cis-link.mpu.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 04:8c:80:ae:02:7f:bc was issued on by GoDaddy.com, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

cis-link.mpu.org

Organization unit: Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:80:ae:02:7f:bc
Serial Number (int): 1280384209944508
Serial Number lenght: 51 bits, 7 octets

SubjectKeyId: 6c:92:98:82:2a:2b:62:6f:40:c2:71:dc:8f:a6:a7:fa:d0:76:34:22
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 09:f4:b9:9f:ed:e9:bf:ad:e5:6c:65:50:b7:b1:2e:05:34:c6:1b:01
Fingerprint (sha256): 00:00:56:a3:0c:8f:55:ec:97:b5:bc:bb:86:14:75:fd:ee:3e:39:e9:d8:28:f5:d2:b5:6b:7c:f1:27:55:20:6c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate cis-link.mpu.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cis-link.mpu.org


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cis-link.mpu.org
www.cis-link.mpu.org
payments.mpu.org
mympu.mpu.org
echeck.mpu.org

Other certificates including the domain name mpu.org

(limited to 100 certificates)

cis-link.mpu.org
misolistener.mpu.org
*.mpu.org
myaccount.mpu.org
*.mpu.org
AcceleratedInnovations.com
*.mpu.org
mail.mpu.org
mpu.org
acceleratedinnovations.com
mail.mpu.org
misolistener2.mpu.org
cis-link.mpu.org
www.mpu.org
acceleratedinnovations.com
cis-link.mpu.org
AcceleratedInnovations.com
www.mpu.org
mpu.org
acceleratedinnovations.com
mail.mpu.org
mpu.org

Certificate

The complete raw certificate details for cis-link.mpu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAisfruPENWQZVe4omuldd
YatDg8h/oR6ql9e+v3hbopi0T+lzuV4edyS0QsucJE4U2Q92x3Q2xdk6baHlr/Eq
SPWFURSJ3K+tcxzIM/UdP80D3tawDqLEPHk3H/6Xws2+3UZ9iAkUrm8ReZpJsA5/
/kt1QqS0G4fk/q2axB2j7q33FMzKn58cMHyEII+6Frg1ocBqiFLfa/bLb9D6PsIr
rBkpj/Pl7IqPw2NAgOKiWwEt47X9/STukyzK8Lr84SRBtkwdgmlxEs8ogjPQyzNq
PUqqrAXcX8PZLgPAS6HgYZ9vgvhZqL5nq/dZSBBM2Sy3KmsOB0ZuGhhekliMVoB5
HT8UL7Y3gX1g3WUI/QzKfEdzzHVuHkh18hIbBuvvyMaWwgdnHpk7wQBR3gGZK3hA
DNr207C5t8b8r4tPrZ4L4av3wH2bi+dTu1y3HIUVbnMVxdTruTNGADSamWKj7tz2
Q1wzaDuqNu1b0sgMJ0uZLTRzRCtpJ49w09g7VOg90/OwWPEdG25TBspHCmwLPxBL
7gvuLz8+fE5n0jsh8frsz0J5OJsxoof70hz3kmACkCazXu6V/WhDb0l5qkGQ3HbC
hA9TsGO37W5SI+YAGtemrURzB9cRohI0WJH+sndpYiJPrgQVJm+tsYN/xVLFSzv0
wLIc8YYin9qlp0ScuFssfmMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1280384209944508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-02 16:21:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 16:21:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cis-link.mpu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 566176841027386881365027085654093916467336597374082657392937134924591796875959952577180485446498065251464670679004799521346646838451121137255254949413231738368107558603933457079299918750148090049360280495667891624035737212041284962612507762768205551144096808664427129900580568769431005181800832820084487249352037245271359972573599836342122765814585467616624950224196033606566310430579966918425510764158221573001649683653302447004237722421702493102160176185098181437820475385609196292380786504654003580545707981494614434576062592715190394121693435617495667874187393935347237250633807121792053420510694750548644567222227771866302137188773059618365708333614657688811147640506649254609201004031621942651473675849198331475210595980106319043585867896954009312716665770050089473906837471044187883711828191543533180767673779003177913076603364918464660622572724757767596885263951450182726658199734221157343190750405982303183981345300423672354831661589120654901341867507173489039554212953879566320457348363839111982686055867817683471056993369229112420016599141306495956817770080352085010696468469207102727779924521982514962010527646037145670030802446555551076412543171003742468067459560806835613949450877664301782182578761951198967618979266147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis-link.mpu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cis-link.mpu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.mpu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mympu.mpu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echeck.mpu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c9298822a2b626f40c271dc8fa6a7fad0763422
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ec4b22ff40c9442ef01b06a71d5393ee538c877b4d4d65bdf60a827d5a91cfd19cbeb7192751a0a26885df344a4d10ff802803ac5d27611934734d3a8dc86ec67aa61276178798f6e6b3722cba58e038b74593b6d9c54a763d7b3d5dd96b80994de54b9d52f03018e69743684b16528801a03c7507b4eb41f9cb93e0b56b94da0ecfb5ea3e451acfb8fd94c9f9c0f81a74d8adadece2ad5769391043bdd36dbb40a4b317aa8c2d3d9bc6bf7000ad07b41270333be4a6e38de3cc66836657694d7962b9162028111e72288ed558eebd8ff50c8dea4515d4f6079d115d79c2ccec7dce6cc4f2d7b1b37bc89d3687b98823b625d061dbcc55cb3260d9e9e0303c6