forms.cabarruscounty.us

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:ca:47:da:7c:de:71:e8:3e:14:05:dc:3b:99:a8:da was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forms.cabarruscounty.us

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ca:47:da:7c:de:71:e8:3e:14:05:dc:3b:99:a8:da
Serial Number (int): 15671809280524457822462365911528089818
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:7d:55:ee:ad:96:4e:a6:fa:5d:8c:1e:22:d5:40:f2:16:29:67:6e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): db:f3:c1:6e:0f:75:4f:52:32:29:f1:95:b3:69:8a:1d:bb:61:c7:d7
Fingerprint (sha256): 20:34:bc:1e:9a:64:d2:2b:83:3b:36:e8:b0:7f:dc:75:fa:da:3f:0c:95:0b:21:b0:93:70:4c:d9:64:c7:81:53

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate forms.cabarruscounty.us

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forms.cabarruscounty.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forms.cabarruscounty.us
forms.glenellyn.org
forms.midvalecity.org
eforms.valleywater.org
forms.mmcc.maryland.gov
forms.iowa.gov
eforms.nylottery.ny.gov
forms.costamesaca.gov
forms.tamarac.org
forms.santabarbaraca.gov
dorresources.sd.gov
forms.cityofpleasantonca.gov
forms.nyserda.ny.gov
eforms.mesquitenv.gov
forms.co.dunn.wi.us
forms.sandiego.gov
forms.washoecounty.us

Other certificates including the domain name cabarruscounty.us

(limited to 100 certificates)
forms.cabarruscounty.us
one.alabama.gov
www.cabarruscounty.us
one.alabama.gov
cabarruscounty.us
mail3.cabarruscounty.us
www.cabarruscounty.us
forms.cabarruscounty.us
cabarruscounty.us
*.seamlessdocs.com
www.cabarruscounty.us
*.cabarruscounty.us
lync.cabarruscounty.us
one.alabama.gov
www.cabarruscounty.us
eform.ci.milpitas.ca.gov
cabarruscounty.us
cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
eform.ci.milpitas.ca.gov
firehouse.cabarruscounty.us
*.seamlessdocs.com
*.cabarruscounty.us
*.seamlessdocs.com
cabarruscounty.us
*.cabarruscounty.us
*.seamlessdocs.com
one.alabama.gov
mycabco.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
forms.cabarruscounty.us
cabarruscounty.us
cabarruscounty.us
www.cabarruscounty.us
cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
*.seamlessdocs.com
one.alabama.gov
www.cabarruscounty.us
mail1.cabarruscounty.us
*.cabarruscounty.us
al-payments.mobilgov.com
*.seamlessdocs.com
mycabco.cabarruscounty.us
*.cabarruscounty.us
firehouse.cabarruscounty.us
www.cabarruscounty.us
*.cabarruscounty.us
cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
*.cabarruscounty.us
www.cabarruscounty.us
Mail1.cabarruscounty.us
*.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
*.seamlessdocs.com
one.alabama.gov
www.cabarruscounty.us
www.cabarruscounty.us
*.cabarruscounty.us
www.cabarruscounty.us
www.cabarruscounty.us
Sharepoint.cabarruscounty.us
www.cabarruscounty.us
cabarruscounty.us
Mail1.cabarruscounty.us
forms.cabarruscounty.us
www.cabarruscounty.us
*.seamlessdocs.com
cabarruscounty.us
*.seamlessdocs.com
www.cabarruscounty.us

Certificate

The complete raw certificate details for forms.cabarruscounty.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BpeBLM7gmo/5vycH6eJ
jSTfFcGjhMNn3LIpDa68qBuOV0od8F22xV69QGyT+cYRg5UqZCz7QshBGLeCCoP4
YyOJMzkxA1brvH9yWYHMyUMCI+4aia6oX5e2Zp9GoKILgXGzVHwRTnwXBFRndeVh
fXkYe04ezpalH5KbtF6/vYzP/KeS9NWlXJhcJGgsgrlUZY0Qf43Cic+otZmQBhUX
0sU4zBTFBcgvs29h+Naw30yBlNvtOXtlH/UWXsOXMg0Jh65gNDFUklVQspp3rJoP
3j/kSB4cJIDTIwWMw6gvGpDFZu6g0N5RSk/i5OUKcFdMcF5Sx3s7UIS1fNFB3uYo
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15671809280524457822462365911528089818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forms.cabarruscounty.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26270569613058598573296207645074855531098646653589190989256191050084928221083166142555549228119388135966486668562001334241923689630706000523160878114210704853472387040960203386413864898311771037414700647563657787589987691319432147297767241946999855733542193167251317662263161468319781591964505785258178922302670281338480994208539284061797909010034956532182670785497915471354850523247234084181868171267258239080564893470611914181087253311015162365003121754914201233714867820551183550266651160747386370971194655649384941650964745789985016450663150400756194792210567137444977161324669886270038566045478365591049156831487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f27d55eead964ea6fa5d8c1e22d540f21629676e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.cabarruscounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.glenellyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.midvalecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eforms.valleywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.mmcc.maryland.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eforms.nylottery.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.costamesaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.tamarac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.santabarbaraca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorresources.sd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.cityofpleasantonca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.nyserda.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eforms.mesquitenv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.co.dunn.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.sandiego.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.washoecounty.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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