www.ago.state.al.us

- State of Alabama -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5a:0c:0d:11:f3:a1:7e:f7:b2:03:16:46 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Alabama

Organization: State of Alabama
State / Province: AL
Locality: Montgomery
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:0c:0d:11:f3:a1:7e:f7:b2:03:16:46
Serial Number (int): 27868219715670810718552397382
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4f:0c:02:55:0b:8e:b1:40:75:5f:8a:01:fe:24:69:8e:d5:99:bd:cf
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 37:e9:70:1c:8c:3f:ec:16:89:44:03:58:12:65:2c:87:72:12:19:bf
Fingerprint (sha256): 15:f9:a8:2e:74:36:cb:6e:6c:44:cb:81:89:b6:38:dc:b7:8f:6f:1d:02:65:2c:c3:9e:2e:a6:ab:8d:9e:82:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.ago.state.al.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ago.state.al.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ago.state.al.us

Other certificates including the domain name state.al.us

(limited to 100 certificates)
bcl.adph.state.al.us
hblb.alabama.gov
insurealabama.adph.state.al.us
siis.state.al.us
epcr-dashboard.adph.state.al.us
eforms.ogb.state.al.us
alatrauma.adph.state.al.us
www.ogb.state.al.us
vpnhq.adph.state.al.us
elrpnbs.adph.state.al.us
purchasing.alabama.gov
www.ogb.state.al.us
adphnotes2.state.al.us
dph1.adph.state.al.us
alex.state.al.us
ctf.alabama.gov
alex.state.al.us
emsis.state.al.us
epcr-submission.adph.state.al.us
*.dot.state.al.us
www.ago.state.al.us
phit.adph.state.al.us
alsteve.adph.state.al.us
amhc.alabama.gov
evergreen.apls.state.al.us
elrpnbs.adph.state.al.us
moodle.accessdl.state.al.us
*.aidb.state.al.us
sonicwall.ogb.alabama.gov
ctf.alabama.gov
map.ogb.state.al.us
dph.state.al.us
alison.legislature.state.al.us
paroles.state.al.us
dph5.adph.state.al.us
hie.adph.state.al.us
eforms.ogb.state.al.us
evergreen.apls.state.al.us
elrtnbs.adph.state.al.us
vpndr.adph.state.al.us
moodle.accessdl.state.al.us
curemd.adph.state.al.us
doc.alabama.gov
aplsws1.apls.state.al.us
alnbs.adph.state.al.us
map.gsa.state.al.us
immhie.adph.state.al.us
acis.alabama.gov
insurealabama.adph.state.al.us
bcl.adph.state.al.us
eforms.ogb.state.al.us
chiro.alabama.gov
alex.state.al.us
arts.alabama.gov
map.ogb.state.al.us
ems.adph.state.al.us
arc-sos.state.al.us
alert2.adph.state.al.us
accessdl.state.al.us
WellnessAppointments.adph.state.al.us
map.ogb.state.al.us
phit.adph.state.al.us
www.ogb.state.al.us
vcse.adph.state.al.us
curemd.adph.state.al.us
adphnotes2.state.al.us
eforms.ogb.state.al.us
dph5.adph.state.al.us
www.ogb.state.al.us
eforms.ogb.state.al.us
update.adph.state.al.us
moodle.accessdl.state.al.us
development.ogb.state.al.us
www.ago.state.al.us
insurealabama.adph.state.al.us
dph4.adph.state.al.us
WellnessAppointments.adph.state.al.us
map.ogb.state.al.us
hblb.alabama.gov
keys.adph.state.al.us
aplus.apls.state.al.us
ph.state.al.us
acis.alabama.gov
emsis.state.al.us
smtpgateway.adph.state.al.us
www.ogb.state.al.us
gis.adph.state.al.us
neosrv.adph.state.al.us
alex.state.al.us
eforms.ogb.state.al.us
fiche-app.adph.state.al.us
*.dot.state.al.us
alex.state.al.us
*.dot.state.al.us
www.algotraffic.com
bard.apls.state.al.us
adph-ehr-test.adph.state.al.us
*.aidb.state.al.us
map.ogb.state.al.us
mobile01.adph.state.al.us

Certificate

The complete raw certificate details for www.ago.state.al.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+VeKB/d6bKa7nj7X0YW
Jm1ZMxzvbvqVqT0IZ3zbHoKzd4dHgTxFfx29by9AOlI6AafA2DQmMBi4g0ZCxfcl
+wToR4BGPabMJ33c/WaUDm4Ro2jm2WAwdTRNlLT/IR1zr4ZzfO4H4gM2EQT2ld0s
mAyHEoMfGPR0bEVHdovsXclLQxfdPFT2GI07DL5n8vyJzMtoPvCo6ykMNXZMI3JH
WKC33y1+yZKsRflmzyK1BU4GnNDFWwvWvcLFHysQiKA3pOGFP7FrUCD3DCsifnkM
oqDhMAIqloZe+ZRPXlCe+ggYu3rwxGzgoa+Tr7pUZJcKGr4z6ISKLGAChoiuNzrg
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27868219715670810718552397382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 20:06:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 20:06:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montgomery'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Alabama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ago.state.al.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26244434605530218393021103884909004636235080061433288334360159340873884817802856644926941325020206885192616304972568360493421243443819040639626351040937704514824200867042453233604081639327922384038464155451238899460860347611833336850994914598384252003298681031326233143385486727771976532258862915016765270336335826355940042290433127404660613357371417268575457007362587696787824369478890327939403464983822214210572198574518713553685228429222686714578164324448103911723418639471787258537944662218094214805881981591202170710543547055343055381069125654747417001113291351074639092812865602781412581353567079302694797238357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ago.state.al.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f0c02550b8eb140755f8a01fe24698ed599bdcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165c5176593000004030047304502210080e926e1a1220d4715325f3bfea994ee3396aa3a8f722ffd45d5cff59ef83b2402204fc0eac637cacecfab34dde7ceb4e090c7f9e7c2497412b654a29d7974410ae80076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165c51765d40000040300473045022100ba5a81d0ca00563c95a000f0a0a9c49b1a3ade32ad05e5c3e9d4f4df824eb36302206608ae9aa74ca2d5dfa6ae47183654a6a527adba289b84def15e7e41d46768f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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