690430395043803382007257918151343334837440254128943620499475992349169214863309358101266761781383633109496871681808765494254873758787724184623748520900786222466362732695475046402264273563873545522059441033862508147532654803178497253882248653507389812745525609831281957179123312850559637487854664583474598152747801773298720460326768972012479013929135276858420869571307036254618650672049551409160765088640756847599834023823210372295699735806333397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webqa6.seattle.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d88872a4647383440d9e2e0d047cc84860a2af8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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