extaccess.fda.gov

- US Department of Health and Human Services -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:85:df:1b:bb:f0:7c:ec:45:85:c1:89:7c:8e:40 was issued on by IdenTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Department of Health and Human Services

Organization: US Department of Health and Human Services
State / Province: District of Columbia
Locality: Washington
Country: US

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:01:85:df:1b:bb:f0:7c:ec:45:85:c1:89:7c:8e:40
Serial Number (int): 85078499264033977112407418097693920832
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4b:55:18:de:21:b0:6b:c7:51:2a:04:b4:c0:a8:6d:1c:da:0d:f4:7f
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): 52:02:0e:a3:10:59:37:8f:6f:a3:a4:cc:24:60:da:d6:2e:de:d1:5c
Fingerprint (sha256): 13:cc:2b:0f:8e:dc:e8:6e:6a:75:78:a8:1b:46:ee:42:15:b9:cc:36:a2:55:fd:28:06:8c:95:67:29:61:5b:87

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate extaccess.fda.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extaccess.fda.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extaccess.fda.gov

Other certificates including the domain name fda.gov

(limited to 100 certificates)
collaborationcqauth1.fda.gov
sslvpn.fda.gov
fctakademie.com
www.access.fda.gov
adc-sfbfep1.fda.gov
trlm-ng-scan.preprod.fda.gov
www.fda.gov
rapid.fda.gov
medsun.fda.gov
poca-public.fda.gov
sslvpn.fda.gov
fms-5.collaboration.fda.gov
timsmmtamobiletrain.fda.gov
www.fda.gov
updates.fda.gov
impool2.fda.gov
scicsa.fda.gov
edkb.fda.gov
api.fda.gov
esgadmin.fda.gov
accessdata-preprod.fda.gov
esgtest.fda.gov
esghosted.test.fda.gov
www.accessdata.fda.gov
itacs.fda.gov
info1test.cfsan.fda.gov
api.fda.gov
dnahive.fda.gov
purplebooksearch.fda.gov
fms-4.collaboration.fda.gov
fms-1.collaboration.fda.gov
oralcms-test.fda.gov
esg.fda.gov
gmvs.fda.gov
esaf.preprod.fda.gov
cfsan-caemsprp.fda.gov
userfees.fda.gov
iwsfdacbp.dev.fda.gov
dcg32.test.fda.gov
blogs.fda.gov
extoam.preprod.fda.gov
mpris.preprod.fda.gov
esgtestreg.preprod.fda.gov
xmsapps.fda.gov
www-aws.fda.gov
tims.fda.gov
ufsp2.preprod.fda.gov
itacs.fda.gov
fis.fda.gov
ufsp3.preprod.fda.gov
collaborationcqpub1.fda.gov
fissweb.preprod.fda.gov
myapps-val.fda.gov
precision.fda.gov
www.access.preprod.fda.gov
faers2-validator.fda.gov
ctpportal.fda.gov
portes.fda.gov
tims.fda.gov
ceportal.fda.gov
www.access.fda.gov
ofemsapps.fda.gov
www.fda.gov
api.fda.gov
cfsanappsexternal.fda.gov
sso3.preprod.fda.gov
www.fda.gov
pvreports-rapid.preprod.fda.gov
mvpn.fda.gov
ngtims.fda.gov
sso.esaf-pilot.fda.gov
xm-preprod.fda.gov
epublication.preprod.fda.gov
ceportal.fda.gov
api.fda.gov
ngtimsmobile.preprod.fda.gov
ngtims.preprod.fda.gov
userfees.fda.gov
wcms-test-internet.fda.gov
extbi.preprod.fda.gov
api.fda.gov
timstrain.fda.gov
staging.preprod.fda.gov
epublication.fda.gov
fms-2.collaboration.fda.gov
www.fda.gov
ngtims.fda.gov
nfsdx.fda.gov
search.usa.gov
www.fda.gov
www.fda.gov
cfsan-onlinesubmissions.preprod.fda.gov
esg.fda.gov
collaborationcqpub1.fda.gov
fms-1.collaboration.fda.gov
extaccess.fda.gov
datadashboard.fda.gov
blogs.fda.gov
fissweb.preprod.fda.gov
mprisacrdr.preprod.fda.gov

Certificate

The complete raw certificate details for extaccess.fda.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lwFfH+uualk9sztDOZ9
UhDkH0nZIQ2Wl/CrYiaziTiCh31NUQzAt7ffCI5AwVJjVJP/siQrpG4uamESc0aW
uLDidB+0rmCk+bQfp3YQq4x70QN1keMfLWj2e31L16+d4KZlTboU4wjAxGY8F4qn
A7ODEKxUOMssCUpX3STD9O9fBMmWYefkbSM/hj8daIpFsxvyKMhedbtYfI0pEwwr
F14RG85C6bFQQzN2ie5HmmrZE2McXj8GwYiWFns3WYdC7U8XYluAp0otsUujghw2
TPT6DsbJ+1C2eYq1xj+f77r2nysHEkfMueSVgW+xAdN5vzm3/qozY+VgLpiRMQcL
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078499264033977112407418097693920832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 14:50:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 14:49:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extaccess.fda.gov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Department of Health and Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26555421501714962918758194557030972848137407831777061342356636091409055757327559446075014423339155578612012110140855547356623518871133438208517112344133807092477884483632118013947042051685621928930400399612978003695489306096373733643573254475687251864523685988614157619690308754912247456448095002953712551019136211756375190469910244654028842134128674218466401675678246720495390407448139459727337330786640851310298097803510475395217138875880987976170314976226650356677651790555016012203803333958151556681593479524235057510478417755251462264290024936652681880059876630320845832569846638228777525920645468789667640314657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extaccess.fda.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b5518de21b06bc7512a04b4c0a86d1cda0df47f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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