expe02.dofasco.ca

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 56:0f:e2:7d:ef:1d:50:84 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expe02.dofasco.ca,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:0f:e2:7d:ef:1d:50:84
Serial Number (int): 6201424242422927492
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: bb:fb:15:36:28:fb:00:5f:81:0e:7f:4c:ee:74:a7:0e:e8:13:82:62
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 9f:99:45:a4:db:8e:5e:d5:d9:db:d9:1f:db:6d:0c:e7:4f:9b:d2:3d
Fingerprint (sha256): 05:36:04:66:6a:04:4b:e2:60:a3:89:ea:6b:f1:28:00:40:d6:f5:7a:55:03:6d:cd:cd:f3:96:51:55:23:dd:cb

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-906.crl

Check the revocation status for certificate expe02.dofasco.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expe02.dofasco.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expe02.dofasco.ca
www.expe02.dofasco.ca

Other certificates including the domain name dofasco.ca

(limited to 100 certificates)
ec.dofasco.ca
expe02.dofasco.ca
remote.dofasco.ca
expe.dofasco.ca
ec.dofasco.ca
eroom.dofasco.ca
expe.dofasco.ca
access.dofasco.ca
ec.dofasco.ca
*.dofasco.ca
ecnet.dofasco.ca
expe01.dofasco.ca
*.dofasco.ca
citrix.dofasco.ca
*.dofasco.ca
*.dofasco.ca
cvpn1.dofasco.ca
*.dofasco.ca
tmsintgrtsvc-prd.dofasco.ca
ec.dofasco.ca
remote.dofasco.ca
remote.dofasco.ca
ecnet.dofasco.ca
ec.dofasco.ca
*.dofasco.ca
remote.dofasco.ca
expe02.dofasco.ca
remote.dofasco.ca
vdm.dofasco.ca
vdm.dofasco.ca
*.dofasco.ca
*.dofasco.ca
ec.dofasco.ca
email.dofasco.ca

Certificate

The complete raw certificate details for expe02.dofasco.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6201424242422927492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 21:56:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 21:56:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expe02.dofasco.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915458341293669406562345365576448420470387375994857735965490529267607688759246064303970706052216807830490440478483644344840968577457582184852153914372713275282082050252927749086702028592038210381908086223836194007209008399313134651346907780245640462118221293849433122803343993833301849466405711756185047733049069449153153037095911866014292944055445690912111046485160614769969703897647079620172707754235568863775759122403787186428048355656570986922493834815634969305206480258674412579943021777531416853634193848169939124053550959021959727759975627079702691164261448976816408317338018162598345723550492499254516837990542208337819779058107585166740172963988157753338508409995621664725368178006487398498309405644000244040678154616470751562713332579953211082139615228650373444009134078672908376452027601781852797763598096403566796408919828488692783513115528669239948140720256968358550105094318058711594758113835209337832604276134221877813912233060312355222230694976197581358448181114554763236099734267972617778039590278699524168607353449622137803916065142241764711064608932316424564152483814717328959684060089852871291194957090209298252959286953765040751214075227448692053755640155610441317054386633012679793665441755871894430196854048531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-906.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe02.dofasco.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expe02.dofasco.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbfb153628fb005f810e7f4cee74a70ee8138262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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