*.us1.cent1.gov.cdl.paloaltonetworks.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number aa:0e:ab:13:be:8e:aa:f4 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.us1.cent1.gov.cdl.paloaltonetworks.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): aa:0e:ab:13:be:8e:aa:f4
Serial Number (int): 12253919737411447540
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 80:09:a2:94:56:c7:7a:b3:c3:4f:58:3d:8f:b6:f5:dc:86:70:5a:7e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 06:80:40:d4:52:9d:fd:6c:58:13:cc:bd:89:14:e5:40:8f:5a:01:69
Fingerprint (sha256): 04:a8:14:35:5c:86:0e:77:c6:84:89:ce:cc:2f:86:2a:3e:d2:a8:45:96:72:bb:17:9a:95:cb:43:d3:98:85:9c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-3915.crl

Check the revocation status for certificate *.us1.cent1.gov.cdl.paloaltonetworks.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.us1.cent1.gov.cdl.paloaltonetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.us1.cent1.gov.cdl.paloaltonetworks.com
us1.cent1.gov.cdl.paloaltonetworks.com

Other certificates including the domain name paloaltonetworks.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
nova-licensing-https.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
assets.cdn.apps.paloaltonetworks.com
asia-south1.datastore.prisma-saas.paloaltonetworks.com
pansupportqa.paloaltonetworks.com
app-proxy.us.paloaltonetworks.com
jira.paloaltonetworks.com
mail.europe-west2.email.dlp.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
proxy-qa4.eu.paloaltonetworks.com
xecm.paloaltonetworks.com
proxy.us.paloaltonetworks.com
lrc.paloaltonetworks.com
app-proxy-qa2.us.paloaltonetworks.com
io-qa.dns.service.paloaltonetworks.com
secure05.stage.lithium.com
app.developers.paloaltonetworks.com
nova-management-app.paloaltonetworks.com
status.3stepit.com
www.shoprous.com
secure09.lithium.com
www.paloaltonetworks.com
laboratoriodaluna.com.br
awspayg.paloaltonetworks.com
abrsonline.atostatus.com.au
jira.paloaltonetworks.com
app-proxy-qa2-uat.us.paloaltonetworks.com
api.actionservice.paloaltonetworks.com
prod.secure-policy.cloudmgmt.paloaltonetworks.com
api.sase.paloaltonetworks.com
ml-static-stg.service.paloaltonetworks.com
*.vpc1.prisma-saas.paloaltonetworks.com
consul-rtdns.service.paloaltonetworks.com
developers.paloaltonetworks.com
secure05.stage.lithium.com
san-003.ceros.com
lrc-eu.paloaltonetworks.com
netsec.qa.appsvc.paloaltonetworks.com
get.paloaltonetworks.com
gyprocpro-admin.chococrm.com
www.sander-catering.cateringportal.io
updatesdebug.paloaltonetworks.com
test.prisma-saas.paloaltonetworks.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
status.3stepit.com
secure03.lithium.com
saas.aimmo.ai
portal.zoomies.io
secure05.stage.lithium.com
events.paloaltonetworks.com
saasedl.paloaltonetworks.com
techinsider.dev.paloaltonetworks.com
support.qa.app.paloaltonetworks.com
abrsonline.atostatus.com.au
autoassistant.paloaltonetworks.com
admin.crownsbakery.com
san-003.ceros.com
www.evolutio.app
abrsonline.atostatus.com.au
downloads.paloaltonetworks.com
www.bayoulacombemuseum.com
*.xdr.us.paloaltonetworks.com
*.us1.cent1.gov.cdl.paloaltonetworks.com
salestapslack.app.paloaltonetworks.com
*.dev.xsoar.paloaltonetworks.com
proxy-stg4.us.paloaltonetworks.com
jira.paloaltonetworks.com
identitytest.paloaltonetworks.com
swiftdoc.paloaltonetworks.com
register.paloaltonetworks.com
app-proxy.uk.paloaltonetworks.com
aperture.dev3.as.appsvc.paloaltonetworks.com
*.contentupdates.paloaltonetworks.com
*.magnifier.paloaltonetworks.com
apex.qa.api.paloaltonetworks.com
leapfrog-ssl-5.gcs-web.com
postg.paloaltonetworks.com
api.paloaltonetworks.com
proxy.eu.paloaltonetworks.com
*.developers.paloaltonetworks.com
ml-qa.service.paloaltonetworks.com
Palo Alto Networks, Inc.
directory-sync.us.paloaltonetworks.com
igniteservices.paloaltonetworks.com
security.paloaltonetworks.com
*.app-portal-dev.us.paloaltonetworks.com
uc18.janrainengage.com
splunk.paloaltonetworks.com
test.gov.adv-saas-vis.paloaltonetworks.com
*.magnifier.eu.paloaltonetworks.com
outreach.paloaltonetworks.com
na64-1.cdn.salesforce-communities.com
provider2.actionservice.paloaltonetworks.com
status.3stepit.com
aperture-americas.qa2.as.appsvc.paloaltonetworks.com
dlp.paloaltonetworks.com
status.3stepit.com
search.paloaltonetworks.com

Certificate

The complete raw certificate details for *.us1.cent1.gov.cdl.paloaltonetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRwNXVwos2ldvnnpwo7S
tDbApaG7JsIjk1HksqhuQzP3veFkLgFa/Xm/+NvdByZpi5RpEa2Z669ojZIykDmp
7C/+1yIQaSsKLeYhAXGYhDVtUSWTq07mc9veDRBfbBfMWZtDx1p2i5K9MpU32UkZ
BUmO+IuRgHLy+rlRpjFMHr0tcABK5JuVzfmtqxaTtDyZvbRsEovhiuZy06ZwhcRh
PlGRfadBTiP70B7CRddnbTCNrKCIklPdoOC1BqWlyty664BTviqMu37lZq8weuBB
1KNADExHMsgairTqTRjILMlzgchPOYVMFmSoUz1eGenv9VHhBSXbZ8sXI1ppWnib
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12253919737411447540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-12 16:27:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 16:27:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.us1.cent1.gov.cdl.paloaltonetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23872872696835371954216976901969296206570333220913948010333265059224306519719291753832907147095636250997538107382546000010648530876449999574316364079170676760193988741707730657110512820216337144166129838514022576089105551434525017594949643852126407067818490305835694637070791502423778706338341313150777699117179186023239094093261293220105917259125546350605269473872686275608485583591964808924917443323762239409090231728376194928186575668990098961391806198393554481719559016272564807084254457029874585980206568969865708401648327358470717183092319043952806019092104097835473594900340483601756245932745059074433045011251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-3915.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us1.cent1.gov.cdl.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us1.cent1.gov.cdl.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8009a29456c77ab3c34f583d8fb6f5dc86705a7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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