espats.ch

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 96:59:a7:b4:d1:d8:c5:eb was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=espats.ch

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 96:59:a7:b4:d1:d8:c5:eb
Serial Number (int): 10833874773673035243
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 68:f5:87:9a:f6:ce:e8:04:a6:d9:57:85:e4:d0:35:1b:b2:b9:b0:13
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): fd:b8:5c:a8:3e:a9:8b:67:d2:38:e4:b4:b2:e3:04:1b:64:34:92:a2
Fingerprint (sha256): 41:9f:95:e9:50:2e:c0:56:49:67:c1:8b:00:19:fc:60:75:0f:61:81:04:15:95:2d:56:2b:1e:94:eb:39:72:d8

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-13147.crl

Check the revocation status for certificate espats.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espats.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espats.ch

Other certificates including the domain name espats.ch

(limited to 100 certificates)
careers.motionlab.co.uk
termin.zweihorn.org
support.itmagix.nl
cliq.hesse-vorrichtungen.de
termin.zweihorn.org
personal.top-effektiv.de
petbase.mobile-xl.eu
inside.dygitized.io
careers.asuragroup.eu
support.sirrahsoft.co.uk
freietermine.ruhrpott-digital-agentur.de
support.sirrahsoft.co.uk
careers.altoelectrical.co.uk
termin.zweihorn.org
help.adozi.com
terminbuchung.brunetticaffe.de
espats.ch
services.espats.ch
bookings.ksijdar.org
bookings.ksijdar.org
recruit.ludwig-conseil.fr
afspraak.hanspunt.com
careers.motionlab.co.uk
calendar.newtonbates.com
services.espats.ch
help.adozi.com
karriere.wilhelm-biketow.de
mail.kioydiolabs.org
assistenza.amotive.it
termin.zweihorn.org
petbase.mobile-xl.eu
termin.zweihorn.org
bookings.amender.ch
boka-mote.yodapp.se
bookings.madebybrain.com
help.adozi.com
team.zebrabyte.co.uk
meet.pbmconsulting.info
job.hemfatalent.com
jobs.dalisso.com
termin.zweihorn.org
support.goatsign.io
join-us.tickbird.com
services.espats.ch
termin.zweihorn.org
careers.motionlab.co.uk
mail.uklidovkaplzen.cz
petbase.mobile-xl.eu
booknow.xeotek.com
support.sirrahsoft.co.uk
careers.asuragroup.eu
book.bugkit.io
petbase.mobile-xl.eu
book.wavedesk.be
careers.motionlab.co.uk
chat.la-iii.com
jobs.reisebuero-hegener.de
careers.motionlab.co.uk
uvempleo.uv.es
book.spotlightstudios.co.uk
support.sirrahsoft.co.uk
chat.kundenwachstum.de
services.espats.ch
jobs.dalisso.com
book.wavedesk.be
termine.eino.world
chat.kundenwachstum.de
buchung.hundeschule-nasenblick.de
vacatures.bestrecruitment.nl
jobs.mobilygreen.fr
buchung.hundeschule-nasenblick.de
careers.motionlab.co.uk
jobs.cyqon.de
booking.sia-connect.com
termin.dibap.de
chat.kundenwachstum.de
help.adozi.com
careers.motionlab.co.uk
meet.pbmconsulting.info
booking.sia-connect.com
freietermine.ruhrpott-digital-agentur.de

Certificate

The complete raw certificate details for espats.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSbw8hGiCYoxzVWaItgv
O+HybwgY3xpzEIskIjZJCWZ3k1bZXKagxLhB1Hoqq2I1loPjLZhEyeBTZL9pNUAO
JYDQ4OVLQDs797JZn/if6Du5Volhn5hWSrf1Yz43H9qDwOtMT5TCl5x+uJxSvFOD
XEoTUlDhtSFX+elhG52axrPZEwyjrQWZskMwk/DXqahp/wc5TnvwlVcfKzO+Jygl
0847hq0nkc4Tno1kU4V2Cr9FmNtcgxdXzivg++Cnv2y7RtQriMl/HFLDfo/is/wA
ynummz21VzSitaBlkj7PYQH0YuNnIixOOSwjqohnASEbc8+J04D22dvP6LaaEQj7
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10833874773673035243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 05:24:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-08 05:24:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espats.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24888148696607535241250348630823956595628153622625933313570424988122615655573936111468434339309780076861258549712535813646936702858669978208096999386734957997789755733786430143250056533152324965997659618849138370965576663297830731427488773125350460831391695241358944988890634747809126918903094900681070248826131802730381212501669401964638750227536625401425139512561253666832285581698879572610835376975510551648826227639437055663619626575164000906127518061175811320437490006083540641835816986945207761671968810307257055104592662987959151729245626489094624002224846485249160023352633082283085794194129591910165748710249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-13147.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espats.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68f5879af6cee804a6d95785e4d0351bb2b9b013
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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