*.brazos.org

- Brazos River Authority -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:3a:81:41:34:ee:dc:64:3c:c6:20:58:e8:05:6b:da was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brazos River Authority

Organization: Brazos River Authority
Organization unit: IT
State / Province: Texas
Locality: Waco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:3a:81:41:34:ee:dc:64:3c:c6:20:58:e8:05:6b:da
Serial Number (int): 20242194751620178214136594731129727962
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:d6:ef:29:22:63:8a:9d:e2:f9:c2:2d:08:10:c6:d4:4a:03:d9:1a
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 5d:bc:83:f4:82:3f:b3:9c:a1:c3:74:29:fb:20:7f:b2:ce:15:77:df
Fingerprint (sha256): f7:15:f0:66:c5:1b:c6:b5:b8:f7:dc:96:da:5c:a0:c0:f8:b8:c0:ed:ba:52:a0:3e:87:52:d3:8b:4f:05:99:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.brazos.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.brazos.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.brazos.org
brazos.org
maps.brazos.org

Other certificates including the domain name brazos.org

(limited to 100 certificates)
*.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org

Certificate

The complete raw certificate details for *.brazos.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20242194751620178214136594731129727962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brazos River Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brazos.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663540889652575602094390016480054174457870116030659535597658417154643866057580324619903986357792562317593761874803328763204230898690378303654259589019483342148380574170588997805839456400985642954869131094193092161002519113303972614185897596041085644570035528615764158922064234343242497487651417034729217813880643208106156970877303520505181328545561071993492019178849546362249878281845879663619675694998048323613461730881763043290336669617176228016959192141412593486572365068227736972469294795875457873576613059504243908370303593809851120635676176723395642754186069376846143693700046767218667124293779044096374217177629285955336055648874176174915712172053364124700007020950517367042288111723251566759452936859958025455117985274872398110524791494280912253995840709065108162376069122774204361809364291027505424184620496668849200798325576553049142255815323140929646755952210814316434687524164600083337714513827862438581332494452941061377431729115658020525754219819810870801662975320344198178041221494065333093418686174162560511857916594988043653079614595281157300584618592016311009697531736753731816186327598034436337370512212657433075092980285403803746704963011388553493510029855755445992363383094735093589363204204012027824525691000461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22d6ef2922638a9de2f9c22d0810c6d44a03d91a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.brazos.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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