nextbra.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 58:c2:41:48:06:df:d9:fb was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextbra.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 58:c2:41:48:06:df:d9:fb
Serial Number (int): 6395746198428310011
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 7d:a9:7b:0b:6d:f4:4e:e7:10:1e:6b:ab:2c:62:3b:fd:26:73:15:59
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 06:61:0e:8c:76:73:21:6d:c0:cf:32:56:37:d6:d0:7f:8e:cc:90:aa
Fingerprint (sha256): 1b:3f:34:e0:73:bf:f4:b5:ed:a4:0a:f1:01:bb:2f:af:6d:a1:9a:d4:b4:13:d1:87:b8:80:9a:18:e0:06:df:6c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6531.crl

Check the revocation status for certificate nextbra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextbra.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextbra.com

Other certificates including the domain name nextbra.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nextbra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4Rvyj2GxaPzlSpW2PxLu
mp2WkWv8U53qUmVnS9P5OwxVKNbCBsBf0dc1dIYHTXuoe7zIILjTwEhgDjk+/aNZ
kA6W5VO7vsP93+X2WYmmQ8HRXy/Y2am9WL+Jg6Q5RQDdZXFY7PM4TBZlVkWwOyZI
WG12EGKsG6sT5+RranbmlyTr0fhmA+aMhpgu68wxFqkLyJTiEVqlQaQq+s0+9SwJ
naaaKJPtJnbHqTKl6X+H4WIScf/7pnCHk/Ubi3Y4vZSyUxyywo0UNaoP3zJnZSqy
R6Rz0XaboETHGghmUg867rHyF6wOzGSWtkVBNG9cjoB1gIjGYHuI8FsA4IkZLx/w
DS2Eqh0cW9Yl/QSS3B9Oa19v7uT9eX6IrmqCiSZADATbUJtyO4Eb25IZr86GIcKp
IJ01lU9hZ+6VjrM3PvrrfIaCzMhda7Yx2Gy+aUJtE0E0d4kGSd0W/l31urivpVW3
r+S5ewQ0IsCZSE9PTagzrRLu7OxiiMe01J4VNrW0okJ99P8aaLFtarFgTRnHlwNU
mmk9nhzwmWFYALTstfwC5WTYYrhgaW5a29/OXlneFQKMkf1HUApHQ1vAA9S/1XdG
AhPUYFgL7d0SNJWDHX4wccwrTZfyRMFpXHhAuq1nMlcESIqwFAxPqBEz8+Nc9srX
f4pJE+Pnk6lx74+AlZvN900CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6395746198428310011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 00:55:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 00:55:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextbra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918365289733967752039014446680754585380276658725588184328869527726454782513331989287995592879270258875482774852177243460201646975880296061484858041347996458009705815751626616870184565413400540160097136076637850421690558531224556000337832973511624532078879651764360483571236739654293741940086862589648035329037011749027561020592660718232893451645018316742713619127098755772566109488910840975045969208620709997318998727877803771929956458091653604607482217605425491881863237798421450026381500730625394437075878118770849851125132914133969900836644031845453524186483491978769689388477701404615445816970301436020104969304571533239819854691458635787498572951146775904397401855041037629567899106865280896018907545160070167670981287945589115611691195696037152892996896012337170419135756789747377424323558131078282059739463025900207953866531509997472482612710218533327934555905165296952615333207263101619662199936738839301285375624293110439032962980174886394982866901833734426762444886459913274259599908469410359590010182404807283236857146529331525508426705793535719570387923057422351852101767470885535794288435297175665286600698718505791912250907351711694082031921409028531693408146283989890528418812027286879277007496708664103354231354685261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6531.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextbra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7da97b0b6df44ee7101e6bab2c623bfd26731559
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a18602445cf9c406fc983af8fc43927b9369ba1a69688eb0d84e60ff9b765c106be3ffbb9fff4617dc5c12953e56b6f6c883a51b7d2b5edeeed69224f8b5bee987b4eb4f0f8cff9d71db9e4b1a319a8607a825baf783ffb97ba9043b569b00daa92a4b049e62e49ee60809cac52c7dc390259cfd0baf3cd61cbcb8837fde08a69081bab6927ab3aecf70cea44d5163df99d99cbd8b42133bed0fefa6541c59283ce5f104408183bb651288965f0a3b1762738a0910faab95908bdfb44e82200e1bfcacfabc05067581dfc5ee50de1ae818a9b6456115a340984b521abe0d57fbc3dfcc17979233cff193e9519268b6013821131695ca2ac82822315f633fcc64