justnutrition.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 7f:a4:4d:0f:c2:f6:94:9d was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=justnutrition.org

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:a4:4d:0f:c2:f6:94:9d
Serial Number (int): 9197561069088183453
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 5d:07:38:a3:9e:05:f9:22:ca:67:91:30:e5:d6:c0:25:40:ae:f3:39
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 19:96:4d:1c:a6:28:3d:f1:40:0e:45:04:24:bc:1d:c1:9c:29:f6:eb
Fingerprint (sha256): 47:6b:7c:88:b8:e6:5a:93:12:13:9c:35:4c:34:e3:d0:a7:d6:10:46:63:31:b0:38:e6:a9:1a:44:16:dc:3f:27

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6654.crl

Check the revocation status for certificate justnutrition.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justnutrition.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justnutrition.org

Other certificates including the domain name justnutrition.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for justnutrition.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9197561069088183453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 19:53:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 19:53:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justnutrition.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691641673668719300349904350678236849933266219428640615903843475277922660606623583037770534075750364299620495894446366725653674905060767276201322460678848252736138196678378684713811431224025825558227011942430276444896293356243431595989510793210750372751051253489266754218660281770884459297314273234741922319073677303469229346506405281082893433800049399673189744829705821392265517179006339389984085283099410706209496670592609582744978421748829228461802874452131735802698042278873505375124102345812349268855223658567805741953988037036682922305343243189615676608447232235822285575803390561185525671661481244586596068630932341714540892588688201707839225515451174929402070400897137750512621580805925648588839045554839710840995089810999034382050097727445349804468989021099427770861856885628598140914767268230712690403304194214379324312537294419207912742535022082868157412122356007811980994805115911550443532587388278640016888081409175447486018457497413437632294001065238690760548213086041856306706870171142677210206325367812294423629892254181065187685433099991400914103256468313706948126899051331097962018035568125547898641638142593045813144218899210839549076502626083681910023400911519112355041267786767470890474449636322025317981045927259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6654.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justnutrition.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d0738a39e05f922ca679130e5d6c02540aef339
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189279d8c16000004030048304602210094367d466b29f50b62dab6ff35b728b8ee41c5be72e3d28c39d14e4ce51ba846022100a989115387cce26a89d3a931620746a68640d4a5abe0234ce7ea1e5e51aeebe500770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189279d8ce30000040300483046022100f48f281ba8add0e4836f9826de7a82aba621a93d1a9ef318a0d2dcd142511aea022100abb38287cc74641d9a2f553936098e3c890fbe5b4d3061ceb3a034a0a284191e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189279d8d4f0000040300473045022052e090008dc03a0531bc1c02030970fff520e482687682e9f2356876753953ed022100f28be31cb517775f1c0ff5a32d05a4ae019e652f80c69d2e6b22aa17b35cde71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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