DV SSL/TLS Certificate for portal.metrofire.ca.gov

Certificate is witin its validity period

Issued by SSL Corporation (SSL.com RSA SSL subCA)

About the portal.metrofire.ca.gov DV SSL/TLS Certificate

This certificate with serial number 1e:18:e4:78:db:fa:c5:4a:88:81:09:c6:f4:10:eb:ea for portal.metrofire.ca.gov was issued on by SSL Corporation.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for portal.metrofire.ca.gov provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 1e:18:e4:78:db:fa:c5:4a:88:81:09:c6:f4:10:eb:ea
Serial Number (int): 40006088963001826629646682849153182698
Serial Number Length: 125 bits, 16 octets

Subject Key Identifier: 78:b3:f7:7a:d8:b4:60:27:31:2f:e2:8b:b2:ef:c3:a5:f1:06:a7:10
Authority Key Identifier: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (SHA-1): 61:39:2d:46:b1:57:7e:ce:39:4e:54:69:24:49:ac:7e:82:9e:91:c6
Fingerprint (SHA-256): ae:4a:ed:6b:4a:86:4e:e2:c6:3a:b7:11:8b:c2:5f:8a:03:69:44:55:4b:05:ad:ad:f3:90:a2:97:6d:27:13:47

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate portal.metrofire.ca.gov
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for portal.metrofire.ca.gov

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for portal.metrofire.ca.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOTCCBSGgAwIBAgIQHhjkeNv6xUqIgQnG9BDr6jANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTI1MDYwMjE0MzkyMloXDTI2MDcwMzE0MzkyMlowIjEgMB4G
A1UEAwwXcG9ydGFsLm1ldHJvZmlyZS5jYS5nb3YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtgx2SoRtcnOV5GhOX3IW6Rn9WLZzikkFXBJd+bEdDDQ2J
LzRmXlML6SiAOGd2J278WSJgyJnLfPXjIIGhEz0wgy3Dk/JOeOclj9CWfGmaXOka
h2kaIQw+SAyOLAzwtmiERjh8EAIh3emAXJ8NmCONaWH8kPYTOIPPdvfjfVa2ltmf
kgme805hiv5t4MQRfzYY0JNn7Vqb2wzAKQ9+cGr7ayux/l6dsfFYVfo18VZyj5n2
5RVeYO8PbOeTPnw0PjZB/zNl3bhfyKBOpswUiJQxNPHQR6kSPaYXGmopRMdHPcln
W4eJpmq8y+LJUbapP5b/IAZMA1uBMBfflSA6KCnJAgMBAAGjggMiMIIDHjAMBgNV
HRMBAf8EAjAAMB8GA1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsG
AQUFBwEBBGYwZDBABggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xj
b20tU3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDov
L29jc3BzLnNzbC5jb20wPwYDVR0RBDgwNoIXcG9ydGFsLm1ldHJvZmlyZS5jYS5n
b3aCG3d3dy5wb3J0YWwubWV0cm9maXJlLmNhLmdvdjAjBgNVHSAEHDAaMAgGBmeB
DAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
BwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmxzLnNzbC5jb20vU1NMY29t
LVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYDVR0OBBYEFHiz93rYtGAnMS/i
i7Lvw6XxBqcQMA4GA1UdDwEB/wQEAwIFoDCCAXwGCisGAQQB1nkCBAIEggFsBIIB
aAFmAHYAwjF+V0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGXMR5i/AAA
BAMARzBFAiEA318a3T8xIloCh5u+7oldUm0TRz43AkksAWZJq+qZO7sCICxR74yt
rvG4ZdWl8YpHvs0ANRIxxS+kmsZQGhn3ROdiAHUAyzj3FYl8hKFEX1vB3fvJbvKa
Wc1HCmkFhbDLFMMUWOcAAAGXMR5jKQAABAMARjBEAiBshydeD05pq4MOx4EoOp5y
5XwptjMGfe3aEvdVAV9pJgIgezbECRUQi6nzn4Xjcul4x+rfhUbBaMF8O1vatOFw
zskAdQDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZcxHmL8AAAE
AwBGMEQCIDU29kyxxr4SgasWdC/sHulEgmRq6yeY1rEMg4aGxzuLAiBeIJ2bQ50I
zoExpuWx7Aa+vEc3IC2PE9LbFe/xaHliLTANBgkqhkiG9w0BAQsFAAOCAgEAQRP3
TeHfgU/vu5JGmtBZ1NPPc0wm3+/9g6+IUeXNCTqv9yQRt4QbZWIueAWfR0rSSKNH
CSy/fekvGwgXg3ZC3GxufIyp/FWpazpp4+vtgvnrern6aBC9RGn7hoJDAW+9Uafd
HUfqDOSLXr/nZH0qFZ2dNt3nSXVQYxIHbZqFaZmAYlqQY03zuX79BJnkHcxwQXjl
wUviv7ne2x6DWCC3K3xLX1Jn8OQ4j09dyVJ1OAZcA8kyMNknhrXWVgTqOzijM2wZ
+bx2rrZvvVWaBe1lQcSPQL6xnD3M6vfcUeZszR9BAqgx5mKUU3hOFkt5lWIfWzE1
JYcUf5o0aruVInrMQrm/ub+E7MmrDvWBjn6qUnVFRVnL00M9Ppgi7xHxbKDPAqxB
ACToaG4nGWRc4nFatKmNoAVgulIH5erfKaLkKndotVvKGUav9FgDrb0d/Ra05NHI
xEgPqdugqY651aMfxB/ZGXnucoHhAPfGhSY4RmdthpaBxoFNxjwMBWJyHIwYKTaH
2n7yS3T7UGZYl+cTENOHjgvxV7hh+BGJpdWxyhgNO06gftPNiEmsr0CaUciKu/om
ZDKbvnvks02zSK83tTw/SQWB3qEBB4Z8NczQak44+3/bC3x9mO5x1B4zSLIqb7XE
Pn7tSEyiRzDW/Xe4hUHaox0/Hv/4n6wfTyg9nKQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYMdkqEbXJzleRoTl9yF
ukZ/Vi2c4pJBVwSXfmxHQw0NiS80Zl5TC+kogDhndidu/FkiYMiZy3z14yCBoRM9
MIMtw5PyTnjnJY/QlnxpmlzpGodpGiEMPkgMjiwM8LZohEY4fBACId3pgFyfDZgj
jWlh/JD2EziDz3b3431WtpbZn5IJnvNOYYr+beDEEX82GNCTZ+1am9sMwCkPfnBq
+2srsf5enbHxWFX6NfFWco+Z9uUVXmDvD2znkz58ND42Qf8zZd24X8igTqbMFIiU
MTTx0EepEj2mFxpqKUTHRz3JZ1uHiaZqvMviyVG2qT+W/yAGTANbgTAX35UgOigp
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40006088963001826629646682849153182698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-02 14:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-03 14:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.metrofire.ca.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21903882231109955763997883971446366035049971426647641687170872613780002954585418204628979042493214101796124153243135126253433809434348287333960218040263116743846048097220668616246651930767780928713572912432436258678425822066783585006421273163782179888381192924839107623035419385365667414182023720556608000588728987741833420625193891089125641767290470978108239016138398713052411879989551099934082281563205020652136688198395330105515884437105415411079341331144504186924441725809776410854627183164013891790934171724841943869768074131787901610927939395441760645421262159041643799542041658638504487080176315627740812814793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.metrofire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.metrofire.ca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78b3f77ad8b46027312fe28bb2efc3a5f106a710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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