cowcex1.worcesterma.gov

- City of Worcester Technical Services Department -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:d5:e4:7d:a0:32:05:e5:32:de:41:da:bf:f9:17:7a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Worcester Technical Services Department

Organization: City of Worcester Technical Services Department
State / Province: Massachusetts
Locality: Worcester
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d5:e4:7d:a0:32:05:e5:32:de:41:da:bf:f9:17:7a
Serial Number (int): 7756733552280520215493079422731884410
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 02:ab:98:b5:02:93:92:a9:86:35:ff:ef:d8:b3:43:53:56:cf:fa:d0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6e:1c:e2:4f:55:59:79:04:5e:52:be:17:bf:8b:15:14:65:0e:10:81
Fingerprint (sha256): fe:88:50:b8:c7:f8:c2:46:d4:ec:c0:41:39:23:9b:60:4a:de:44:41:5e:38:cc:3a:47:0c:87:23:57:cf:ce:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate cowcex1.worcesterma.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cowcex1.worcesterma.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cowcex1.worcesterma.gov
collab-edge.worcesterma.gov

Other certificates including the domain name worcesterma.gov

(limited to 100 certificates)
cag.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
opendata.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
now-next.worcesterma.gov
opendata.worcesterma.gov
*.worcesterma.gov
worcesterma.gov
gisdata.worcesterma.gov
worcesterma.gov
green.worcesterma.gov
opendata.worcesterma.gov
now-next.worcesterma.gov
gisdata.worcesterma.gov
remote.worcesterma.gov
opendata.worcesterma.gov
remote.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
worcesterwifi.worcesterma.gov
cowcex2.worcesterma.gov
worcesterma.gov
opendata.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
*.worcesterma.gov
*.worcesterma.gov
now-next.worcesterma.gov
cowcex1.worcesterma.gov

Certificate

The complete raw certificate details for cowcex1.worcesterma.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnDVR2z1O6ZhuXDpXgiwu
fNltyS4P0uMWt0qu1VkCdkxgwK9rsOhVZbGD3bwdiS+B5IyzVx+SSs1DIT5Owoj5
Mx8copVCodyccGDBM7wDiBVIUfKwtzFwGFYI/QsOyHObL18Sw8n8n125dGh2Bn9/
JDvtGnpw7CmHWjOoMO0pzDpSIHwu0zjx26v7d5bj7Zw7w70tw7+quq9u8shsRgd7
06Knw2wu2NBEAYtKgW0g9/g+xSXzMLFxfiu4bqb1WtYhhy/42VPR1kfpMw7LdMgh
Mr5U5AqN7yYdzJKelSLzCW1MvrSHpu2D0t2XmGTwoZt9BE//QFqIq/LwLa5zjYCp
m1un0uyN85aH6lWTbUrkBKsUvks/nh90EQn3/NajmMB0aNZHY2WcHsZDgW5oMHhY
J6LdLmsRRAjMydNQkzBFOUndDdKRLSU077Omqe6E2nXRQKnkuaYJZMtd3VW0wOyX
wS8e6W+ATvXNFHrViOENg7r85x+gfFtjOaFPYTYjbUSUoPbW/NnhcVJBU8a4FWnb
e4dx6xilrwI6Fqv3LwQmPR8Pjl/cZcgkduz31hXJ6uaUvmSX07VC2UXf+mIqNfw/
Tt1igUEElhoP/yH4mGYh0HceAL6wzrRK7NTZHwI11Y7P1lMBs+XB/qaOSJo9x9IG
l0DtbD5LtDxFxHXhrubMNisCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7756733552280520215493079422731884410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Worcester Technical Services Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cowcex1.worcesterma.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637274184018318809075363438590564266494740294852429758123933418754691012472305661460646305543437149893330132671848847802453359096534104036429995417190038820508732699020770725471305710097557618132018917157678920824027481040620292349075345196491448215640136857765114105473418299946240553020214469596535881801322629730638494283878291793274739899789398204383068302531746544817104552007557502670603647588811756980220902505023115162732341213783280929076619669840704471971301893066043127286204195596958492338326603196102634143954872143743885740338566291487633450963052626329369059786403680681658491006449010799470264881193906892458449786589542846820347921190356042796638574231609451070534444274229200640184431294462322448889434001919715830283270357068932828415050697215214764433306115936334634709547717451528165943600991068797766179099720480332951653164576105126129273704876520243377674200219760040625973649778313829797040360083358021619473620613951025482201860826046636359628902340805915709005927260243374567711131918977054732079379481894489464240548594676082975938131102843774191034711628455301309046848096661836383290157127310408146165396443848874067521347022994071246174591845717681254038716006549612563565434838551300373413291415582251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02ab98b5029392a98635ffefd8b3435356cffad0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowcex1.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.worcesterma.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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