gis.co.campbell.va.us

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:07:40:5b:86:32:5f:0a:c0:a3:91:96:ad:66:c9:c0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gis.co.campbell.va.us

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:07:40:5b:86:32:5f:0a:c0:a3:91:96:ad:66:c9:c0
Serial Number (int): 8013019378228547965989792046641498560
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 21:c9:08:4c:b5:a6:37:f0:f6:29:57:b6:cd:78:43:f5:bc:f8:12:c1
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): e2:d3:6d:ef:47:9b:12:46:3e:d3:fd:73:b2:a7:9a:c9:b5:d8:87:41
Fingerprint (sha256): c8:67:50:9b:1a:5b:cd:9a:e4:5b:de:bb:5e:bf:3c:6b:f3:9d:08:af:fe:a7:05:5e:2a:ab:47:d4:03:88:c8:f1

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate gis.co.campbell.va.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gis.co.campbell.va.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gis.co.campbell.va.us

Other certificates including the domain name campbell.va.us

(limited to 100 certificates)
bai.co.campbell.va.us
bai.co.campbell.va.us
www.www.co.campbell.va.us
adp.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
etime.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
rdsgw.co.campbell.va.us
www.www.co.campbell.va.us
www.www.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
extranet.co.campbell.va.us
gis.co.campbell.va.us
vpn.co.campbell.va.us
gis.co.campbell.va.us
rds.co.campbell.va.us
vpn.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
rds.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
extranet.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
www.www.co.campbell.va.us
portal.co.campbell.va.us
portal.co.campbell.va.us
etime.co.campbell.va.us
extranet.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
ldap.co.campbell.va.us
etime.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
portal.co.campbell.va.us
adp.co.campbell.va.us
vpn.co.campbell.va.us
bai.co.campbell.va.us
portal.co.campbell.va.us
gis.co.campbell.va.us
bai.co.campbell.va.us
extranet.co.campbell.va.us
adp.co.campbell.va.us
portal.co.campbell.va.us

Certificate

The complete raw certificate details for gis.co.campbell.va.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNMjkYlCSbgEHKhpuj1Y
At1hLR++LCjkpgfalqmF6d6Vff/v99giveHmf5K9Y6vHW97FojdLpk994i796RwR
qjZ1C/9d61uy8WO9WJxAU/56p+rrBJax4n7DPreY4aS9qL59ilveCpLMg31CJ0EW
f9KybGOTGWuhH02WbbgN2wv8MPPRKhpfUC+pPyPtAvIA1AgX3Z2EIVaCHv5Kstlb
wQ5PgzvxQiqlyycQbter9Ox+kku2OZ7y0WxZRE3Rl455nk7/+40VKjLXGiW0iK5I
TaablrWRBxOvoQqLugbB6Bt88e0FLZ6cS++rbQS3i1nNAIjQjv1x1iv1Ol1y3TWA
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8013019378228547965989792046641498560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gis.co.campbell.va.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21312151725818226892137522397479565397775227663908856973656444655186991559685229776952050839404532958998959482885691451507261846869974203078422476258546420643012777250425003606922139598387425471211495588363310940327332302857501737211098237416220457591329596597448680837102953330351357165465433494688367718591211769957859574726108897081462241963946197267657365313583102154701045649106202457667638484106845591851502450521777697760303865221014623968322937414146711783906301923469451302551850781837809836495023911292908010479254437797755373934102327213284384177413533535661244056896379740285469239710266722175935562744041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21c9084cb5a637f0f62957b6cd7843f5bcf812c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.co.campbell.va.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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