etrngasftp1.ncdor.gov

- Executive Office of the State of North Carolina -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0b:6b:9f:0d:8e:60:fb:70:2c:75:62:2d:d6:e1:67:1c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Executive Office of the State of North Carolina

Organization: Executive Office of the State of North Carolina
Organization unit: Revenue
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:6b:9f:0d:8e:60:fb:70:2c:75:62:2d:d6:e1:67:1c
Serial Number (int): 15180309694654510115768552454407415580
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:df:7c:4f:92:4c:65:60:27:bd:5f:fa:e2:d6:4c:83:bf:1d:87:1a
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): a0:0e:27:fc:de:d0:41:23:2c:01:83:6e:06:84:24:55:0f:ca:d5:43
Fingerprint (sha256): 72:1d:fc:4e:57:23:51:5a:11:cb:da:2a:c6:6c:03:7b:3c:22:67:6e:ea:72:fe:b4:39:0a:6d:19:09:90:8f:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate etrngasftp1.ncdor.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etrngasftp1.ncdor.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etrngasftp1.ncdor.gov

Other certificates including the domain name ncdor.gov

(limited to 100 certificates)
files.nc.gov
prodwas4.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
eprodasftp1.ncdor.gov
etestdaoenc3-1.prod.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
files.nc.gov
etestafsetof1.preprod.ncdor.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
etestafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
spradp1intftps.prod.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
securemail.ncdor.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
etestaftp1.preprod.ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
unityforms.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
ncdor.gov
misentry1.ncdor.gov
etrngafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
ncdor.gov
ncdor.gov
files.nc.gov
files.nc.gov
exchange.ncdor.gov
files.nc.gov
dot-6033-fw.ncdor.gov
files.nc.gov
eprodaftp1.prod.ncdor.gov
files.nc.gov
files.nc.gov
prodwas4.ncdor.gov
intune-dev.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
ncdor.gov
eprodasftp1.ncdor.gov
files.nc.gov
etrngafsetof1.preprod.ncdor.gov
ncdor.gov
etrngasftp1.ncdor.gov
eservices-test.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
eservices-test.ncdor.gov
misentry2.ncdor.gov
misentry1.ncdor.gov
dornc.com
wdevtaftp1.dev.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
files.nc.gov
files.nc.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
ncdor.gov
misentry1.ncdor.gov
ncdor.gov
misentry2.ncdor.gov
files.nc.gov
etrngasftp1.ncdor.gov
files.nc.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov

Certificate

The complete raw certificate details for etrngasftp1.ncdor.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/HStEBQZ382Tg4AUaAj
VT103ABK5kgGjXQfe/Wn8tYBzq90EiiALfjClrHmxZlZ288MfVwe92fKyOa4WZUl
b+txJYaOBpQD+Ni0UEzJTtB9GM+6vaJls7UnaMn+aF+smMTPeX7rFvSFt87yl2PK
q63q8Kih1iRxjuCwN8d9qWomsxC0BP2risGhqPTrujA/4e7RcdHMSpHhWH9ZMcZZ
CBHiB1fAdhtpYkLC+hpSTf/efEHPceSM4oxW0QERBpI4hzZdyS5mEQR3vpc9J21z
S/9yag/R9O/+w3MMq/0k/M61Mf4AX2d3+wAs/xwU1aY97c5DaSIKXDw3i74ao8Ia
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15180309694654510115768552454407415580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Revenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etrngasftp1.ncdor.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28775342624030255865864153700180835053285059782483222695659386186451388960501247340593802566241357700258379443145843580008335328870223332153257860924701258000917111155896736245112499867288858127155222902388698922510535076297076030263925280448500446465887391466898222037397080870161958845356776317577042226788062572386275167771226463318238516330203717312389167532685533959608157401906264092189484166672593340198604402284125563015881097882895368262621353790067262694010273206308723358275185040154756140755280373241532695375739722982674514525539026561735157959813231286661594279164231544255048554000341613259332041972237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acdf7c4f924c656027bd5ffae2d64c83bf1d871a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etrngasftp1.ncdor.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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