*.brazos.org

- Brazos River Authority -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:f8:cd:3d:76:b6:ba:82:5a:ab:84:67:25:1d:b0:4f was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brazos River Authority

Organization: Brazos River Authority
Organization unit: IT
State / Province: Texas
Locality: Waco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f8:cd:3d:76:b6:ba:82:5a:ab:84:67:25:1d:b0:4f
Serial Number (int): 17242588333962426112147335424247705679
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:fa:83:8f:25:ad:b4:ed:6e:1f:3b:af:e0:b7:3d:93:f7:a4:af:0e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 4c:f3:a5:d5:08:e3:3b:c7:6b:8c:99:c0:c6:0a:62:58:e7:6b:05:57
Fingerprint (sha256): 70:5f:14:e9:54:b4:0e:9a:43:99:e7:36:fa:59:ee:fb:91:f1:fb:3b:b1:82:92:39:b1:39:a4:c1:18:b9:df:a7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.brazos.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.brazos.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.brazos.org
brazos.org
waterworks.brazos.org
my.brazos.org
mysite.brazos.org
onedrive.brazos.org

Other certificates including the domain name brazos.org

(limited to 100 certificates)
*.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org

Certificate

The complete raw certificate details for *.brazos.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17242588333962426112147335424247705679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brazos River Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brazos.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622803488304098107461589050391133395076340951638735021968747030187021053767396587361504030331943639853219433086505954724036011213720934618853030876031891758247370388019877091298788462240029983517005450321542051414152077575672383003889393725499362160301240422416101886181355640999613432572367612686238539011832491405829144643051165973640201911679661511819275805702876966305239159769625983904109365582571749060543676739126185048762684860188507909140766552931098580348260355381159655918213679109876944192146751145008457567765433667539036290569153225976497242551990124815663116364321741719779349057682406854760038347611132900504634991593946616348156176081997501457088280022786844398518761246330248253913451641540379087645241343016967947419989856819438903134543976143544234113781086988908163895375182129279509896816919793347803334894251820737960954218379042801844714667792868230315423120420769054225346080783994738056650491956815902121376446846839439832642765859259355762413618564381685785596538456810940916704154693895398328582930438017097924481753852266668525742183377575338761827085884600569568109159068513492990431892296309671608682820244432539786964284330845187042463288839346453083133456035068273416794543730418353928164287532240373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23fa838f25adb4ed6e1f3bafe0b73d93f7a4af0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterworks.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysite.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedrive.brazos.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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