organicredwines.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 56:42:8c:12:f5:7f:92:a4 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=organicredwines.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 56:42:8c:12:f5:7f:92:a4
Serial Number (int): 6215684448780784292
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 43:32:eb:b8:dc:50:18:1a:91:7a:34:ad:53:7f:2d:cf:1a:ed:41:b1
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): f1:a5:49:51:9d:ac:ad:cb:2d:52:7e:db:64:e2:d9:8c:d7:40:7d:2e
Fingerprint (sha256): 46:65:c0:eb:e8:e4:d2:00:a9:0d:2f:30:75:83:f0:7b:c2:5c:71:24:f4:c3:43:c9:e2:4e:79:63:67:46:c4:70

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6674.crl

Check the revocation status for certificate organicredwines.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for organicredwines.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

organicredwines.com

Other certificates including the domain name organicredwines.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for organicredwines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Ju7Uoubkoo8dJEYwOSh
8COmJnFNg42TmBXeKp60nhyUWBEAcpUCmHsI0Irq84MV5jsFN/pKNJc7Pywo5smz
F0uyaK6SO4QdRbpCDuoBI0YS0hJNpInpqFoMSCFSyD3s0ua1M2FQPIDGKy5OMfWA
7eD7Zp8OWrf2h4so4o9fsLziKDygf72XLy77dngtXcbfKgrdT6ft19liPBPRTD55
g4subI5xdKCUmbHtpJ0N8kKkhqMrFINgRuCdb6DJs00mMNHnli9uXT+kLacQOUqA
CefR+02+eaGRnq+18OuJUi+uijMB7HyPmKehCEljuQd0GvTYmcBqpKsTRjNLkgzM
bZ1YXU3RwoO7SYvYNO72tHf1WUzXT4y4E5+VQyHgzqLpY4evy5Vdp1NWmLuv7BOK
Yvch/m35xih1j2y+EiyU1xJX4DJJXKUY+Vz1C70ik1NAFvGK7pwXhBWKdpU9Bnrh
0zi41xLAzLtCavBLjFPm9OlZzqSLxFqzBruDGRlcK3I60gIFfQVQFkxdDjBejPvt
IkGe7cAhAuXUYLlEPZHB8ieFjv1z76RDb1RNUQ6tayqdOd7LHIDzZrw6ZqISSIEL
yswCSCibipLAlrXP2ys32VPQaBuU66cO5axw7ZzaVDC4/jiQZP2oen/FEp3IwVcE
CvnFh5fsLcMqq/slakZ0/GkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6215684448780784292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 12:07:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 12:07:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'organicredwines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900003452861025047770791954879362529346098211314143562854701410777054644151779934103305969483698386058561342206186334502989405020139006543888135731753929287571884761052152252208614857869409557996533397993981022378725985893915114383225645026572791944601054347367417805208501643186980307323485785840451428460866774505645213630764111541339547418901011135744044346005072593741332411315996774102434292272711946763486369698743624571810457732588817304862385867998017623560803776288308387624322365338548381166729297114516278672340781838167365582470699113197287249569372541263024855964470419212134801113676145017189616190903296652348330924344907729516668570348411672595998447784027964034580675749784670813972100799377262685740961811571458923423536256511434372039480100144376653666898349987252605762793917130376153857588231006005726504257362549593995839077430413101906546039007938920219556672851214442569874112003873234569830662681734621831295165230485641128366754502188011203852334481513333302434477978863962175321257434539642416470999232445966373820988984473085584513274270332592998576608550999398280883312994625059649644157074172858308915718409854200079525635827737419270211152396869016620150116797970363004361267742526093575182175643696233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6674.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicredwines.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4332ebb8dc50181a917a34ad537f2dcf1aed41b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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