astor.ai

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 6c:48:38:59:26:57:0e:33 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=astor.ai

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6c:48:38:59:26:57:0e:33
Serial Number (int): 7802548309965868595
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 17:5f:50:ab:15:4e:0b:29:60:b1:48:55:36:c9:00:46:da:19:2e:12
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 09:31:a2:a1:f2:71:ab:c1:ea:a4:db:a5:cb:b0:6e:a7:80:62:43:81
Fingerprint (sha256): 43:15:f4:d6:73:f0:2c:bd:0e:24:63:48:e2:29:ec:11:81:3c:65:88:f8:c7:67:39:84:1a:c5:14:46:6b:0a:86

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7046.crl

Check the revocation status for certificate astor.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astor.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

astor.ai

Other certificates including the domain name astor.ai

(limited to 100 certificates)

Certificate

The complete raw certificate details for astor.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7802548309965868595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 17:25:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 17:25:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astor.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892652108192970951616855174973592172825814715028601433486525844545986359603060227662724464791662338409311084304183858100655579316271066654148177743764862169102906478507067890476055625312813068265685634659856630287941524613236868651034522863896371846767332038298401170890791094109537160914434647857959788574132092517381729430018519831318371293474127474818403554679786702082852290545769751960599619675325136566925517537036381837626996458469716321474227424882833333923662505603270666286992246079612214506886713077416364551417476253741712620327303423265326927896407677080313807420918269549165776080443256479356232994771899406808622916345450147716432328999721463349229173421173353724159933704433270370986113474843492634039938794274549359989371821917649005182078789180100339477551545949354075422112291146663140170405252993280229636294004690611102906714982369398307066400937358411248803556428722796864426347686669249010749840428148432552350913542372317598597562470319159908551419041758851735221930337472828583842526241747353238657240822177096104836420323787476155204006182663238160335699955641068774380555062007734472423780476962686203166419708387088097295228466266559576407468595831059984751665447167848049320545816138865028558131942166031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7046.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astor.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							175f50ab154e0b2960b1485536c90046da192e12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001896f2f4c68000004030046304402206c10bc4442c8820039b23d9c2fa0aad85cf7bea44bf9ce1df28ea533c2535fcb02200e6297b7475a3ffa8f4788438d44eddb46ef20baffafcffdbb52b29596fa806b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001896f2f4d2f00000403004730450221008388ce56a683c0b5ba7ef1aaeb82ed3a64098bba67bf7d7e3a1f233cd31dc1b902202eecd9ecad99d7037ac4e8c4b852a0328656906197801bbd72613e4d51d47af4007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001896f2f4daf000004030047304502204ff8d18ac8e95e40e8fcae09f491dd3e040c7faa2c46e755c8e8dc87040b66f9022100b8183fbd18bc69ed255c8ac5a35a86faacd7d74313b6e1f08817231a0ef496c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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