landscape.is.canonical.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 7e:49:3a:cf:92:b8:72:14 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=landscape.is.canonical.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:49:3a:cf:92:b8:72:14
Serial Number (int): 9099869185273000468
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 8d:8c:43:97:5a:ec:58:97:c2:a5:f7:f3:88:17:e0:d1:c0:50:e3:11
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 12:28:2b:23:3c:2a:13:df:14:67:63:50:66:45:cc:8c:e6:1e:8d:5c
Fingerprint (sha256): 09:52:2a:dd:2a:0f:b7:e7:02:da:fc:2e:49:09:07:36:c5:07:45:d1:a6:5f:e8:6f:8d:20:b6:98:66:f3:95:a1

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate landscape.is.canonical.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for landscape.is.canonical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

landscape.is.canonical.com
www.landscape.is.canonical.com

Other certificates including the domain name canonical.com

(limited to 100 certificates)
cloud.kpi.canonical.com
sentry.ols.canonical.com
website.ci.canonical.com
people.canonical.com
admin.isd.canonical.com
graphite.ubunet.canonical.com
devices-nagios.admin.canonical.com
www.canonical.com
canonical-redirects3.canonical.com
cdo.okr.canonical.com
lpstats.canonical.com
expenses.canonical.com
erinyes.canonical.com
design.canonical.com
status.melodydns.com
hydrogen.canonical.com
code-review.premium-git.canonical.com
contracts.staging.canonical.com
oil-jenkins.canonical.com
files.support.canonical.com
jenkins.canonical.com
archive.landscape.canonical.com
test-blog.launchpad.net
objectstorage.prodstack4-5.canonical.com
serial-vault-partners.canonical.com
www.canonical.com
design.canonical.com
pages.canonical.com
files.support.canonical.com
oem-ibs.canonical.com
bazaar.canonical.com
private-desktop.kpi.canonical.com
lists.ubuntu.com
bandwidth.admin.canonical.com
trust.ricardo.ch
bandwidth.admin.canonical.com
status.reservecloud.com
pages.canonical.com
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
oem-share.canonical.com
partner-images.canonical.com
bazaar.canonical.com
prodstack-nagios.admin.canonical.com
partner-images.canonical.com
blog.canonical.com
livepatch.staging.canonical.com
landscape.is.canonical.com
monitoring.sicktech.online
barometz.admin.canonical.com
rocks.canonical.com
portal.admin.canonical.com
test-blog.launchpad.net
irpstatus.streamlineit.ca
bazaar.canonical.com
objectstorage.prodstack4-5.canonical.com
hyperscale-images.canonical.com
canonical-redirects2.canonical.com
jenkins.ols.canonical.com
mon02.nocoperations.com
bandwidth.admin.canonical.com
status.uk.deptagency.com
staging.forms.canonical.com
blog.bazaar.canonical.com
design.canonical.com
newsletter.canonical.com
test-blog.launchpad.net
shop.canonical.com
private-fileshare.canonical.com
pages.canonical.com
hwe.canonical.com
pages.canonical.com
cesg.canonical.com
voices.canonical.com
people.canonical.com
autocert.canonical.com
cloud.kpi.canonical.com
storm.canonical.com
landscape.is.canonical.com
expenses.canonical.com
oem-dev.canonical.com
pages.canonical.com
logging.ols.staging.canonical.com
directory.canonical.com
people.canonical.com
canonical-redirects2.canonical.com
blog.bazaar.canonical.com
files.support.canonical.com
status.savantx.io
blog.canonical.com
expenses.canonical.com
allhands.canonical.com
landscape.is.canonical.com
status.reservecloud.com
status.reservecloud.com
forms.canonical.com
certification.staging.canonical.com
auto-deploy-logs.admin.canonical.com
www.staging.canonical.com
sentry.is.canonical.com

Certificate

The complete raw certificate details for landscape.is.canonical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP5PGp0SKrQMkYG0f2cG
+iZE4/s0mP+jzztKW+UwxGkcjcaEzYcqCJkJwdP15M317WgzU/Gv+8nA3F+ZREOI
PSsnglXgYFto1D2u7B0RzVAXdayrb2gREQ+MZCN46Yk/0nrnRgBNzrkurndvDEuJ
TzPr4H6sLijIRPOwB3oXrP5Cq33tfuUyV7E7Fm36JjIrurUlo0iqhnNsAgob30yX
waNQebzAIBfaGz4jxLQEb3Vqrn00PIAY/j2brMkKmqnzCqK4R0AAJ1i14tcphijG
tk5xY1DL76RHnAbPQpBUNmSB5zejVayO3Zs7CZdS6vrSTJ2hPI9KnVc5naQMimYU
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9099869185273000468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-06 16:06:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 08:52:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'landscape.is.canonical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22848299335599538099671226788889232409907014715212173252570580587008905831538958386972829370504440457236154657727853797384049559276920593074959918340741515692612869619239319421813659339820369107216381648958590817958968259444345802053915526424783416560127006967749720409561330646012983890063790846975041900929255040372474707221738302172362592599077558924150855322546230747595915704027288260261966325745851918864543289996547037570552975949623482731628286392868079679070106254680352199414527829275118524493224735770143719322998766037211178500580989012523413097679772530607751718361956997070719613893084948068806406050927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscape.is.canonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landscape.is.canonical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d8c43975aec5897c2a5f7f38817e0d1c050e311
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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