csrsa.texasattorneygeneral.gov

- Texas Office of the Attorney General -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:c8:20 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Texas Office of the Attorney General

Organization: Texas Office of the Attorney General
State / Province: Texas
Locality: Austin
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:c8:20
Serial Number (int): 1277347872
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: fe:3d:c7:d9:b7:65:8a:23:4f:15:20:38:c8:fa:a9:4d:74:a5:bc:df
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 1a:c3:7d:ff:2a:d3:c6:5a:85:e1:3d:63:dc:7f:8b:7f:5a:47:c0:2a
Fingerprint (sha256): e1:ff:f5:d4:f4:cb:c3:93:c2:ff:b5:e6:67:ef:bd:ca:40:54:bc:bf:43:fa:73:10:11:c7:e1:4e:d6:a7:27:80

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate csrsa.texasattorneygeneral.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csrsa.texasattorneygeneral.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csrsa.texasattorneygeneral.gov

Other certificates including the domain name texasattorneygeneral.gov

(limited to 100 certificates)
txcses.texasattorneygeneral.gov
*.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
csinfo.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
events.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
*.texasattorneygeneral.gov
sys2.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
events.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
oag-arms2.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
airwatchcs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
kioskpromgmt.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
*.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
csvpn2.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
*.texasattorneygeneral.gov
texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov

Certificate

The complete raw certificate details for csrsa.texasattorneygeneral.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj2hnwZhz07RKAqRnXPc
TwMWxItZapVIuEH8IG9pRhcXB3mScztON2Lpr1M9+Ok2bCiUx0r1CyIOCzgAfjKF
MsOL4lXAppCpFNaYtpcqPzdqBPZPPVIj+Aa70HNwYWbPjUv22kdiaLjgb9i7XSyn
SHpcXni/7ZVcNa3VTJ1s75cf+EsFRgYO7UP1PmaAE7WshD0Y4mhdmhh7qnVL5nX4
j4sOF+l7ltqXPe0jhocU+PcPpXoyrHp1g2pTWLEGC9+WkIvoXD/+CZ0WOlY+2ckg
f36zcwGv/84NhNa2SkyYMMATW+mag6AVccEbUyRZDnYoIImjEarmImjjRyLtjpgt
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277347872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-17 18:49:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-18 02:52:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Office of the Attorney General'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csrsa.texasattorneygeneral.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25025575926180686812523347309967692646509108739267469789489568023479689403619650899658527707382296533076334594139613703753835458196579882746641899825391547289666889293025804328426355342797374309688017565904551425227063036726967354896124835260097524084242984332204019515932376899770606582212518992961292357617000940528375920338631380205063436781999184894225159472219289171956946715447800827219683627160165428826382772120916556345777148012822745972234774312950043426562681587909327368265970346055617162852714629349853709387146659450415133395782818579680692038091036520456172707234004126907109455258816152378537441504707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csrsa.texasattorneygeneral.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe3dc7d9b7658a234f152038c8faa94d74a5bcdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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