nfgco.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 22:29:6a:83:d8:ae:72:9a was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nfgco.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 22:29:6a:83:d8:ae:72:9a
Serial Number (int): 2461615785843258010
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: d9:62:ce:1b:87:76:7e:8b:61:2d:38:55:b4:c5:4f:b9:69:4a:5c:51
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): b4:02:bf:57:89:e6:30:0f:36:bd:05:61:69:bb:d3:90:b5:c3:f7:fb
Fingerprint (sha256): 18:6b:eb:99:93:6f:72:a5:e3:f7:78:e6:81:bb:e1:28:c4:19:c2:fb:f5:08:42:0d:c8:f8:86:37:81:ae:64:c5

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6616.crl

Check the revocation status for certificate nfgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nfgco.com

Other certificates including the domain name nfgco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nfgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1sfMFNmngEgWO1c9CfFk
xd0Vf5tQPKAeYBIahfusQcrR8C3C1EyAL+CTnIQ8WQE3jUTiqVNBv9r97GNRuDdf
g7pvDF4xEhTPtw8VqfUuegzToJd1xvaMZ1KEwKatKNcg5jktYvJNYL0+jukgrW5N
scRFATLY7dQ1IOC7sNO2VmxYngmblMuXXpVUMAEq811JFhBbWgm/EF8LvTpwjCHT
blB9u4bvPoMWMCYc+3qtRMOKXw9dRK+9+kBPNJHanImytomp51dDyw9UNHrfI3MZ
TuOTyVObD087VT4oJEcYjmYbJx+oSiLxy1GywJQDdxh6DNbCZIgJL5ReSCX72/tI
9EoUs9awWoL1eLwyxysBKElRlUlbuJIZYfx7uLjukUsvzPbpow9fY0djjSpfswg2
bZ3EjlDFW44tB55SqeitDiq+wFlqCydBDA+56ItGIhmAmGmsxjJZpeP3eTY4gH4j
aOXJpUGcbTkRanSscSFoWPhgAZrz8K8XMu5ubUPLrx+uvQPCcD2mcxdhdcyes4vF
kDvbO/qxpAKV8xtHtd/74o2Wt8mMPbFkonfHcrEkZv1lVRpnR9+NoxRSbDRp/+Wx
QunnVdS3AWWp4Rnd9Z7fI10q432qM7K2EF/F9Ni6sHvL5s/SWnpwByr+1xegX/3p
hBkFNC7HzFgwUu+WeYpyzCMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2461615785843258010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 03:31:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 03:31:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876227820532234293536410819000225283196170594510641977968156549865396394661990277763926033072282780648579334262644799446788621825163106608459467720563751682111194593314813663980705124392259501153703263610311380922161118367507993082353093724966939566685968049201310248321696499534910650025734153832564438014353811926792925263396376736372769662483741754691767180101591194699715436865506861670636996791328064844896086724416488423688684944023121512704500180270773446313070436318245046373107762729984215776277380895360078943091524755951863727279370001710472300727099687316579578414966605382813333494121555569543493980268218210237551808676168555408946178238791075388696631970672453125225936467964828069368377783047446819900222170967343536901624128769846823378013437652815522191907051585303196379122541247758375211427996444174816939001743804139814813970642628876646496902807352730857858475838910177223735749235111591110968245442076669705628166106334963248961597174981172385837439153161383307679701386050886346887706455077581232809868944304911023519826586711902213160878317259978504894575033193205164739346273516393767411997038576982150783525148022190315229469248350039266654186311585034880746776112887187120348737532652443487812809395457059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6616.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d962ce1b87767e8b612d3855b4c54fb9694a5c51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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