telecomservices.dii.state.vt.us

- State of Vermont -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:d6:f9:a9:65:d3:99:a7:51:db:1c:f2:2e:b6:a9:82:b3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Vermont

Organization: State of Vermont
State / Province: Vermont
Locality: Montpelier
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:d6:f9:a9:65:d3:99:a7:51:db:1c:f2:2e:b6:a9:82:b3
Serial Number (int): 1492423930057125663979719454654464967410355
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 59:5e:3e:86:08:f9:24:a3:10:4d:70:b5:3f:31:66:f6:5c:40:cd:54
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 23:00:3b:7d:ab:76:b9:51:50:6d:a0:14:4c:cc:df:d1:82:ec:6d:a4
Fingerprint (sha256): 1a:79:9c:e5:67:f2:f2:97:13:e0:7f:99:2d:5d:43:42:ed:5b:65:e9:b0:c7:7c:b1:12:39:57:a2:43:bc:8a:a8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate telecomservices.dii.state.vt.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for telecomservices.dii.state.vt.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

telecomservices.dii.state.vt.us

Other certificates including the domain name state.vt.us

(limited to 100 certificates)
erecruit.per.state.vt.us
gfs.dps.state.vt.us
dsvs.aot.state.vt.us
ibi-montpelier-1.infosec.state.vt.us
anrmaps.vermont.gov
incapsula.com
nws.vdh.state.vt.us
vtmapir-admin.dvha.ahs.state.vt.us
hhlpssapptest.ahs.state.vt.us
incapsula.com
vjiss2.dps.state.vt.us
ahssqld08d.ahs.state.vt.us
vtcnp.doe.state.vt.us
devcms.sec.state.vt.us
incapsula.com
wave.ed.state.vt.us
tvie2140.infosec.state.vt.us
www.sec.state.vt.us
selfserve.education.state.vt.us
ahs-nbs-prod.ahs.state.vt.us
incapsula.com
docstar.dps.state.vt.us
www.sec.state.vt.us
nextest.dps.state.vt.us
www.ahsnet.ahs.state.vt.us
telecomservices.dii.state.vt.us
incapsula.com
citrix.ahs.state.vt.us
cag.state.vt.us
OBWFE2-TEST.ahs.state.vt.us
incapsula.com
incapsula.com
incapsula.com
dpsgisweb2.dps.state.vt.us
trader.administration.sec.state.vt.us
incapsula.com
ent-footprints.state.vt.us
anrmaps.vermont.gov
incapsula.com
panopticon.infosec.state.vt.us
incapsula.com
fsdnet.ahs.state.vt.us
vepards.dps.state.vt.us
incapsula.com
OBWFEAPP5.ahs.state.vt.us
vepardswb2.dps.state.vt.us
www.sec.state.vt.us
view.leg.state.vt.us
incapsula.com
ahs-obwfeapp4-test.ahs.state.vt.us
obwfeapp7.ahs.state.vt.us
parole.infosec.state.vt.us
nws.vdh.state.vt.us
anrmaps.vermont.gov
incapsula.com
fsdnet.ahs.state.vt.us
fsdnet.ahs.state.vt.us
pike.atg.state.vt.us
nws.vdh.state.vt.us
*.vttaxnet.tax.state.vt.us
www.sec.state.vt.us
ftp2.tre.state.vt.us
incapsula.com
vtdpscrimentel.dps.state.vt.us
VEMservices.dps.state.vt.us
analytics.dps.state.vt.us
incapsula.com
DMVCIS01.aot.state.vt.us
citrix.labor.state.vt.us
*.erp.state.vt.us
secure.atg.state.vt.us
www.sec.state.vt.us
nws.vdh.state.vt.us
adfs.vtransweb.aot.state.vt.us
incapsula.com
slog-dvha.ahs.state.vt.us
incapsula.com
jury.eservices.crt.state.vt.us
vjiss2.dps.state.vt.us
incapsula.com
aotadfs.dps.state.vt.us
infoonmycase.ahs.state.vt.us
vepardscopweb.dps.state.vt.us
nomos.dps.state.vt.us
www.sec.state.vt.us
publicportal.courts.vt.gov
www.aot.state.vt.us
OBWFEAPP3.ahs.state.vt.us
anrnode.anr.state.vt.us
incapsula.com
ftp2.tre.state.vt.us
incapsula.com
mybenefits.ahs.state.vt.us
incapsula.com
www.brightfutures.dcf.state.vt.us
incapsula.com
anrnode.anr.state.vt.us
*.erp.state.vt.us
secure.education.state.vt.us
quick.ahs.state.vt.us

Certificate

The complete raw certificate details for telecomservices.dii.state.vt.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3aFxswcSH3QgDrZIvhB
oCV7bfgGvb7sXHNvZ+RupqnC6WeHudR2BqgTfxrbot/t5sIiIyG9mmd8HRfgWQhg
RZoxoVkXu0l+WYmIb5WnVM/hcKex9YGzHarQ+jbtokDg4KQRNO+CIknDc8rAMMJC
VePHfdSiZ1QWKMPEj0gbmLWiqfyGecPIo0uTMAMIIaSeZkpxN3svd8ddVl9YsnmG
j8UVoeIcoQ55O4qNBZkWpq+T6Nh8Rr2fiFsy7MiCYS7FVOAGMyKVfkZuY2X9SYnM
EUz51nF0PmO0bawnj0x5VAajeN+Wv18TmKzYZ+zpZdNONIun+DacxebhmRlhrvYl
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492423930057125663979719454654464967410355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 18:02:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 13:53:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montpelier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'telecomservices.dii.state.vt.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18110523265077729168316288401304387307544511205940825109663846737029008932312109676320590252700245871776797466106042082940933692489578710288863580226418549336218674478044258949650161364829293199918820402973877921636894572137883960281338613335350425720381095817122717922245376374829853070304303587793273383765250696589942236564060169764594851902606529606743320521754253620442200509793746988511488603003955123976208580656116219252882455635238078803741169480497163061603506797046508609077101772448928698138111396474578123629800308024756044043021509141513484076350413099546088498089224476769577980135301064565624818509153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telecomservices.dii.state.vt.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							595e3e8608f924a3104d70b53f3166f65c40cd54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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