bathmed.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 82:73:02:11:33:5a:b0:ab was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bathmed.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 82:73:02:11:33:5a:b0:ab
Serial Number (int): 9399859120151638187
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 9e:e0:8d:1b:e7:d1:db:ae:99:16:9b:cf:80:44:3b:1a:3e:8d:93:6e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): a0:ed:92:41:83:2e:3c:b7:ec:51:a0:8d:46:c0:d9:50:59:35:f5:c5
Fingerprint (sha256): 13:07:7e:c2:c9:b4:10:89:d5:14:bc:6d:78:69:11:b5:b3:b0:97:ba:13:2d:8e:ee:1c:25:ba:79:fa:0c:9d:09

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6419.crl

Check the revocation status for certificate bathmed.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bathmed.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bathmed.com

Other certificates including the domain name bathmed.com

(limited to 100 certificates)
726.me
bathmed.com
dynactin.com
www.bathmed.com
bathmed.com
sainthuberts.com
www.bathmed.com
www.bathmed.com
tomballorthopedic.com
terrafence.com
www.bathmed.com
bathmed.com
www.hotelge.com
sporting-memorabilia.com
callertune.co.za
mundang.bible
bathmed.com

Certificate

The complete raw certificate details for bathmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9399859120151638187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 00:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 00:48:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bathmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690879436140111705894666754695806457023182412233972859845595504275722305949318612551972625993375066431384724265513355107110152227624233171193982880077065714311066307280831241144372441148738305719355769581842123391970905782392779826243081017146594018973889017135605687778599487596974077239549987018841499533564754884622192896031294286290099701021305532124628724609048518476958704826535758732612937631727882198859356026458960601418701896712906826070915886586539612371323038235659745664227802693299401573954424183489565223919949447534122615626723642519051546982622069146075392556769607247015071282978639552419587118471361431023049314386050248140228506810198436064162415920836703077922705744764501810770663682694759099019098471205116801793387542907842682442000481079181793865386171263976438369544791747491283379258292623415712864107257549852240334336228708448205346408320059370453393334731676918792146319236163821375978068155148743486325108613930016371577759459674356993796877706571019089947085800663022660940759104578166302662299389903540654887292241800490748444469323779793141289159036302875951984702889822306537195043640194713808557067143675123065376411889031582771729228910270428387272181860881131698634306211390638753813109874343629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6419.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ee08d1be7d1dbae99169bcf80443b1a3e8d936e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aa1d8f37710b5b0b0f98d750d81f433c14fa76bab0fae154d94814dcf473d75fd2aac5397c3ae39a4c1efc26b1e117365eed93db7baafac79a74244b1b8d2637ca4d1151eb5464e22e688790918926fde6fba54a6f0abf4850c59089610aada64b4d570f4654cb2057b608142e6b2e1b3abbd74c28a7da765b5d55bd23428739d20cba9894af52dcb7d0027a273f0945c2fb14450bfebf9547c0e0876e816d4ae0333c36730802ed269217d854e144fca8ec45722075b4fcdb48837ff3b17fe47247d08c56c8cdc601ad498962d0eaad5b12b67c1039b3d86e9214332bc4832d8ee7f215567760cafafc9724e8c615d3d90af742030fc5075075681eebe324c6