sandresort.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 6d:2c:ff:74:1d:18:7d:eb was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sandresort.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6d:2c:ff:74:1d:18:7d:eb
Serial Number (int): 7866943523278847467
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 7b:d4:85:41:c9:69:3a:c9:8b:99:85:d6:6c:ec:b4:5c:e4:79:89:4e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 64:81:f0:23:04:29:8e:5a:48:af:2c:3b:81:6e:8f:1b:4d:ee:41:3f
Fingerprint (sha256): 07:47:32:2b:a8:9e:5d:8c:0d:6b:7f:7a:68:99:bf:fe:7c:12:0a:79:5b:c9:42:74:c6:22:e3:82:4b:9e:dc:4b

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6711.crl

Check the revocation status for certificate sandresort.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandresort.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandresort.com

Other certificates including the domain name sandresort.com

(limited to 100 certificates)
sandresort.com
xspower.com
sandresort.com
shahvni.com
victoriaherts.com
myaarpdeltadentalplan.com

Certificate

The complete raw certificate details for sandresort.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7866943523278847467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 09:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 09:10:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandresort.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1021636185644921593072147635059197655014497721587726715577814852058162345437200470855892546765671958600969203347454438560959065183133279782448115319519540856885121975582063064732892078928354824587301830388367729271062572365295550005279717784507816640090070514519505606327012052764877785502423098107080566800008406758455752539575453730259962882748988244160846300265979010665581568833949745206023261570208742899199481856110593655441100899642440771860094126170697180372730017562851305404966413517057696592662269172918996117346687669401862636849404749122301925097979887827268591083939734141982387482080877995622640716440492571426095516919723696717388441189467032787926121509713382263949412075330294186575404288294820483465739072392063444803224312411664052082689835336505314993508958365314909282321931076774788825354938834072837996897322629020206388014437858908402545412588667956972431397905116942776596137363172129439963475459312664243026649244655009725317102732531830350235117415109399494733817111765749642655057156394477476705505095545419908638723045816576451932444105663154240462601719757029633942260579638216190036669193338930025633626028892338328719939955185519248943586511705636787147115332405385590920629205680866228904504026088351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6711.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandresort.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bd48541c9693ac98b9985d66cecb45ce479894e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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