rupert.vt.gov

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:ba:0f:ef:ee:f7:7e:51:1c:a3:7e:34:ce:2f:51:b8 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rupert.vt.gov

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ba:0f:ef:ee:f7:7e:51:1c:a3:7e:34:ce:2f:51:b8
Serial Number (int): 3624546452888838898299013631518396856
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 42:ce:97:5f:20:a7:5e:76:7e:76:ea:96:70:90:85:8e:63:68:50:5a
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): c8:a3:77:d5:a7:d2:f9:1e:6f:4c:92:88:4b:06:eb:6f:6f:b7:e1:92
Fingerprint (sha256): 2f:31:f8:54:f2:83:ed:53:d4:b7:2b:55:e6:2e:e7:cf:e7:99:86:a0:88:7b:ec:6d:4a:bb:1b:db:28:80:d9:a4

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate rupert.vt.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rupert.vt.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rupert.vt.gov

Other certificates including the domain name vt.gov

(limited to 100 certificates)
www.myvtax.vermont.gov
www.poultney.vt.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
bridgewater.vt.gov
www.tradoc.army.mil
www.tradoc.army.mil
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.tradoc.army.mil
www.ahsuploader.vt.gov
rms.vermont.gov
bridgewater.vt.gov
ssl7.revizesites.com
anrmaps.vermont.gov
westfield.vt.gov
www.vermont.gov
anrmaps.vermont.gov
www.bridgewater.vt.gov
vtlottery.com
www.bridgewater.vt.gov
ljfo.vermont.gov
www.poultney.vt.gov
www.tradoc.army.mil
www.skysoldiers.army.mil
ssl7.revizesites.com
www.bridgewater.vt.gov
rupert.vt.gov
ssl7.revizesites.com
psp.education.vt.gov
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.usaplants.vermont.gov
www.rms.vermont.gov
ssl7.revizesites.com
publicportal.courts.vt.gov
mabdapplytest.vt.gov
www.vermont.gov
uipublic.labor.vermont.gov
www.ahsuploadertest.vt.gov
secure.education.state.vt.us
www.skysoldiers.army.mil
www.vermont.gov
www.vermont.gov
vtjfo.bluehousegroup.com
pawlet.vt.gov
www.ahsuploader.vt.gov
www.tradoc.army.mil
bridgewater.vt.gov
www.myvtax.vermont.gov
www.skysoldiers.army.mil
vtlottery.com
www.vermont.gov
townofcambridgevt.org
vtlottery.com
www.staging.myvtax.vermont.gov
vtlottery.com
vtjfo.bluehousegroup.com
www.tradoc.army.mil
rupert.vt.gov
www.myvtax.vermont.gov
www.poultney.vt.gov
ssl7.revizesites.com
ssl7.revizesites.com
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.poultney.vt.gov
www.poultney.vt.gov
middletownsprings.vt.gov
vtlottery.com
ljfo.vermont.gov
www.myvtax.vermont.gov
anrmaps.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
www.tradoc.army.mil
anrmaps.vermont.gov
ssl7.revizesites.com
verv.vermont.gov
www.skysoldiers.army.mil
secure.education.state.vt.us
pawlet.vt.gov
rupert.vt.gov
anrmaps.vermont.gov
www.skysoldiers.army.mil
*.pawlet.vt.gov
ljfo.vermont.gov
verv.vermont.gov
www.skysoldiers.army.mil
ssl7.revizesites.com
id-dev.vt.gov
secure.education.state.vt.us
cambridge.vermont.gov
www.poultney.vt.gov
vtlottery.com
www.poultney.vt.gov
ljfo.vermont.gov
www.skysoldiers.army.mil
vtjfo.bluehousegroup.com

Certificate

The complete raw certificate details for rupert.vt.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDD15+7WaCofW4rnqRwk
/oRwJLeYBGxv6rNvx860dwHBrCNsv0zB0U/HxMsigY2SUMIp0clK8qs3pOjULZwF
Uj5Omo3KR3xfAq9xHTJ21Z6NEM8NaANl3k7Ya5z1/dchzefuHejw+8rc+r9aXYjt
qRnZxRupRau332+woUjlFfIPnKhwrXN31TOvj2QnunKSzKHwDh9fJYDiRqRLH9S0
8Lxd+uKst6AO54116/38X3XTROiEKt+nKTBC5Pa59K+AoZJSY+52jSEoUqjfRmOm
DAj1gm24wLQ49lFeac/pCWE6dlgJVW7TJw83yTxYF4y75pPfF22akBGmkPTymAXG
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3624546452888838898299013631518396856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rupert.vt.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21232178591331301652831536834763258384011672724340788062747276712782753134343984315413395780763140480340705453136965067613227454184826320669102230582782318989280102981192600311343790428877736828293756613437917699769079634610503921231858708980468741798813222931305913630710535988365565322222564540431662275418731243479809022527070146777580318130204237092105087603350352089604845200726589262833410060060797021560167533250746243873881548820533834804774513361963170718302314348520837386097529838224980554495291056983249528357952118492126000725142549859876467360063097094734792876501262543169269096262341262538415974762007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42ce975f20a75e767e76ea967090858e6368505a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rupert.vt.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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