go.ncdhhs.gov

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:39:90:a4:0b:29:0b:11:f4:24:e2:11:cd:d1:9f:de was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.ncdhhs.gov

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:39:90:a4:0b:29:0b:11:f4:24:e2:11:cd:d1:9f:de
Serial Number (int): 10932718551071343681806499500208005086
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:d0:26:72:ce:27:f2:6f:65:20:de:27:51:d4:f0:c7:33:0f:5b:84
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): b8:e4:5e:5a:c2:af:2c:46:fd:c2:7d:73:5e:bd:a6:8d:f8:b0:37:91
Fingerprint (sha256): 1f:ad:5f:b5:7e:36:6b:97:fc:05:53:c8:ad:29:47:c4:3d:17:86:c1:34:b3:74:2a:58:f9:4c:57:87:35:b6:be

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate go.ncdhhs.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.ncdhhs.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.ncdhhs.gov

Other certificates including the domain name ncdhhs.gov

(limited to 100 certificates)
files.nc.gov
www.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
vendor-wic.ncdhhs.gov
testsecurity.ncdhhs.gov
files.nc.gov
www.credentials.ncdhhs.gov
*.ncdhhs.gov
mit.api.sip.mes.ncdhhs.gov
tobaccopreventionandcontrol.ncdhhs.gov
files.nc.gov
files.nc.gov
ncdhhs.gov
policies-dev.ncdhhs.gov
www.eureka.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
files.nc.gov
test.mft-console.sip.mes.ncdhhs.gov
ncdhhs.gov
files.nc.gov
myncwic-uat.ncdhhs.gov
icam.mes.ncdhhs.gov
www.credentials.ncdhhs.gov
ncdhhs.gov
injuryfreenc.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
wrtk.ncdhhs.gov
uat.sip.mes.ncdhhs.gov
www.bcccp.ncdhhs.gov
www2.ncdhhs.gov
ncdhhs.gov
*.dph.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
www.ccr.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
files.nc.gov
*.ncdhhs.gov
news.ncdhhs.gov
*.ncdhhs.gov
bcccp.ncdhhs.gov
ncdhhs.gov
view.sms.email.ncdhhs.gov
www.dma.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
ncdhhs.gov
socializesafer-uat.ncdhhs.gov
*.ncdhhs.gov
go.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
files.nc.gov
mes.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
phpmyadmin-uat.ncdhhs.gov
ehids.eh.ncdhhs.gov
vendor-wic.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
outreach.ncdhhs.gov
www.credentials.ncdhhs.gov
*.dph.ncdhhs.gov
loginpp.eh.ncdhhs.gov
testhcbs.ncdhhs.gov
*.ncdhhs.gov
ehids.eh.ncdhhs.gov
files.nc.gov
ehidstest.eh.ncdhhs.gov
ncir-dev8.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
ncfastappinvp.ncdhhs.gov
news.ncdhhs.gov
bcccp.ncdhhs.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov

Certificate

The complete raw certificate details for go.ncdhhs.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxSCUIaNdDTzQDZGBp9v
O7xf0964WZwCUW8kEiYtmZJkHJQPASfrar3cIFAG3lzokg8z6RJrqKQIaFU29mBE
GtjVUBgIAES+FAhoUnHWBKyS+wWMTQeArRcNNA53RIiZByr+9REBdGmt3sFSwV8N
GdJ3qA0dBRn4emXtSs7IpTU9Kj3JS9qKi12tHS4HJ15w4XAgVNSppu1p2uFVTN4X
vynrUL1Tuh0muD68LSmEe9+ikcODzHDTt1KpOETzsNmWJ+F+WsUgxPcMW4wKUSWG
QfXKfkZY4LVwNaf36z4wxa16C5mmOr8N9NXpuxoc4s3vSgegMyNzlT0fMWgVBVxH
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10932718551071343681806499500208005086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.ncdhhs.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20586957094625684023389420363299813189011961894527236326123229118276680226463720545936555082809910988943618408621619980997675720440473064817314070071686873611093606822969773800618810878396782373710379528541667482357575081234452888955649717139412608334483732318812392921294107948936149778890323136029353077553722195568253367740259456043548648213131283004000655658318532657442056353405731510663131167358159799165797796664084554258644080517077651730046197494289261489071607693616567737996895065237321217411992525844914798230089576314179921875516848235446704729738746620623315525774102376099149514849883356559510368700373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38d02672ce27f26f6520de2751d4f0c7330f5b84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ncdhhs.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f3ec6850037545e00ad606cf1bfda60b6f938969b144dae97b7826ebe1cc0b8580d6037cdb24a382bfe4a4181beba17f9be8fdb5a19e49dbbcc7a3f2db20ad5beec4b6b7bdbafe82507393d30dc2089cbd004ee1248ddc58f9b17a44a4e06e3b606921ce3e64008d11f2cae911a664179e515c2e67e933dea1e762de66f1b98edf7a55471d2e42aa229a61951ae7e7127acd7c7d3091a006e66f89c5c1c93210029b5bc4af84ac71a058a28c47dc504dddd17ef0a902305dd5804d93784ae839f1c95b092e6dd20e164cc26c49fae74b9aa4a17ac6ebc317bdf20b0f0a9a4941e9be47555113888f0a1c3e46835e1be26555358522dfaee01b80adfc0daa7e4