map.safercar.gov

- National Highway Traffic Safety Administration -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 43:e3:b6:47:25:bd:49:11:67:29:c4:d3:de:5c:6c:82 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

National Highway Traffic Safety Administration

Organization: National Highway Traffic Safety Administration
Organization unit: Support
State / Province: District of Columbia
Locality: Washington
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:e3:b6:47:25:bd:49:11:67:29:c4:d3:de:5c:6c:82
Serial Number (int): 90240624139903949870095143515069377666
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 18:8d:bc:df:32:26:6a:1e:37:8d:9c:b8:a9:80:62:0d:d9:1f:c8:7a
Fingerprint (sha256): cb:da:0d:43:f0:4d:b2:dc:9c:17:f4:f9:52:64:bb:69:46:6e:04:9d:61:b1:b2:30:4c:0f:2e:f5:22:d0:c0:3c

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate map.safercar.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for map.safercar.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

map.safercar.gov

Other certificates including the domain name safercar.gov

(limited to 100 certificates)
safercar.gov
friar.safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
map.safercar.gov
map.safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
vinrcl.safercar.gov
www.safercar.gov
FRIAR.SAFERCAR.GOV
safercar.gov
safercar.gov
vinrcl.safercar.gov
www.safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
map.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
map.safercar.gov
safercar.gov

Certificate

The complete raw certificate details for map.safercar.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90240624139903949870095143515069377666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National Highway Traffic Safety Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Support'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'map.safercar.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648977403854071579232574376769482662575554584375408534762871347323338002520209822271372402157731922613682285079883462080089766562459453854735052482979582552658971342055967571409897067189910301633759423227369469431523316651213940562693160416824617003474582749481729363615803795070526074420979507877367340325842392671244996051955745028549314610356631199174620369274569993875308829060997280499042646665554624551062465399674811354115520908698673803228168129063806472980964943128333692950683807007611965459667165731859682178330839370199244652955155293806049133401224652034713883799156721244831178914988117289436552891926555155802081574660190918287933676823644896619994163483672362125312115171412028436978041575597050878482419200205213963548218677991553617035342279264978838979589176323814778789790027371039013097279031991134884472278367936272880712789864575322485759062127805398877505098331575035470921445755432921477756943087251516368569692882403175500461769720124703210909781844186938364069125042792980544438277379305137604935626793858052450759590929964156741117693338467835890399239318279945346348644694897683097926457701110547222493942014949486045046574557003081323405202769490811853639493701870526786047859340436048959791292531135471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.safercar.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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