cpsweb.chimes.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number c5:32:bc:9e:27:30:ab:26 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpsweb.chimes.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c5:32:bc:9e:27:30:ab:26
Serial Number (int): 14209627161755691814
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: f6:54:ce:7c:3f:06:71:ab:f1:2d:8d:ff:4f:f7:7f:c2:6d:3f:02:5b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): aa:ba:13:0a:13:1d:4f:0d:bd:f9:df:fc:8b:84:f4:44:22:94:79:d9
Fingerprint (sha256): 25:a6:b1:5f:73:31:f9:d6:1e:a5:ae:75:ef:1b:4e:d5:03:e3:0b:92:b5:bb:f5:e8:fe:c3:96:49:c6:6d:9d:16

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-837.crl

Check the revocation status for certificate cpsweb.chimes.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpsweb.chimes.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpsweb.chimes.org
www.cpsweb.chimes.org

Other certificates including the domain name chimes.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpsweb.chimes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7DX0r43SUuqdweKcev66
dWDPghhxfhUIhCCx/uhRmG2ds6gVN1ZcT//jn587Mq0hlbLyyCiVteyX+m1JW4QL
baN1pi2LgaAGDJUUE8lPi9SHXJ69BgwoRmB5P3xQ1h07zsNMAQA6r+HtnDx3QWNB
zBzOfqJF3owVPQbZvqhMyvawqF+70TE+bykFfrNGLkYxzG9q31JjOe5VomBv7bmq
lS8BsVslVyp8zLC4cBIZPdqlX0iW98OsvQxX1l4gj1VIsRG9H24EHWMfmh84DntY
Kh1LOekaxd9mWyXC5K6tDckeFUswpUIuoGLW5N5mcJfy72QIC8qtm1FgFzO72K51
R/tvZgJNWj9sklVvSc52mapmBCy0vXFKKWt1Uv4ie+wiZgufh33ONxrPNI6/c/+S
sKtt4WvArvUdJL0+FZpq4KLJSpoAS89xhARHYg+uWbCVrF1dwVyJIB4n8JHh2OcV
MWamx6bvsGwcReu5TagncwBsRFIv7SafGX3bCSeYdXF2dn3uldbLdYCLP/m4xQXQ
Xqr2q5Y9mk+uxL5PBhXoWgG1e8U3fmOXvBR4W0w89S9GVdfFdZZxIxf9srV1DwCq
bO6gGd25FadAbwbpygG00oyUUxPG9jgUKadIdxp4+Jtcm56PPz3tSIjpS5i0EHT0
hC7tQJHJoOcXXkBHAMjcpsUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14209627161755691814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 13:14:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 13:14:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpsweb.chimes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963655845656923781025755387040397510408994078068220211364434639722699811774676132221509297665446217059402169787260187688098255647657249217289131682855626976376020660616938227692245382069441716512973737515627262409450225729183284604849953555255978523355771134614209441289808978933811424247711285255695574589259664977199249681960057673048710610925915936781488503854102737445074026424575549980651433729036648736237144054350101623932374339218998253116740081972477090507939782369419766520315693449616283570869321910219891800337263301970164346387150986871260717777945993460241363383952097259520682596276474618429155604206209866201295178851695271269641805135915772367275692439010054579986327978047530489526146552813799899496171274192445368922284829633914536368821097619177996782857165373638176478309585157974772673561895837132805514344326081733893512313780798161511739268437222139097840266820863123364960830784667636800790982488348080209034171471734711284034903781531683928979063613475384078771871434635090892385846293027279245226442410436363548588623897998338620796067720107232019337786789664718622940565267823044594094620663003837382416297533197838409129008308425663788356336415692454556012276012283699550996160087301943645650496658384581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-837.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpsweb.chimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpsweb.chimes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f654ce7c3f0671abf12d8dff4ff77fc26d3f025b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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