waterring.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 90:17:f6:a1:5d:1d:43:6c was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=waterring.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 90:17:f6:a1:5d:1d:43:6c
Serial Number (int): 10383038638838334316
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 6e:8e:cd:2e:92:1e:e3:c7:78:c8:f6:ea:2f:4a:b7:8f:b3:0f:32:84
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 4f:cd:75:85:73:a9:35:1c:02:c7:3b:74:48:84:c5:cb:00:12:e2:6e
Fingerprint (sha256): 2f:23:0a:dc:83:6b:83:38:4c:b4:40:c0:f4:a2:4c:11:a3:4c:8f:4d:f1:26:b5:99:70:fa:c5:05:15:eb:09:41

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6489.crl

Check the revocation status for certificate waterring.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waterring.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waterring.com

Other certificates including the domain name waterring.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for waterring.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10383038638838334316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 23:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 23:42:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waterring.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641675487015679608902299755787782083320961455046705154502020411307741215343591586632023404694820108822422962638274893860596322231540809236112876791783684054426607163658394672503069822482903611853795847174165755469077438699402085451628596247136366015392830357603907780279252212592783921669347448596391454416803105027033036780147919475854680013704203855006236320203699280899213401208378169722471225328807802575917596310061074817709921891768214001214499808835179060624975839831841806574959361947816591281032376697031661493546502885348037618137651323299074656179864100466442746725145413425637242482100858211028576487133442568011674871480587808353543936609700800804639293144720859322646095924586797879497486139565551722135821955294274432798131072973873131862496653573964800920773265320484075767111134879766590061703877733987875155491359411079836615315625714300360017782205274941707788881256910271546206123802030232019915436573370695679785974889459031608370899212994503942017673662457843458019616623550837369383380831288298018657051707381614001152091054456688331616390932814695120592047167001254378097211175781978382969731765382189358816864986317369454616393556535531134999373369434255587126991783578346603418054891342657808745575612894721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6489.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterring.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e8ecd2e921ee3c778c8f6ea2f4ab78fb30f3284
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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