aquaflow.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 05:4b:b9:a7:50:bd:a8:54 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquaflow.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:4b:b9:a7:50:bd:a8:54
Serial Number (int): 381602721708222548
Serial Number lenght: 59 bits, 8 octets

SubjectKeyId: f9:cb:92:81:69:f9:d9:6b:ba:13:25:f7:eb:9f:22:ae:ea:bb:44:2c
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): cb:16:20:76:b8:f6:c2:5d:00:7f:56:1d:1d:59:ee:b9:6f:cb:8b:19
Fingerprint (sha256): 32:20:ba:98:13:22:d1:5d:41:eb:11:ef:8d:e9:8e:f4:bb:85:46:04:8c:78:15:e7:55:3e:61:40:43:b3:ad:43

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6893.crl

Check the revocation status for certificate aquaflow.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquaflow.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaflow.com

Other certificates including the domain name aquaflow.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aquaflow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381602721708222548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 10:52:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 10:52:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquaflow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811522653063654938494733001205343242701796541904996215253777127032035612186044911829629019557888254901751290793176642441085289889628991474319598235354301620122337218326024943367393951926719114925485896269807582675105336775251898091084360678516120204280081094385127238393325514156808447686181795132154965184863998661089800560837608205130038032977763840356397218507726072691882824627067443613757537691822011392758701033590667210032648682676186045498703959687794830610376591031952288830979288897457016434154264650666269506534233963193975310602405345859005722394134620778739287867933809901466500773989547939351560009958280024044453877291779834744846768547503780991255921121672638656608536190197517527642690138544110551338163576877878542445359544410433635998406242803343275176182401853729561996244588562235806821924718031918257269717594036039424159850802662058772131836662057702476245584483969691575204330420015054196259595798361649220734924427439496408109460877841809805324144385128951102039623857420488069954261937428312631506157441716714139019127998855211357973650327410180863475796185381907361413652289621359587538036459214569898939999670415777450741665581338360300825111543855420200760767092084240755715269286547643694368194514468227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6893.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaflow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9cb928169f9d96bba1325f7eb9f22aeeabb442c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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