map.safercar.gov

- National Highway Traffic Safety Administration -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 75:9c:0a:fb:14:9b:ba:a8:64:06:ab:71:26:0a:82:e5 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

National Highway Traffic Safety Administration

Organization: National Highway Traffic Safety Administration
Organization unit: Support
State / Province: District of Columbia
Locality: Washington
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:9c:0a:fb:14:9b:ba:a8:64:06:ab:71:26:0a:82:e5
Serial Number (int): 156329896533509383001742782722103476965
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 19:39:9f:16:f3:74:bc:17:75:f2:3e:c4:98:51:89:a9:31:3c:db:68
Fingerprint (sha256): 6e:32:a1:6c:18:c0:8e:d5:11:52:35:0e:b2:33:45:36:f7:22:78:9f:73:b1:35:06:85:c5:9c:67:2d:fb:96:51

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate map.safercar.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for map.safercar.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

map.safercar.gov

Other certificates including the domain name safercar.gov

(limited to 100 certificates)
safercar.gov
friar.safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
map.safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
vinrcl.safercar.gov
www.safercar.gov
FRIAR.SAFERCAR.GOV
safercar.gov
safercar.gov
vinrcl.safercar.gov
www.safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
map.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
map.safercar.gov
safercar.gov

Certificate

The complete raw certificate details for map.safercar.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156329896533509383001742782722103476965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National Highway Traffic Safety Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Support'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'map.safercar.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686140740223703719755169464723793980774045841090777114217333760967852597596320662500899919587539473273828585930171934869039343903684662166051996847099710630212639827025622507384295406854336036169483636461298296161693630702756363246471803772277310882260133660128375523457022651769702627460267110134041034653267494759577157496222424524938685395690874255600255525294571140381163505791759507006706801663976941315041466050193841764738426965065108865387295119664752162830200109713595526668546069121471870641929708347072652097146127677284191215058945884992618355004826974160049483747206341090360904045985387108260403062553122037456442847376027719100015080024137910068761244236301040690879887015395841818564368793434643477193242860993003577715738732660481439344539661092930190478014418030560189818026977204411200706150951507630951770956480692329924702963723450165351301725927102134783087163128932109977797344259857858368422462536712865359038470329833394531465239572900282486913294182236116070989484227889306270140098477730335636726578682099316738433108229523213602116976139322324839195704324811686354562193946151104457015561747566273182752142322552769762162199959226504504901934578612449516272553956846832412498780581314298147019170531608051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.safercar.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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