fromscience.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 95:b6:41:76:14:11:a5:b0 was issued on by GoDaddy.com, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fromscience.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 95:b6:41:76:14:11:a5:b0
Serial Number (int): 10787881932811249072
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 1f:71:e6:6d:87:54:96:f6:3b:1d:68:1d:73:8d:08:14:dd:90:40:54
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ed:3d:df:bf:55:5c:a5:69:49:33:28:56:33:bd:f8:b6:2f:6e:b9:22
Fingerprint (sha256): 26:c1:4b:d8:43:fe:ad:1c:6d:d8:b7:c5:44:66:7d:52:48:06:74:bc:14:60:d5:0c:46:9c:f2:3a:05:5b:46:42

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6428.crl

Check the revocation status for certificate fromscience.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fromscience.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fromscience.com

Other certificates including the domain name fromscience.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fromscience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwbvJ3cztjyO8Vm8KMymm
MYnxUZa3xTvvoq2z7kwYl1zTRWaBTHQVs22ozwXlLqUY6P3wechhUrvP8H5/V4C/
Sh4GcU34m7nJfemAWjYLa520CsYpVZl92BoQAq9/+5496EMS/dsuephvr+0U/0kI
X/UKtQ/rb8870EPEr1Sl1pMO+1fzSyFPlv3u67wJeODFHqVQeY8eE1c9q+GcLv42
J5A87u12sd9wPI3Lzo8wqznbPqfPc8vgiteTVwDWQmqBgoDJf2+1JbtkW/sD+goh
E8el6cGJfplYMX9MSwz2ruLOD5suT6RxyPqLy568BQk33ejQoBAbM9AJpL1qXcnm
8mwWBUx95HSeT/l3hfVd1KTa47uPVRk+KZ+3Fsk8G98H0j4sY3MhqKfP8TNs3D4X
eIuby3oVah00IuTex2JxQBdk7iGnT09q85M7GKZdnamdwItCw/CigShaqfbRtrBg
+xY7P7VbxwcAxJFYfkoVQd0vmdBWkfP4bqU4hj/K/GpBp+w/IqdYTUyacGumxY8u
tsTxo+KTf79arVxuCpdbciotYVjWknL527X/IS4D1WfGKWo+trs/c2xtsFVNH6gZ
PkmcqyFW+K2Lt28FitVUHhZOpW0VdggSV7CLmm/Wb5vg6F/poCuipXOp7DNsWoLF
eKjTa/SZTAt6zXDPUy7+NY8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10787881932811249072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 07:52:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 07:52:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fromscience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790363923901062848252873894323561046707609695140525588655646264782398909555388411356654896327559252883579331093692712265939030039822763717180317056821290381158873627818908644859293122093430816971897851326951422646466608574609710638020596903864126856186884493728954529393305914253428512522975303385769134929907665887903276373161062051791790307869090973432193214878385274511645960991466586836264535985054669370512884976806497553860265118304143533165351556950588488125267210704981519993513093783094913100566425296721627958771504437442125918358853232757193179220309482782232105160599466923593990739801991865971105924192237241648702923959668348411908235854844812427918894246352324363294362904297454242708126038103041215095421306265191788033375546158209059670794461456808442795826141860044276199641587732302949874603044418447463470667982542018282355413740086715516766546135431208845842450610886084139757246858906455361910751227289036781905392305118340622285078421657425605155651376953332636432173481852832547558946698800006448727805590279009237750742800465366218332800379092472800663055573370234811792034128574288998836857316112637789965090886181342848240996004780361793918658354224622163214222475892576076613180152087111689299649131066767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6428.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fromscience.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f71e66d875496f63b1d681d738d0814dd904054
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001890b4a2f6e000004030046304402203d70f7f00d27b6a99aa8517762a98ed052d6448fb655c2a82f104d6fcdb45d54022060ecd1b48fc62918aef8ed1da97164cdbf219c3997c5254368a9bcb9bbb2b76300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001890b4a309b000004030046304402203742568ba7003ee24ed3b93e2b2d24c9a58cf1c487ff3aec5efe798c6780fa3702206dfc0c64c1adc7c707a78f2b8d53f136eee9ad852cb5d88cf93b7fe29aff7d2c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001890b4a311600000403004730450221008bbcd68309b102705d2c286f89fd9222b7b6c2bbdcd4b3dee43550a56ae5aff4022052ba86f1e05290c1ab2ad3d9dcb65492d5aa89482da3ff45f0959878dfe769e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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