matcraft.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 88:5d:26:2d:56:3d:ef:45 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matcraft.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 88:5d:26:2d:56:3d:ef:45
Serial Number (int): 9826051938154573637
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 8a:1e:23:65:3b:b8:0a:70:b8:48:da:46:db:b6:c7:b8:fe:c0:63:cd
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 50:48:29:27:03:05:f3:dc:2a:53:9f:db:70:2a:ef:53:0c:fb:f3:85
Fingerprint (sha256): 3e:b1:7f:90:19:09:71:90:8f:a6:23:4b:08:b1:79:c7:50:8f:6d:24:80:1b:b9:4c:54:80:26:7d:d4:84:cf:cb

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6472.crl

Check the revocation status for certificate matcraft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matcraft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matcraft.com

Other certificates including the domain name matcraft.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for matcraft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9826051938154573637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 13:10:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 13:10:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matcraft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628388432976930787755012192548354767524993665004461649425708117285269880610907267128008657044589099144239517083251863552178817952499379203562516064900958016526607572930267251870948997478927511726347902022947295304211215821046694963959467521196873126742931901280585157625934873211750339661387615686257498565179531250849760049346260331342588434025130209937295123645002823724030659188083705692932155019364207130292872976772250189755899429502271039128050259543023217646902444850055803237628077399265192369039000617320065278059584383482768271107074460115594048191425631435840646921917638681151406105345041536960507551625154776770378028796955400883833069760803911533535154688867596981693116957335810306238377423801802547600661155690906111730404390337922781968969583261538764235911970480694076753020606986222844018333604929047606319450584092707929145534929958027341674730355699139088826903597456225481413637981035325682008207924059427590203508467051569873715332125506741316084224149185369392059899713740857387141137941733513153575301813322602794414589305489804160432430542993431212543639405350861814074166754414763209122863219203681994728612734677059953211466000801431455103503552264765686672892317836534949374329663237463876997280241646717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6472.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matcraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a1e23653bb80a70b848da46dbb6c7b8fec063cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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