lubrishop.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 2c:1b:14:ea:d4:3e:f8:f8 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lubrishop.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:1b:14:ea:d4:3e:f8:f8
Serial Number (int): 3178156960855816440
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 86:03:6a:dd:0d:bc:17:89:44:73:80:9d:57:54:90:53:15:b7:27:8c
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 6d:9f:97:9b:d9:be:d1:6f:9c:db:aa:b3:27:69:e1:d3:63:f0:99:37
Fingerprint (sha256): 0c:e3:33:85:88:27:cd:be:5e:92:1b:2c:4e:77:af:31:b3:dd:45:16:d3:ec:51:d4:b4:9c:c6:f0:71:f7:20:37

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7212.crl

Check the revocation status for certificate lubrishop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lubrishop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lubrishop.com

Other certificates including the domain name lubrishop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lubrishop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3178156960855816440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 00:47:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 00:47:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lubrishop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806375873548364467828337435394955632547595360038387341248206995510706623789635137200645546125670513815141473589930273532242196515804315264815955666090572279435619342072473192284659622403442206819694449833676113534721953988037947460616198770516477237863824858848572585736694843453870457407244547459253605864936593945353412454802788555215307098797669226353430851171027968048196239034690990653280860346929931063932206742993184744604496520606062935268066760958663571074492847043154135165495565275490092015041008586568376549356673623067322982284003033842419951280785892926331926392512152128512293210137070024985870997717562060343261658619595898718022815321879334122540416425285021313179124439297354766019354910953215596957191303020012576142120021729867687214413467205793998578112241762581707350084380037947732697487098566759167204756130896299573271762859933417280915110738917242603954550365664043059088391819618501420362921968887552816812401865791106756483869456709370431699885156413542449477886513886308311053015534861202286763871923997298416519334689184333184089273166903031207420741117673602356484449632409840116515204219143350015408000753615132058101472670779484701673943684448169442305626225263253486584100520046961801454225554770469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7212.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lubrishop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86036add0dbc17894473809d5754905315b7278c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189855d5d1f000004030047304502202aa0b1bb308866f0a71e79a681888f438088c807c284b255f95d39620a6f83ca02210097b6396333e09e2a1bb3c10280d6e187acdadf7f8ef850f00b5f36f6a535911b00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189855d5df200000403004830460221008d424006f971ab652d25b586aea5d76336cc32821ad5433e7a254dd94f3f59110221008390c7974bc46b7afccfdbdd70e0172f38290c540c68deb077eea85a699318e8007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189855d5e590000040300483046022100fb9e10944842abcaee1d7012a564b66a6c9d480fd9f3ef980251542284d512d3022100a2826d0e93f3b0bbcb4d2af389bbe8b0138a700e780b866e539d0ff2bef1c8cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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