budget.data.cambridgema.gov

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 38:90:b6:7c:68:c4:29:d2:92:c3:ec:d1 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=budget.data.cambridgema.gov

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 38:90:b6:7c:68:c4:29:d2:92:c3:ec:d1
Serial Number (int): 17506107633665182724920700113
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 92:07:c7:b9:ad:43:dc:1c:c6:0d:d2:62:77:0c:fd:cc:ac:a3:76:3e
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 34:6e:b0:a4:89:3e:c1:8e:6e:7a:27:db:ae:4e:6c:d8:45:6b:1f:a8
Fingerprint (sha256): 7b:fd:55:06:f3:e2:14:26:6f:28:d3:16:f9:1a:c8:50:a2:1b:15:2e:2c:de:27:36:33:ae:bd:74:66:bb:1f:6c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate budget.data.cambridgema.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for budget.data.cambridgema.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

budget.data.cambridgema.gov

Other certificates including the domain name cambridgema.gov

(limited to 100 certificates)
sustainabilitydashboard.cambridgema.gov
gisserver.cambridgema.gov
pcs-dispatcher.cambridgema.gov
chance.cambridgema.gov
www.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
gis.cambridgema.gov
Exchange.Cambridgema.gov
Permits.CambridgeMA.GOV
results.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
bullseye.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gatehouse.cambridgema.gov
gatehouse.cambridgema.gov
gisserver.cambridgema.gov
Secure.CambridgeMA.Gov
www.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
Permits.CambridgeMA.GOV
permits.cambridgema.gov
data.cambridgema.gov
Permits.CambridgeMA.GOV
courage.cambridgema.gov
gis.cambridgema.gov
secure.cambridgema.gov
minibonds.cambridgema.gov
gis.cambridgema.gov
www2.cambridgema.gov
aruba.Cambridgema.gov
Permits.CambridgeMA.GOV
data.cambridgema.gov
Exchange.cambridgema.gov
admin-kla-prod.2ambh.com
firepermits.cambridgema.gov
remedydev.cambridgema.gov
muttley.cambridgema.gov
minibonds.cambridgema.gov
firepermits.cambridgema.gov
firepermitstest.cambridgema.gov
www2.cambridgema.gov
admin-kla-prod.2ambh.com
remedydev.cambridgema.gov
pcs-dispatcher.cambridgema.gov
remedy.cambridgema.gov
chance.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
Secure.CambridgeMA.gov
pb.cambridgema.gov
secure.cambridgema.gov
Exchange.Cambridgema.gov
cground.cambridgema.gov
tera.cambridgema.gov
mdm.ps.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
wvd.cambridgema.gov
bitbucket.cambridgema.gov
voicemail.cambridgema.gov
gisserver.cambridgema.gov
budget.data.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
remedy.cambridgema.gov
firepermits.cambridgema.gov
data.cambridgema.gov
gis.cambridgema.gov
techtraining.cambridgema.gov
gatehouse.cambridgema.gov
permits.cambridgema.gov
www2.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
secure5a82116344db483adc000000.nationbuilder.com
data.cambridgema.gov
betatest.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gis.cambridgema.gov
Gis.Cambridgema.Gov
data.cambridgema.gov
Exchange.cambridgema.gov
data.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
mdm.ps.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
permits.cambridgema.gov
gisserver.cambridgema.gov
Permits.CambridgeMA.GOV
Secure.CambridgeMA.gov
secure5a82116344db483adc000000.nationbuilder.com
gisserver.cambridgema.gov

Certificate

The complete raw certificate details for budget.data.cambridgema.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fLbtXnAU6t5RpRGTlYG
wCCpd7ptzCL3DYP2eb+i42StY9m3Fr9nYBVLPxY2OLXdQCf4bK55E8M3E+Bw4inR
d5bW42Pm/CL5U+F3wm4xzuHuBl6ASmsGtLVoYdKFAbFtpb0Ukg27cHJcF/LlrU15
qCqwXpzkoDnuMrC3pHwQULJiMRvNG9ApydpJ9max+yO1OUFl3yrfEagb4kDOaz5T
g62zla19WiQZq5LyQI/wYGpeZ5RdDVJ3bYKeTKUatHzjN+ozqPHG8+8VLH8yR/ox
WkwyWjkzFBEvwXA8B6HHRSY5EqX+byHSCqTSNpJ7wHogp6L+G/wzag38LeYL7VS/
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17506107633665182724920700113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 19:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-26 19:56:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'budget.data.cambridgema.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29028329697746742345258716444544553332673446937282844082264236945925939101688415092824865358017873476310898543518108354430016896809070873248230560678477243839596911937203104931516968013954473480330897184877624136263206728655969202525965827546228003349211132677005653066933437290286136984365942464673623590921824206838105428444312065736427310763269876911245878062377342451480033016799153743560260620016814101271675870227608121560603688475722236603481852375217330798864205475578743025670131354901845974547414091143993976214680747311250682931011319363352222328324649147862574425876629240129822027025368770847937272266559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budget.data.cambridgema.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9207c7b9ad43dc1cc60dd262770cfdccaca3763e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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