masscor.chs.state.ma.us

- Executive Office of Public Safety and Security -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 6d:5c:d1:c5:d2:d3:3c:2c:e7:e8:08:c2:52:af:7c:c4 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Executive Office of Public Safety and Security

Organization: Executive Office of Public Safety and Security
State / Province: Massachusetts
Locality: Boston
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:5c:d1:c5:d2:d3:3c:2c:e7:e8:08:c2:52:af:7c:c4
Serial Number (int): 145367797548343432378310364794585054404
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): 25:74:b2:0c:77:a5:44:97:ef:f6:ad:c0:ce:ea:9a:d2:04:bd:45:df
Fingerprint (sha256): 6d:fb:42:64:f5:80:d6:0f:b2:e9:c7:3b:bb:21:33:49:f3:2e:12:dd:78:65:21:54:07:37:40:d4:0c:7e:fa:71

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate masscor.chs.state.ma.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for masscor.chs.state.ma.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

masscor.chs.state.ma.us

Other certificates including the domain name state.ma.us

(limited to 100 certificates)
diaboinf-prod.dia.state.ma.us
vgapps-training.hhs.state.ma.us
secure.dor.state.ma.us
boscpauth.jud.state.ma.us
coplink.chs.state.ma.us
wiki.state.ma.us
hwyweb.massdot.state.ma.us
MyTRSPRDESS.trb.state.ma.us
maexcisestamp.dor.state.ma.us
swa.projectcontrols.massdot.state.ma.us
masshealth.ehs.state.ma.us
foreclosures.dob.state.ma.us
inet.chia.state.ma.us
massclearinghouse.ehs.state.ma.us
bcn3-web-uat.dta.state.ma.us
archives.lib.state.ma.us
ibmmq-st.hhs.state.ma.us
ctrwebintqa.osc.state.ma.us
email.state.ma.us
envdvaccaca.elicensing.state.ma.us
sso.hhs.state.ma.us
mcef.jud.state.ma.us
atlas-portal.massdot.state.ma.us
itd-sam-lws3.itd.state.ma.us
www.sec.state.ma.us
icori-train.chs.state.ma.us
earlyedncareop.eec.state.ma.us
trcsd.jud.state.ma.us
bcn-websrv-prod.dta.state.ma.us
app1.massdot.state.ma.us
sopsmeta.ehs.state.ma.us
csg.jud.state.ma.us
maps.massgis.state.ma.us
matris.dph.state.ma.us
wfb.dor.state.ma.us
legacyhscdev.hhs.state.ma.us
masstraffic.massdot.state.ma.us
virtualgatewaydw.ehs.state.ma.us
reportingsdkdev10.itd.state.ma.us
hhsvgapps03.hhs.state.ma.us
eohhsaimqa.ehs.state.ma.us
med-web-sftp.dph.state.ma.us
ieats-cg-cert.hhs.state.ma.us
www.sec.state.ma.us
sdm-uss.ehs.state.ma.us
hhsvgapps01-training.hhs.state.ma.us
vgapps3-qa.hhs.state.ma.us
incapsula.com
uatccfa.eec.state.ma.us
traingateway.edu.state.ma.us
checkalicense.hhs.state.ma.us
ieats-cg-cert.hhs.state.ma.us
rmvdashboard.massdot.state.ma.us
maps.env.state.ma.us
ecemp.chs.state.ma.us
reportingst10.itd.state.ma.us
icori-train.chs.state.ma.us
gicselfservice.gic.state.ma.us
reportingsdkqa10.itd.state.ma.us
gisdev.massdot.state.ma.us
webfusion.chs.state.ma.us
csg.jud.state.ma.us
aws-h92spt.hrcms.state.ma.us
reportingdev10.itd.state.ma.us
maps.massgis.state.ma.us
pmas-app.dcp.state.ma.us
atlas-myrmv.massdot.state.ma.us
sso-training.hhs.state.ma.us
elicensing.state.ma.us
ds1.massdot.state.ma.us
MyTRSUATMSS.trb.state.ma.us
cms.mgc.state.ma.us
gisstg.massdot.state.ma.us
comit.state.ma.us
securemail.state.ma.us
www.sport.state.ma.us
foreclosures.dob.state.ma.us
securefile.state.ma.us
wifi.massdot.state.ma.us
maps.env.state.ma.us
dlsgateway.dor.state.ma.us
abpweb.tre.state.ma.us
envtsaccadm.elicensing.state.ma.us
hwywebuat.massdot.state.ma.us
ibmmq-st.hhs.state.ma.us
acc.elicensing.state.ma.us
ufr.osd.state.ma.us
IMP-USE2-VPN.impact.dot.state.ma.us
wf.dor.state.ma.us
ecse.cse.state.ma.us
gateway.edu.state.ma.us
massachusettsgatewayservice.us
atm-dev.dor.state.ma.us
dor-uca-1.dor.state.ma.us
elr.dph.state.ma.us
coplink.chs.state.ma.us
matris.dph.state.ma.us
wiki.state.ma.us
dlsgateway.dor.state.ma.us
ehs-pr-mmis-lbase1.ehs.state.ma.us

Certificate

The complete raw certificate details for masscor.chs.state.ma.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YnENoAm3WtxGfYTMT/Z
QY8GxFjaTGxOg7q14by+h+eRJiOyn5XRC7QQGGZnRWYf1FQL6Qq2NboxaMb7AXVQ
mSqpoiPwn6e7G7IyGman4dT8YGT49zNNrc5H67vsJPa/HGsF24E1+1Q1NVw37+km
dX6sfC8OIMqOG74AGkVf+bfuv/l7Lku4h+Z9NYVIRWyMoAalDl1FQrEIPGQTFlPf
JjIoEVqIEeb1m1OEN8s3yvuJPLUD89iU1benfd254uW+70BOU62u4Tdca4Ma1dWn
u5R45buoEG6aKudk1Zg0l59WbOykJHsS7LM8kRmQ82xPD875IVSbSv0pPn66vgme
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145367797548343432378310364794585054404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Executive Office of Public Safety and Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'masscor.chs.state.ma.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26956694129504907829935376160748459422623743189391054800875487849086101324165433653787123746541388712650484527138360447099914928276286331703029763986336901804146165456864145133769060786445317601514242680050283456320082144505574748637634312511977254170185439036469229848866935829820997986214675524250891476742662273641680185989795146394377824853604294732565257043306061010496859837169873419824577636959088303981242963953880084175516074164025106328644445681002021998722129223576490393814424787068949969469592454205353773274346407206503531300330113388503233353850387324234758414659373993284657642507779998501102189911747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masscor.chs.state.ma.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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