bright.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 71:57:58:c9:bd:52:36:ae was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=bright.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:57:58:c9:bd:52:36:ae
Serial Number (int): 8167094072747636398
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 7f:c5:f9:76:dd:43:e8:97:b8:6e:80:9d:14:48:bb:b1:c9:2e:b7:b3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 69:7c:80:ca:a4:85:5e:8e:70:7f:17:9e:a5:63:50:3f:1c:90:8a:3c
Fingerprint (sha256): 48:8a:59:cd:79:01:9d:9f:d9:60:e2:dc:9e:f0:d0:36:c0:3b:a5:9a:2c:82:95:26:62:42:c3:1e:d8:94:d3:8c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-4407.crl

Check the revocation status for certificate bright.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bright.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bright.com
www.bright.com

Other certificates including the domain name bright.com

(limited to 100 certificates)
support.kerne.org
staging.bright.com
help.mkor.ro
help.premiochat.com
support.bright.com
gateway.bright.com
app.bright.com
support.condoctools.com
support.techedmarketing.com
support.weareblood.org
support.condoctools.com
helpdesk.inknoe.com
*.bright.com
www.bright.com
support.polarisec.io
staging.bright.com
helpdesk.bright.com
support.edgesupport.com
support.simpliunlimited.com
bright.com
support.rightbite.com
helpdesk.bright.com
support.edgesupport.com
staging.bright.com
app.bright.com
collaborate-atl.ct450.com
assist.cavalier.technology
support.bright.com
staging.bright.com
staging.bright.com
www.bright.com
support.farm4usa.com
bright.com
app.bright.com
support.condoctools.com
bright.com
vpn.bright.com
helpcenter.pasteurshaving.com
join.familybilling.com
distribution.hhmlp.com
support.methodpro.com
staging.bright.com
www.bright.com
support.kerne.org
bright.com
support.condoctools.com
bright.com
help.verusfinancial.net
brightintune.bright.com
support.maxtechnology.com.au
intune.bright.com
support.wjddesigns.com
app.bright.com
support.growup-marketing.co.jp
app.bright.com
vpn.bright.com
support.nuquo.com
helpdesk.bright.com
helpdesk.grandcanyonresort.com
app.bright.com
app.bright.com
intune.bright.com
team.striverest.com
support.wickedspider.com
gateway.bright.com
support.polarisec.io
www.bright.com
ticketprojet.coperbee.fr
support.condoctools.com
bright.com
app.bright.com
bright.com
*.bright.com
join.familybilling.com
staging.bright.com
bright.com
ztickets.e-consystems.com

Certificate

The complete raw certificate details for bright.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHFUsL0STwPvD95mXqF/
po29HYSlLu+eeRM0uvREeh8vncqBpa9ScWjth6oRtygzSENT3jNYDARNzS/w10gB
DVoWr7sfUShldihATYvIzwHZ2YHKJalo2/z2QADDfakQuHB+fwN1l/HfCU0EqwIK
0+XS/knTme6VXykxkVOXAM2Gft3v9ll3gPv7lksdzgTFjTqQeAoyz2ZbuEDKuZVL
CoMR2FaYEEdVGiNUnbUUoidqHrC6njjjirVb13lQVdiklqox+J7UiH4B3+lTs3dG
D5v9704oh7zK4sXzEUPg39pqXM9bEYVKOS5+LbM6eRfraHf+LFq6DVF+JZL12CKD
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8167094072747636398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 19:48:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 19:48:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bright.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21768873965281281202661794099064248451872571444001817392211164155377049721859380603063596425520374756438607414131212257414140102242176227994237153751515856616342120814597767308667893262529728377770852093134857422122688447807859084655569772501986361392074253543056734682781206893105447661911660640203621118094326920471038039778750704025442431080764066025031606276967561929728949106024864654611974481825927478386681579151886103185195318968346340083105984655061400109863240700953449446330869635743142957787299230602288913671691100723630968597558150950330902241908539080498791886601168360068368184842671084545441882342343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-4407.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bright.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fc5f976dd43e897b86e809d1448bbb1c92eb7b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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