expe.metro-inet.us

- City of Roseville -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:a5:9d:06:5b:41:e1:15:7b:72:da:38:ea:d3:ec:43 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Roseville

Organization: City of Roseville
Organization unit: Information Technology Infrastructure
State / Province: Minnesota
Locality: Roseville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a5:9d:06:5b:41:e1:15:7b:72:da:38:ea:d3:ec:43
Serial Number (int): 7506053802502353321822187995826220099
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 64:0c:8e:01:a2:00:53:75:f8:27:ce:9a:88:e0:38:9d:6d:6d:e3:e2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9f:45:48:b1:d8:ad:ae:85:e9:e3:28:a0:ae:99:1e:9a:52:db:a9:b2
Fingerprint (sha256): 44:31:51:57:b8:e2:56:2e:84:d5:2a:9f:49:46:ea:44:f2:48:cb:22:62:ab:5a:d7:7d:dc:0d:df:40:f9:b1:26

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate expe.metro-inet.us

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expe.metro-inet.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

metro-inet.us
expe.metro-inet.us
cucmim01.metro-inet.us
cucmim02.metro-inet.us
rvcm1.metro-inet.us
rvuc01.metro-inet.us

Other certificates including the domain name metro-inet.us

(limited to 100 certificates)
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
servicedesk.oneontacsd.org
servicedesk.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
expe.metro-inet.us
*.metro-inet.us
voc.utc-egy.net
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
*.metro-inet.us
*.metro-inet.us
servicedesk.metro-inet.us
metro-inet.us
metro-inet.us
sac.spark-factory.ca
metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
metro-inet.us
metro-inet.us
servicedesk.metro-inet.us
expe.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
servicedesk.oneontacsd.org
metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
*.metro-inet.us
servicedesk.oneontacsd.org
*.metro-inet.us
*.metro-inet.us
servicedesk.oneontacsd.org

Certificate

The complete raw certificate details for expe.metro-inet.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7506053802502353321822187995826220099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roseville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Roseville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expe.metro-inet.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658933788270752967940181007186902399358272022550580005633105628180181563073453332491520901404014384111564203666601929523656138173494416717611267237436999864572701272430991463902643826092239131564801010723320403738153566155349760782942355563060553224266559430095165697593925252704071269724841999221563867701019937236912572904747381299498458943683251149990983889839183563583223765040712356340238491523844090201701685507455111247876786553100880554915379584968915250036061106675789112684484587341415759086369296676659671740902542797269145540722756390116195580719146206018864954312942923402199181204759331307577317684112449536419114874140832305293311134238523789642645557241236344358841224853107136599175451412428231642752195366218773918554922924343847381208196255204859910854306766135529244730488309287995073865009866058862106058671159263048787535740740510827811101678613873565203343443046693052156788824672134804275532227727744992300150468139152856764266948517097673141597428047128563100328513882684108433727939247647960000106051761609296372075625548778712216361430465751795440310416808568469993292596582144382635712012875563753432323263802531883468789173001219772768370244465553488106358680245997742899545803289281249856879250867238139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							640c8e01a2005375f827ce9a88e0389d6d6de3e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-inet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe.metro-inet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucmim01.metro-inet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucmim02.metro-inet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvcm1.metro-inet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvuc01.metro-inet.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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