data.vta.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5b:0d:00:34:f0:a3:6d:a6:a0:ee:e1:83 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data.vta.org,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:0d:00:34:f0:a3:6d:a6:a0:ee:e1:83
Serial Number (int): 28178852905967906818861490563
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d6:fa:13:7a:c1:c1:cd:79:d1:d8:b4:d6:71:7e:00:0d:10:52:c0:6f
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): a1:61:a4:c2:90:6f:d0:fd:ce:12:ea:e7:b3:96:2f:a9:c0:3c:86:23
Fingerprint (sha256): d2:30:87:21:6f:0d:20:c5:62:45:75:5b:fb:d1:33:17:9d:38:c3:3a:b4:12:be:89:bd:23:71:47:95:64:b1:97

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate data.vta.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.vta.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.vta.org

Other certificates including the domain name vta.org

(limited to 100 certificates)
nextnetwork.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
pdp.h3tgroup.com
conjurist.app
data.vta.org
kronym.io
data.vta.org
bilo.online
grh-admin.vta.org
energy.awera.io
mail.vta.org
*.vta.org
rtvip.vta.org
inscripciones.app
nextnetwork.vta.org
nextnetwork.vta.org
fn.izipay.pe
*.vta.org
data.vta.org
data.vta.org
*.vta.org
quietwaterscp.com
nextnetwork.vta.org
bascomsurvey.vta.org
vpn.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
*.vta.org
nextnetwork.vta.org
mail.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
imbank.docuflow.app
*.vta.org
aviahire.com
nextnetwork.vta.org
newtransitplan.vta.org
produvar.co.uk
mail.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
webmail.vta.org
immersivemedia.design
newtransitplan.vta.org
backlinksasia.com.hk
bascomsurvey.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
*.vta.org
demo-support.uprisecg.com
vpn.vta.org
*.vta.org
rideamigos.vta.org
tour.vta.org
newtransitplan.vta.org
bascomsurvey.vta.org
newtransitplan.vta.org
nextnetwork.vta.org
rtvip.vta.org
nextnetwork.vta.org
mbg.vta.org
produvar.co.uk
www.nextjourney.app
boss.icamping.app
data.vta.org
rideamigos.vta.org
data.vta.org
www.texasvotertracker.com
nextnetwork.vta.org
rtibounce.vta.org
tour.vta.org
sms.anaminese.com.br
data.vta.org
nextnetwork.vta.org
*.vta.org
mta-sts.vta.org
data.vta.org
nextnetwork.vta.org
newtransitplan.vta.org
*.vta.org
nextnetwork.vta.org
exvcp.vta.org
bascomsurvey.vta.org
nextnetwork.vta.org
fn.izipay.pe
remote.vta.org
nextnetwork.vta.org
rtibounce.vta.org
nextnetwork.vta.org
nextnetwork.vta.org
nextnetwork.vta.org

Certificate

The complete raw certificate details for data.vta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3PUs2IKwH5+RO43yuJ3
paAF3eeui/G7HCWU9LpYqGdykdLKTKp66hBQQZ91JPIvYvQDqN9HWeJ266o86XO7
XKhph5e8gN16ZJIeNYmUDloOvzVljGyp0bNNNChqUIXvXiPPS0W7w2vbT3p9mT9d
HjIqNrv3LJCMHxZfLOAZOCu8fB10aklRTxzr50HrcsWD3veUurIRd8gs7L5PnZHP
uKci7AuFStL/NaUyo/jElcXjKIl92Ljikn9WNT2I4+2fKhvGwediMEvk3aCTuAzT
6BKfQQaOG+vR1Fus51Wx4x7CEM3vMQ8qgKPWfySZ7flpI/QAfEMz/0uY5eTkNHjZ
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28178852905967906818861490563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-20 15:37:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 20:24:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.vta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24673587795345178776368747512457658704208508649357265578710445801509674524041389403077453487882397965929114570433677606192408396162719184729962549707838956410909750781291713401229938830119852605087857302066303021686696106576679183776140374752366070285062863110069270555538278538362797499886685812462020136186437132752841263897934609154915848872586140025156542393486463833335825783187323131609345555783593337836242775122019046113193606095051305661243745657623311732837901365675752077215525507244765381662530163573146444192019642376971039545710817211949476688590081182091610213298389537303902287097507576946262516750627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.vta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6fa137ac1c1cd79d1d8b4d6717e000d1052c06f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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