id-dev.vt.gov

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:9c:f5:56:6f:9d:b7:68:b2:b8:14:8e:4b:35:40:fb was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:9c:f5:56:6f:9d:b7:68:b2:b8:14:8e:4b:35:40:fb
Serial Number (int): 8790342323159302801715113865977872635
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fd:be:be:15:1e:ce:3d:5f:2c:57:d1:37:4b:61:88:cf:83:c8:91:8a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 44:e0:f2:19:29:cf:b0:96:0d:83:31:1e:21:94:b6:e8:d8:22:8f:73
Fingerprint (sha256): 44:ba:40:18:46:a5:7d:ae:ab:1c:9e:a0:03:f1:db:c2:d9:fc:e7:8b:b7:a0:0d:7c:92:13:82:94:ab:3a:a1:18

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate id-dev.vt.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id-dev.vt.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id-dev.vt.gov

Other certificates including the domain name vt.gov

(limited to 100 certificates)
www.myvtax.vermont.gov
www.poultney.vt.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
bridgewater.vt.gov
www.tradoc.army.mil
www.tradoc.army.mil
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.tradoc.army.mil
www.ahsuploader.vt.gov
rms.vermont.gov
bridgewater.vt.gov
ssl7.revizesites.com
anrmaps.vermont.gov
westfield.vt.gov
www.vermont.gov
anrmaps.vermont.gov
www.bridgewater.vt.gov
vtlottery.com
www.bridgewater.vt.gov
ljfo.vermont.gov
www.poultney.vt.gov
www.tradoc.army.mil
www.skysoldiers.army.mil
ssl7.revizesites.com
www.bridgewater.vt.gov
rupert.vt.gov
ssl7.revizesites.com
psp.education.vt.gov
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.usaplants.vermont.gov
www.rms.vermont.gov
ssl7.revizesites.com
publicportal.courts.vt.gov
mabdapplytest.vt.gov
www.vermont.gov
uipublic.labor.vermont.gov
www.ahsuploadertest.vt.gov
secure.education.state.vt.us
www.skysoldiers.army.mil
www.vermont.gov
www.vermont.gov
vtjfo.bluehousegroup.com
pawlet.vt.gov
www.ahsuploader.vt.gov
www.tradoc.army.mil
bridgewater.vt.gov
www.myvtax.vermont.gov
www.skysoldiers.army.mil
vtlottery.com
www.vermont.gov
townofcambridgevt.org
vtlottery.com
www.staging.myvtax.vermont.gov
vtlottery.com
vtjfo.bluehousegroup.com
www.tradoc.army.mil
rupert.vt.gov
www.myvtax.vermont.gov
www.poultney.vt.gov
ssl7.revizesites.com
ssl7.revizesites.com
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.poultney.vt.gov
www.poultney.vt.gov
middletownsprings.vt.gov
vtlottery.com
ljfo.vermont.gov
www.myvtax.vermont.gov
anrmaps.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
www.tradoc.army.mil
anrmaps.vermont.gov
ssl7.revizesites.com
verv.vermont.gov
www.skysoldiers.army.mil
secure.education.state.vt.us
pawlet.vt.gov
rupert.vt.gov
anrmaps.vermont.gov
www.skysoldiers.army.mil
*.pawlet.vt.gov
ljfo.vermont.gov
verv.vermont.gov
www.skysoldiers.army.mil
ssl7.revizesites.com
id-dev.vt.gov
secure.education.state.vt.us
cambridge.vermont.gov
www.poultney.vt.gov
vtlottery.com
www.poultney.vt.gov
ljfo.vermont.gov
www.skysoldiers.army.mil
vtjfo.bluehousegroup.com

Certificate

The complete raw certificate details for id-dev.vt.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGgx3Yb9OoMZ4Bva+ryY
0zLeVJ+t1w1XbFS8TE3F1hvY/5Tzw275BW8ECAjC2IR4ZYdhZf7XfnWG8phkKBxT
cG0WsgJdIry6xi4oLaQVCy6jkF/UZsz4H7w+1QgT2HktWg/yrYuVISuOB1sE9EOl
X22iStX1dOqRFmV4kF7YV6FdMcdN7sA+l40y+6F+Bry8Diw9eH+9Ndn9yq0aZ5xw
0DCrGGjQB6cgrod7BNqv3KsVXdddxjBHyztsruoHuvWjuyC4v0FD9ggCE09McZb9
3WcaHzIevk4+9Z/QAxpeCPUqSYr/2cVJA1fpKfihG/12jiQF0wC3oy5BhkFn1hkF
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8790342323159302801715113865977872635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id-dev.vt.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23784181697808831659940970077928595517705614813058985209283399745563058483162439318019869983023040731382596418079739544698314180632442964598839207417818993873167238737633294741343792880334843778805910853988749110706086376087678198900652559608003185507944296313712847487068185096535295082875503979408442613580405798573488682155615128478295879730264384848194263679160400904354692520345768631205879869543999822937130914713745368574230745886809720967578457142813390876755375253441647292276249230637067616646283703081226297652875834476853025540459972300416906162465053176122925061839219117402992686986329958384943784068429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdbebe151ece3d5f2c57d1374b6188cf83c8918a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-dev.vt.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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