*.exclusive.rcmusic.ca

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a8:30:9a:bc:4d:26:92:52 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.exclusive.rcmusic.ca

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a8:30:9a:bc:4d:26:92:52
Serial Number (int): 12119356730792907346
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 6a:b0:6c:11:f6:3d:8a:27:b7:ab:3c:79:c4:ed:a1:0a:58:81:5a:77
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 86:af:d6:57:03:27:b7:96:8b:cc:97:7c:4d:79:75:36:ab:91:aa:b5
Fingerprint (sha256): 3e:d7:29:9a:2b:33:08:ba:6b:88:db:50:2d:12:1d:26:96:34:06:0f:86:8e:18:a4:0e:2f:35:1a:3c:52:21:5e

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-3660.crl

Check the revocation status for certificate *.exclusive.rcmusic.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exclusive.rcmusic.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.exclusive.rcmusic.ca
exclusive.rcmusic.ca

Other certificates including the domain name rcmusic.ca

(limited to 100 certificates)
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
bookstore.rcmusic.ca
onculture.rcmusic.ca
tickets.rcmusic.ca
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.exclusive.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
www.rcmusic.ca
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
*.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
*.exclusive.rcmusic.ca
*.exclusive.rcmusic.ca
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
register.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
lms.dev.aws.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
tickets.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com

Certificate

The complete raw certificate details for *.exclusive.rcmusic.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Bcbq90SUgneJMJ+kG/
a7cz3FLT0n5E4NEQCsjpQsiNAo47FZND7X1+47fwv4Vn7JjDsfzCqhrxPCjwBq1T
RkJxBHTvf6G7nNroKfw4vFeNeFb55rWTWCtPcQgFOaZ37xjLGl5ys6w0WYeqSD6h
7LSfvOuIw+X9PUrLRBvJ7yEkKQ3oUyXoJd26o0pDbp7i/oroFvlVOQhJ7w7QBZsf
yrA9dLTIQaZDajQE5e1chL87grHnJlQjjjw2h3d9BZTCeuKF9hEurEsCC5p9ghck
B6nSG0hTYw4s1WzC9ljeo7rlMOyv+DzZ+5shRijqiSR80J3BOrDj28K5s36c99c3
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12119356730792907346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-18 21:53:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 21:53:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exclusive.rcmusic.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24727106032483906820616991498408436278908386768050638888972370430426627762163627876906347233352965063138434844437143968282898012202703003388163059251901380272068080836611479976247816734113227458203356446553988968765322423211314756732788920914262822952297436759446480952392167780389315675286107817973823727627475851310678088465687541447957664556399093172806902597777998094164980174562546729487494614895556074413415500567045808437939719976631044310244367670375025164384333563201074555944800764019101288905863889821136908792516161470249733811516909808344659704714496485606414650223067998378048470920462466729548698826517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-3660.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exclusive.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exclusive.rcmusic.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ab06c11f63d8a27b7ab3c79c4eda10a58815a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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