its.txdot.gov

- Texas Department of Transportation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:9c:3b:2b:c6:61:8d:95:37:f2:0d:e3:da:aa:31:ab was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Texas Department of Transportation

Organization: Texas Department of Transportation
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:9c:3b:2b:c6:61:8d:95:37:f2:0d:e3:da:aa:31:ab
Serial Number (int): 7457338419229582391890516267854606763
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fa:4b:b9:b4:2a:a6:0c:db:14:f9:60:ba:fa:b3:c1:a3:01:df:78:b6
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 30:5f:f9:7d:ad:c0:d0:c6:d3:78:87:f2:b2:e3:a8:87:c6:23:b3:1b
Fingerprint (sha256): 1a:d3:53:c1:4d:69:f3:7d:d2:e5:61:a2:69:12:32:87:24:d2:da:86:77:b1:aa:58:27:ca:92:31:ac:e8:44:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate its.txdot.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for its.txdot.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its.txdot.gov

Other certificates including the domain name txdot.gov

(limited to 100 certificates)
sb20pca.txdot.gov
testporta.txdot.gov
adoreapi.txdot.gov
mppm.txdot.gov
edit.drivetexas.txdot.gov
testportal.txdot.gov
txrtn.txdot.gov
crisdev.dot.state.tx.us
po.txdotconnect.txdot.gov
mppm.txdot.gov
webex-sso.txdot.gov
arcgis.mppm.txdot.gov
www.dot.state.tx.us
crisuat.dot.state.tx.us
ftp.txdot.gov
testmap.drivetexas.txdot.gov
ADFS.TXDOT.GOV
jaspere2eext.txdotconnect.txdot.gov
externalusers.txdot.gov
publicdocs.txdot.gov
mycitrixsf.txdot.gov
edit.drivetexas.txdot.gov
apps.dot.state.tx.us
cgust.txdot.gov
cgwuat.txdot.gov
hr.txdot.gov
editmap2.drivetexas.txdot.gov
dev.txdotconnect.txdot.gov
cris.dot.state.tx.us
hcmust.txdot.gov
remote.txdot.gov
apps2.dot.state.tx.us
contractsinternal.txdot.gov
txdot4sverpweb1.txdot.gov
txdotconnect.txdot.gov
cris.dot.state.tx.us
its.txdot.gov
ecmmobile.txdot.gov
e2eext.txdotconnect.txdot.gov
ftp.txdot.gov
oc1.txdot.gov
www.txdot.gov
externalusers.txdot.gov
cris.dot.state.tx.us
uatext.txdotconnect.txdot.gov
mycitrixsf.TxDOT.gov
AVNMET.txdot.gov
avnmetfiles.txdot.gov
fbde.txdotconnect.txdot.gov
webex-sso.txdot.gov
externalusers.txdot.gov
mppm-ref.txdot.gov
qa2.txdotconnect.txdot.gov
dev.txdotconnect.txdot.gov
fin.txdot.gov
testportal.txdot.gov
ADFS.TXDOT.GOV
txdotconnect.txdot.gov
www.txdot.gov
citrix.txdot.gov
edit.drivetexas.txdot.gov
txdot4azitsmon1.dot.state.tx.us
ecmmobile.txdot.gov
AAHUAT.txdot.gov
last.mppm.txdot.gov
matsuat.txdot.gov
TXDOT4AZK2WPRD1.dot.state.tx.us
ftp.txdot.gov
remote.txdot.gov
adfs.txdot.gov
sb20pca.txdot.gov
crossroadsuat.txdot.gov
txdot-xenweb.dot.state.tx.us
enabler.txdotconnect.txdot.gov
ftp.txdot.gov
cris.dot.state.tx.us
txdot4sverpdlx1.txdot.gov
oc1.txdot.gov
editmap.drivetexas.txdot.gov
cgust.txdot.gov
apps2.dot.state.tx.us
elm.txdot.gov
editmap.drivetexas.txdot.gov
mycitrix.txdot.gov
finust.txdot.gov
avnmet.txdot.gov
apps2.dot.state.tx.us
TNTODAY.dot.state.tx.us
www.txdot.gov
testmap2.drivetexas.txdot.gov
mppm.txdot.gov
devarcgis.txdotconnect.txdot.gov
apps.dot.state.tx.us
externalusers.txdot.gov
reports.txdot.gov
*.mppm.txdot.gov
txrtn.txdot.gov
fbqa.txdotconnect.txdot.gov
edit.drivetexas.txdot.gov
vcsc1.txdot.gov

Certificate

The complete raw certificate details for its.txdot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7457338419229582391890516267854606763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'its.txdot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768947877824683438629915775769027468287739113975378575265946058913790950044582158494829057224026383240321769882713063468807836599963121235489449958775420799435754438443800948910405346813291602491993534637052080015626909500266584211949816729823595891622349199295569601450584207440595704729877793231001343617467819706822528828971035160067604898728054052954551775038278196211204655259564306150799237144097220097093272675338809568664120990500153112652381807711250738901035251929802375368849199792478297490822434462682020147685512780763928542841461663255057255573174032004149691632262904324601488213832930634562077871601951365157551164212841003363507829428745439014045392864092737580093128525866285913125216670251486706812878629650259496539796886613765664251082788998098426565464480762489485328271995936861567664136658776111306112205777901944996012891528536407095401309666597574764934694346679636272890533615927183301025067076754078767130505151799714160162929578677000589734595751213501012727065057190411156114820621020359404684045999165070699462630610767655086682062602053561618439101697629247527501608955494394671202453752830395100098986791793528665581841539017497734109043810056971452039711375318256650454546708274930480004416162869753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa4bb9b42aa60cdb14f960bafab3c1a301df78b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its.txdot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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