care.mynovant.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 39:29:b2:35:6b:9d:09:d5 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=care.mynovant.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:29:b2:35:6b:9d:09:d5
Serial Number (int): 4119019276715493845
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: da:2c:76:b7:12:7f:fa:91:1c:da:2c:7a:75:ad:be:b9:00:4d:7a:1d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 73:f1:2f:ab:56:85:64:1f:3e:46:62:45:34:ce:6f:f0:41:7e:ed:1e
Fingerprint (sha256): 3f:cc:00:9e:c4:3e:ad:38:93:38:d6:eb:8b:92:1d:39:62:85:52:0e:01:c9:79:9e:d8:0c:6e:b6:ce:59:de:02

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-895.crl

Check the revocation status for certificate care.mynovant.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for care.mynovant.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

care.mynovant.org
www.care.mynovant.org

Other certificates including the domain name mynovant.org

(limited to 100 certificates)
nhlink.mynovant.org
webproxy.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webproxy.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
nhvpn.mynovant.org
tesyproxy.mynovant.org
webcenter2.novantpractices.org
www.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
mvv.mynovant.org
webproxy.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
nhlink.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webproxy.mynovant.org
nhlink.mynovant.org
myportal.mynovant.org
care.mynovant.org
myportal.mynovant.org
webcenter2.novantpractices.org
nhlink.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
mvv.mynovant.org
webcenter2.novantpractices.org
mvv.mynovant.org
webproxy.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
care.mynovant.org
www.novantonline.org
webcenter2.novantpractices.org
www.mynovant.org
nhlink.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
mvv.mynovant.org
webcenter2.novantpractices.org
ssl887705.cloudflaressl.com
videovisits.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
ssl887706.cloudflaressl.com
webcenter2.novantpractices.org
care.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
nhccportal.mynovant.org
nhlink.mynovant.org
testproxy.mynovant.org
nhlink.mynovant.org
nhlink.mynovant.org
webproxy.mynovant.org
myportal.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
www.mynovant.org
myportal.mynovant.org

Certificate

The complete raw certificate details for care.mynovant.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4119019276715493845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 16:48:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 16:48:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'care.mynovant.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603188465405997750658045956087178442002894942238170353405989669274508750526637119806489541853892609951419621646258173595237094073208675012805595529529261728786065481292806362046394541322477722928288173426518248746095829386707645168753324718342735712269699605096499888661968180863529704102262171221004059098926127453271213049275398953516381991642594273629749587278759949928111000851949688162365759683699739874883943881170650269383409893518062381080735331948201773817650187890394584007965505032597673864789595720387310981572170022110692864160577715209900193993482732936709549447662780411196474186542229588445276958392641279648847608768768463991932925811655877260545765585969441333931925365383585865211084265332052256957260124921009144258591643144259963312383399395060481786934124773531726537366741873504803081094349718505844087372523159101310313554597875299548212580713047496467226604520808236304918791860018716703432804113410212601756789666303509422961068686271916755531974135728649016483232200298442329538784598959752558001397747257862837922543101002127337866466003045436603170188877400860428099541294268582938766624472805671417861973001068682828301177108361021651288351220746919573396533834181977404149093111798840895009199720998909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-895.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.mynovant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care.mynovant.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da2c76b7127ffa911cda2c7a75adbeb9004d7a1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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