results.cambridgema.gov

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 19:9b:c1:53:0d:fc:ac:0e:2f:00:14:59 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=results.cambridgema.gov

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:9b:c1:53:0d:fc:ac:0e:2f:00:14:59
Serial Number (int): 7925421696392715793160213593
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: ba:0b:80:60:97:6d:73:31:53:d4:96:1c:b6:46:b7:64:c4:0a:61:d1
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): fe:69:6d:82:f8:72:f1:f6:f3:9d:53:66:36:d4:92:a6:59:f9:63:f5
Fingerprint (sha256): 71:6f:fd:df:e6:e1:95:6c:45:50:14:d2:d4:dd:1f:5f:21:ee:c6:a0:f1:ac:a0:a9:30:65:71:ff:18:6a:fc:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate results.cambridgema.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for results.cambridgema.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

results.cambridgema.gov

Other certificates including the domain name cambridgema.gov

(limited to 100 certificates)
sustainabilitydashboard.cambridgema.gov
gisserver.cambridgema.gov
pcs-dispatcher.cambridgema.gov
chance.cambridgema.gov
www.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
gis.cambridgema.gov
Exchange.Cambridgema.gov
Permits.CambridgeMA.GOV
results.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
bullseye.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gatehouse.cambridgema.gov
gatehouse.cambridgema.gov
gisserver.cambridgema.gov
Secure.CambridgeMA.Gov
www.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
Permits.CambridgeMA.GOV
permits.cambridgema.gov
data.cambridgema.gov
Permits.CambridgeMA.GOV
courage.cambridgema.gov
gis.cambridgema.gov
secure.cambridgema.gov
minibonds.cambridgema.gov
gis.cambridgema.gov
www2.cambridgema.gov
aruba.Cambridgema.gov
Permits.CambridgeMA.GOV
data.cambridgema.gov
Exchange.cambridgema.gov
admin-kla-prod.2ambh.com
firepermits.cambridgema.gov
remedydev.cambridgema.gov
muttley.cambridgema.gov
minibonds.cambridgema.gov
firepermits.cambridgema.gov
firepermitstest.cambridgema.gov
www2.cambridgema.gov
admin-kla-prod.2ambh.com
remedydev.cambridgema.gov
pcs-dispatcher.cambridgema.gov
remedy.cambridgema.gov
chance.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
Secure.CambridgeMA.gov
pb.cambridgema.gov
secure.cambridgema.gov
Exchange.Cambridgema.gov
cground.cambridgema.gov
tera.cambridgema.gov
mdm.ps.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
wvd.cambridgema.gov
bitbucket.cambridgema.gov
voicemail.cambridgema.gov
gisserver.cambridgema.gov
budget.data.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
remedy.cambridgema.gov
firepermits.cambridgema.gov
data.cambridgema.gov
gis.cambridgema.gov
techtraining.cambridgema.gov
gatehouse.cambridgema.gov
permits.cambridgema.gov
www2.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
secure5a82116344db483adc000000.nationbuilder.com
data.cambridgema.gov
betatest.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gis.cambridgema.gov
Gis.Cambridgema.Gov
data.cambridgema.gov
Exchange.cambridgema.gov
data.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
mdm.ps.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
permits.cambridgema.gov
gisserver.cambridgema.gov
Permits.CambridgeMA.GOV
Secure.CambridgeMA.gov
secure5a82116344db483adc000000.nationbuilder.com
gisserver.cambridgema.gov

Certificate

The complete raw certificate details for results.cambridgema.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/b199eRi6+ixmCZs0dX
C882XkyJFr1jhjdioH/BP3W+PAe9shrUTn/lMADsskkUnu3rz4Nj1thnPRbKRQ3d
4dYCTivYS2yua/dSrYcEuTjOEZdSnJJEWmG3RKaSbfENak6ckwNPBIw8J4a5ZNAV
xhYA4/SbME0vcKbgE5bZfFJ8BeIfuRcMrHCeXiDJm5ulNlwR4vuVSMYFrR79XuLg
Z4cj3bnIE2NPRzR5PBCQDCvy9uHpHANeXG2IqNMFh5h7PVEEKGOWyG268E63p3ih
/MiT7gWGnlyeHAxAR6IgJQS8ovPv7PjnUfFD+QH3uBkTf6jEtTOE8m7WyTwwN8jo
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7925421696392715793160213593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-16 19:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 19:45:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'results.cambridgema.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29282829362896484490019873659283892282780417658234700864079335518853932328341684189128769477869188525746180423571201686428034031541093330011924575577320064590316061853308811260950243310502713988751156947699632278373371435927659565673022803318557614031847103070924820604282779092722649127045672663119764183075325863778703177090707934404539934361661856453256421650596480870585880327597594184030426892068871736245676913756357563528950923169253614481917126777803859333176182762156877359703201030718956956221910820033609813787660329770447976829344982935316722904191741009981996790764491958516331174423351213908211035334657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.cambridgema.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba0b8060976d733153d4961cb646b764c40a61d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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