refractiva.clinicabaviera.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number b0:12:6f:95:ed:4b:fa:b9 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=refractiva.clinicabaviera.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b0:12:6f:95:ed:4b:fa:b9
Serial Number (int): 12687325789978098361
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 93:92:cb:b6:a2:33:56:73:39:73:15:64:81:b5:aa:a2:94:27:0b:c5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ba:9e:1b:06:24:7a:26:28:84:4f:94:4f:6d:0e:1b:22:b6:3b:2d:3c
Fingerprint (sha256): 0d:47:ce:b3:c6:83:42:d2:aa:a3:27:a1:ca:d6:e0:e6:18:1b:5b:72:63:35:f2:2e:72:28:04:c5:83:7a:38:8e

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-818.crl

Check the revocation status for certificate refractiva.clinicabaviera.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for refractiva.clinicabaviera.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

refractiva.clinicabaviera.com
www.refractiva.clinicabaviera.com

Other certificates including the domain name clinicabaviera.com

(limited to 100 certificates)
descubre.clinicabaviera.com
www.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
apis.clinicabaviera.com
secure0136.hubspot.com
stage.abilitaxr.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
areapaciente.clinicabaviera.com
*.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
aspdev.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
rdpgateway.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
prescriptions-pre.clinicabaviera.com
secure0136.hubspot.com
*.clinicabaviera.com
www.sterilwize.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
www.clinicabaviera.com
secure0136.hubspot.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
www.sellmydog.app
princessworld.co.in
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
correo.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
cdn.clinicabaviera.com
asp.clinicabaviera.com
www.clinicabaviera.com
mail.care-vision.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
sealsign.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for refractiva.clinicabaviera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MnM0PCgD7r+xK8I63i
mEBlsbvJr1WV2RRtUpMXBF3r53JsnCamBdw7+nmGVM25XZSmrXWfTDYLHsxA37aa
Pcgv3aLR2CC2fXtlvCnIHkqlXs55VpMUbN59ZvLo3+7sZRo8C5nyBUQWxnBKLEvU
jo3IpNzbTz0buWKmfoYNQdU8jOiZAyQQCdaKHs5oBh5p/c/eOAKcpoujq+ysrigN
4Wi1D4D3IdNoHi+1ce4ocs+eoamcXiDeo6Ma/yqf2rsAJZpgyl1e/OCWYXVQZuxM
rLL1bSYrqE7Oq3/ewNQ6Z7Fni/pbzLKa/bmTdi7DxWOhSn6FUpS6cMP2T3UPHR2c
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12687325789978098361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 06:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 06:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refractiva.clinicabaviera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19095098490491164491140474672548282389565706629749474975935647876679885131985070044106677743719504825438785285857065653028467382244851759087749563834857849886347788402282175834305142013626371063124339747502890417262484566216029076273954907705018745211700881974145062851811191575323703563727315009580069020297399745298061949831614050443295751039529857336394030986939847183629337257462474773017986190904629161849436396093060351511112247840340341214400771039039374640733410023022993761149530696075951633293541941098039325096505432824987323389767467305831403808125835111178809838943929202578514137869535453396960368499927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-818.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refractiva.clinicabaviera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refractiva.clinicabaviera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9392cbb6a23356733973156481b5aaa294270bc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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