geoestate.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 77:77:2c:30:8e:3f:08:ac was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geoestate.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 77:77:2c:30:8e:3f:08:ac
Serial Number (int): 8608397799798540460
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 3b:07:04:95:c0:51:2e:71:be:78:15:6f:2d:bf:64:d0:7c:e6:dd:cd
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): d0:0f:b2:a7:65:7a:95:42:cc:1c:ef:be:f9:c1:3e:c6:5b:59:6d:ed
Fingerprint (sha256): 08:d4:f0:fa:4f:24:d3:96:54:91:bc:17:65:2d:26:36:a9:10:28:42:5a:d0:73:a9:e9:14:d6:4a:ad:57:b9:88

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7143.crl

Check the revocation status for certificate geoestate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoestate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoestate.com

Other certificates including the domain name geoestate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for geoestate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs8j3DGXGuCMPbf274D18
5FVpzWVwrp+FEhd+XbvRzUBjS6A2b/EObeggpJplkNpucS6A945GBhvo8PhgDyr3
OQWrfBcT7jSGUVB/lKeWJdNyOhYkztIkFYgDs0bK63BTraFbnLpCBC+nm3qEAcn9
jySZXmqUT8bN9ta2B2dmYqlHHJr/nnURwiky22XSdPVGMYbhvCW0ZY283Ci9Tsov
QW7vfQNZGAVwvNr2b3HQqLl8mqPoljD/YZu3eNwq4OlFTDcbArRhOA3SsFZ08021
LgW1xnQXSzpfzJrczSHy6CO8duS91RT79+3/fA8SY3xuNBv2OoPt7drP/2kjlV24
aSRGfnyiptbBZpkbi8dS8MeW0rckpDdpCf2EGY69rIFrXrX87/t/yED/GJ3E6xHK
qC2wqKufzfJM/g1DSx0Tx70bNzObbQwQ3dmbqo/81/MjhbrlUrwXGThFZJFZgnlk
J2g/yQoVeCMEmk6c2N8q6xEO/9xzYom5v8CT4cqMrWB+KLGCulQOr9UEBey149qy
pO4Y3Q22dcZM9d0CgftvP8O/3wgKQTkj0mipmbac2iB97p2MvcQeHOAfIgklKkgx
WOYeOqmLkpPkYf7LrbXQmocsu0lB1nc3NgJ4Y0d9udvNbFlGBd9AaIR7aXc+1veP
Af5+HikL8ExOX0e7Hc9J4pcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8608397799798540460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 06:42:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 06:42:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoestate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733458888974192239464703978656574998050236307651084160409455744986243172570618724870075324926175500421793786732365223426016662995152786714922656791719414013149685008485446737071868575882827243482816804010202843813668455396554386775711918590855030420494117510502262299180025490059315057046869468225762544217022442986186134929297450457003535792602584620710564191821312163913411650076711593345702532689826510053144556379014325153011492606379264291237884869804570198461028539694522790963916880390392329517436574080811382985503218963276198238363151628033177731996861734039409390598368987236723764206959014110216018569893813976004251379147080262815717096471528820245342680748391467666070277365098992918856057771606383427540323026264364412407390936082790397353463862995661111633404837432823879900856924379755643134283205253919998190392464379068823514778508755383262234635376757364509326375546406962112565602063550203925782501217978967549655794765928001908919101248226491601033328271704884161575372322256108508720057226889699597358645617500367185839810801591229891157313539626703696381656158611365052936419610669228949868408740081928476595969886189765527864910935204484569495810700041519268020002940923019144838666236928174709024580895892119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7143.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoestate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b070495c0512e71be78156f2dbf64d07ce6ddcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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