ranchosandiego.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 40:c1:a3:5b:46:d0:f7:ea was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ranchosandiego.org

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:c1:a3:5b:46:d0:f7:ea
Serial Number (int): 4666190301357996010
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: dd:58:9f:70:c6:d9:93:6b:5c:59:73:36:fa:17:ab:67:a2:af:1a:bc
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): f4:a0:26:ee:fa:0c:ac:62:b5:8d:16:aa:f4:38:bd:5b:a4:d7:c4:4e
Fingerprint (sha256): 4d:98:43:67:fb:6b:7b:56:9c:df:fe:03:a7:b8:1a:85:96:49:9c:24:99:02:d0:5a:7d:d9:5e:58:96:a3:24:41

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6691.crl

Check the revocation status for certificate ranchosandiego.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ranchosandiego.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ranchosandiego.org

Other certificates including the domain name ranchosandiego.org

(limited to 100 certificates)
dinnershare.ca
stemcellmaryland.org
chemlime.com
www.kelanie.clothing
www.newmaid.com
www.securetronic.com
bestonlinepharmacy.org
ranchosandiego.org
www.ranchosandiego.org
ranchosandiego.org
ranchosandiego.org
kentuckystemcellclinic.com
madisonstemcellclinic.com
ranchosandiego.org
www.sportsmedicinecolumbia.com
raresportsmemorabilia.com
mosquitobiteprevention.org
seventy77.com
www.ranchosandiego.org
bestautoaccidentattorneyss.website
www.ranchosandiego.org
globalisation.exposed
ranchosandiego.org

Certificate

The complete raw certificate details for ranchosandiego.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4666190301357996010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 21:50:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 21:50:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ranchosandiego.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814893081673823144001428677377828590581694242056362722918606476140819062595234473258932739650537053446982075554597206242550242055551133672326032255734727735207536156821643583342701141929613573323537603018994685430877165317702572071592242558483192185313394369119463105144912771423307430117032553662757659289350192784029195803306253748472105736200881131350466298575385704427963773256145164898831496600372099607586176017312635057045738846147124277725674313333938399556256165933836956060773147436180070372967873317266538550625608130584517557303583728856359186105214251647269365177740906155293883730271559424401293774506915904025089818646837603416337599595760197484535011269693096735564236617751363814246103804259913792165997260186596143645895924313015404882080426972860484491239862218236630553250982146620226497566277393015351103737795338526833250523046931470967207207706602823833590175737941607338150906224773860369274971335181605401159555936483334152115199141618467715265714985181045194936281097107829728434849568271686228668036295190657141775717973260936450442122188079741896426423307145347128824242526916504090958955292645018632115313363485727455810714121640747926256409634510986109837746917476812133459154941557514985412845723230143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6691.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchosandiego.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd589f70c6d9936b5c597336fa17ab67a2af1abc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014040639978cf5c591200975868a1e9ab42bd359a5cdca56043535c114033a7efdf0c6077908e009055623bf508b9179efa2d1a80ee37557cf26a99c4ae64357d75853a89dbbc42aa72089cca6466ef18f3ad9b2b84b301da24f6160213bef421a0a01a69fd29351351c1b69a7a195a4e50956e1e5890f480ded4851d156b38ec14645e1731c52b0a222634e8e66603582159f5b06735c50ee345f96d8514187f016912c8286920a05f6d7fe478ad2c1cf9d739e68b5fe46145e0465f1cf361ea23e51d5ac38fbf444a284068cfe13c546de3ab958189b27ff71e725ea31ae32953ae0de5a9c4b4526bb7a77c365a4669c8599d4716e39eb6e76e6061e58d2ca