croton-on-hudson.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 3a:25:3b:b1:29:16:1e:94 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=croton-on-hudson.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3a:25:3b:b1:29:16:1e:94
Serial Number (int): 4189820660422680212
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: a6:fa:7e:30:25:23:88:29:29:39:c4:e1:57:81:6c:fb:bd:27:c6:0e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): e1:eb:a2:86:f0:6c:14:98:ef:86:c6:0c:5e:74:93:4f:a5:c7:2a:35
Fingerprint (sha256): 1c:46:ae:4b:be:8f:5b:c3:84:77:9e:02:1d:b0:6f:0e:c5:31:3a:a3:92:43:5e:de:03:88:9b:da:13:22:ec:71

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7246.crl

Check the revocation status for certificate croton-on-hudson.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for croton-on-hudson.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

croton-on-hudson.com

Other certificates including the domain name croton-on-hudson.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for croton-on-hudson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4189820660422680212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 20:26:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 20:26:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'croton-on-hudson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973999987709903359826227697553726050786765305911793857190124763698700696751880520689967645845432317043991934206820964192508956484873909977939038504223712060877396576306190696271958389571194993106627773491979566687144044531728780063962656960846137950185344550941401294654114316255957861789114960507531216098675448871228558459613862654685224259125973520122958315214539822212573435842269629652369783427399735352350593697534948030376921884659993948800160283351991663456428367837304323863692588872320188919878253543984906957052166110878498121233869683392038048691895291879946584290449954433526288726959880735307172644206135434807193475760837022905410778908854325700608795947286581050779842751600651382058128784148474974729010618956857192409593209844227075287942998832274461541730020878927157621833058967882841840772114931367262852032674357782620839837577565227165108212849574707412007510674704828297005091036149373393210216871876827678142141374750643514657395288914498978730680011412459978771248226592419941454076330793060670316394986977582609099431738782442050865336081363654652873951118520328380907422085803215859612283941833469083700732231642299134021476746723630918026683601516780290767259519075756408539884768964619181380400356038501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7246.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croton-on-hudson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6fa7e30252388292939c4e157816cfbbd27c60e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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