gota.io

- CloudFlare, Inc. -

Issued by CloudFlare Inc Compatibility CA-3

About this certificate

This digital certificate with serial number 0b:7b:1e:aa:d1:c5:5c:b4:37:58:8f:26:43:47:50:c4 was issued on by CloudFlare, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:7b:1e:aa:d1:c5:5c:b4:37:58:8f:26:43:47:50:c4
Serial Number (int): 15260782473230558596544891482100158660
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:db:c8:66:d7:68:4b:2e:4e:45:e4:03:d2:ca:93:2e:76:8b:e8:8a
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae

Fingerprint (sha1): af:80:1a:d4:f5:75:c3:cb:eb:c2:64:39:c5:f8:2d:9c:1d:94:d1:be
Fingerprint (sha256): 13:ad:8f:0a:e7:58:7f:ba:0f:54:99:2c:b8:a8:96:5a:da:c6:55:ea:1e:09:2c:7a:d2:74:8b:11:75:83:0f:ab

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl

Check the revocation status for certificate gota.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gota.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gota.io
*.gota.io

Other certificates including the domain name gota.io

(limited to 100 certificates)
ilhasmiie.site
juliusbrasil.com.br
ssl470885.cloudflaressl.com
gota.io
intosouthafrica.com
pcsdbrain.com
accounts-dev.gota.io
chessgoal.com
ssl470884.cloudflaressl.com
gota.io
skins.gota.io
ssl375952.cloudflaressl.com
git.gota.io
gota.io
gota.io
gamedata.gota.io
status.gota.io
accounts-dev.gota.io
skins.gota.io
forums.gota.io
www.tdcollection.net
gamedata.gota.io
neustartkultur.gema.de
ssl375952.cloudflaressl.com
ssl470886.cloudflaressl.com
ssl375952.cloudflaressl.com
ssl470886.cloudflaressl.com
gota.io
theoakway.com
git.gota.io
ssl470886.cloudflaressl.com
ssl470886.cloudflaressl.com
ssl375952.cloudflaressl.com
festivaldemusicagospel.com.br
gota.io
hiy0ki.tokyo
forums.gota.io
www.jacobtroutman.com
sni.cloudflaressl.com
subs.gota.io
ssl470886.cloudflaressl.com
gamedata.gota.io
ssl375952.cloudflaressl.com
ssl470886.cloudflaressl.com
git.gota.io
www.makeamove.com
ssl375952.cloudflaressl.com
dev.calbo.io
git.gota.io
ssl470884.cloudflaressl.com
ssl470885.cloudflaressl.com
www.transformationalbreath.com.az
gota.io
sni.cloudflaressl.com
neustartkultur.gema.de
toomuch.surf
ssl470885.cloudflaressl.com
subs.gota.io
codememory.xyz
gota.io
www.makeamove.com
gota.io
dev.paperstac.com
ssl375952.cloudflaressl.com
setu.gupshup.io
userflo.ws
ambiwork.com
accounts-dev.gota.io
gamedata.gota.io
ssl375952.cloudflaressl.com
skins.gota.io
ssl375952.cloudflaressl.com
ssl470885.cloudflaressl.com
www.tendenciasmueblesparaexterior.com
git.gota.io
gota.io
ssl470886.cloudflaressl.com
gota.io
skins.gota.io
www.roomeight.ch
git.gota.io
git.gota.io
www.neutrinotools.app
gota.io
admin.dev.drone-roofer.com
*.gota.io
skins.gota.io
www.cno-global.com
synergy-uat.poweredbygrow.com
gota.io
bezcakania.sk
upblight.com
ssl470885.cloudflaressl.com
ssl375952.cloudflaressl.com
ssl470884.cloudflaressl.com
gota.io
ssl470885.cloudflaressl.com
ssl375952.cloudflaressl.com
gota.io
lightning-writing.com

Certificate

The complete raw certificate details for gota.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsLCCciKUMODv4z034vp
yPAwVYYfj4FjLvxNHL5D2s2T+iPTx9SXlJ1Qyp1rA45zpdOA6qWaSVl7kbvQzLTH
3XCJ3a6GMat/32zj2aH9VXoPLuv6cbMHRkWvpXijulLTpKRnsvc3McazDz8UJyXx
HBO4aMm6n7UKEQ4LKqCLuKhzRGV7ELdYXPHbVWKdywixlw1AKqWKv46Ge6bN6wij
SZbweY2uwDTSD8xVJdmefYvaBjtc1sz6RfSq3g91V8qpOW0Z0r75rXCBrzL0Fac4
b7omH69iDFa9DjlLkkNoJ3WwJoML8ijr/y4Uja5hj8gqc9jjzRT9uRfiuxccTXq7
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15260782473230558596544891482100158660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gota.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21556550574597285010409293358006941880477280775576230424767924869866869461113709781386476463880473135791030142938413115608199446936901055699113287874568298224556297910510108217655453829563868525185086815107215167501684742563483245178544729651511388084187024242915366037444468170923638494723925823270765176049151804690728204379978280797572407316923573161010039937276404860941930082591168403939449346867133527183321836675328800026925024985448487592834290244822489095181176011395352218588505692161311725500708411448907235961933141788756846609396692955735279573432005261590356910921099032322269064461651287179188074363901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0dbc866d7684b2e4e45e403d2ca932e768be88a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gota.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gota.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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