envisioncanada.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ca:c0:12:68:e7:d2:b6:ee was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=envisioncanada.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ca:c0:12:68:e7:d2:b6:ee
Serial Number (int): 14609697432965134062
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 99:2e:f5:2c:4d:97:a5:8e:fc:1d:12:04:f7:48:a2:c7:20:05:4b:f5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ab:44:e0:b2:bb:6b:b4:eb:72:d9:4f:50:03:50:ab:54:4e:a6:03:c2
Fingerprint (sha256): 4e:1c:60:17:71:1e:49:9f:3c:e0:17:35:ac:d7:42:fa:d6:d3:07:73:25:52:ef:cb:23:9a:c7:a7:8c:dc:08:09

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-883.crl

Check the revocation status for certificate envisioncanada.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for envisioncanada.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

envisioncanada.org
www.envisioncanada.org

Other certificates including the domain name envisioncanada.org

(limited to 100 certificates)
extraordinarystories.ca
administratie.fiduro.nl
connect.macleodmarketinggroup.com
2019sjmeetup.culytics.com
uns.neoglobalaccounts.com
webinar.coreproducts.ca
chat.globalalarms.ae
project.senhorpc.com
events.imakeo.com
survey.zolamedia.com
www.zohomeetups.com
project.senhorpc.com
www.zohomeetups.com
wecare.adviserly.com
extraordinarystories.ca
connect.ataraxmedia.com
meeting.comerology.com
connect.macleodmarketinggroup.com
project.senhorpc.com
forms.mysteryhill.com
connect.macleodmarketinggroup.com
www.zohomeetups.com
connect.macleodmarketinggroup.com
survey.zolamedia.com
projects.borner.co
connect.macleodmarketinggroup.com
www.zohomeetups.com
administratie.fiduro.nl
www.zohomeetups.com
administratie.fiduro.nl
forms.sense8samui.com
forms.flexikeo.com
connect.globalcompel.com
meeting.torchlight.co.jp
www.zohomeetups.com
forms.thejackman.com.au
books.mixxit.net
chat.globalalarms.ae
survey.advancecareplanning.org.au
connect.rgihub.com
umfragen.dasertragreich.at
connect.83west.com
survey.risepeople.com
connect.macleodmarketinggroup.com
projetos.consultoriaegn.com.br
feedback.envisioncanada.org
soyfeliz.lapiedad.co.cr
connect.macleodmarketinggroup.com
extraordinarystories.ca
connect.macleodmarketinggroup.com
cmacan.org
survey.zolamedia.com
meetings.raia.ge
survey.swiftsci.com
meeting.torchlight.co.jp
survey.pacvac.com
connect.growthfunnel.co.za
survey.zolamedia.com
chat.globalalarms.ae
connect.macleodmarketinggroup.com
chat.globalalarms.ae
books.avmrconsulting.in
extraordinarystories.ca
books.sertecu.com
connect.macleodmarketinggroup.com
meeting.getpestremedy.com
forms.thejackman.com.au
eval.brandreports.net
survey.zolamedia.com
cmacan.org
extraordinarystories.ca
projects.expertsolutionsindia.in
connect.agilean.ca
meetings.apolloteachers.com
connect.agilean.ca
extraordinarystories.ca
meet.techmeliorate.com
forms.naicapital.com
soyfeliz.lapiedad.co.cr
meeting.torchlight.co.jp
project.senhorpc.com
survey.nimdzi.com
project.senhorpc.com
accounts.enovo.in
extraordinarystories.ca
connect.macleodmarketinggroup.com
ch.envisioncanada.org
accounts.avantechit.com
connect.macleodmarketinggroup.com
connect.macleodmarketinggroup.com
survey.shoreteams.com
forms.thejackman.com.au
survey.biogen.com
envisioncanada.org
forms.propertycompanion.co.za
connect.elearnio.com
co.videopost.cl
meeting.torchlight.co.jp
meeting.kinnoa.com
cmacan.org

Certificate

The complete raw certificate details for envisioncanada.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KvCsoQukneIOEJNj+Vm
u3xhN3KSROq7VSrjrEqsToNDJ5RCXUMYYv8iY5k278jsM49DH+Dfs1o7IPgPDsnB
r5SKgTzp13NAQ8nkaNX9RNgCBjDOR0yHLHVw9MKo6Tp1NePv8xcsbtaVRqlBUuCo
MZ7NWbAykQxJxP0beZkSsu9KoL0uDZUQvj/nFWKX/0PO5MBYz2DeyfAGSIKJA/wy
EEamm4SN2a8kd7RMW9+AchJ7VIl1Uw7vatVUVy004Lq1dmicOpvhPj80sadaWEGC
J1pKnJSPCBDMtn9CA9gvOsftbBx8jIuyNZp03adLI0SSafGFA5fjgWdjfuG/cSWe
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14609697432965134062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 13:29:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 13:29:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'envisioncanada.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26342265710208314926505735127641221565710397109421951495059844717884315254184629498577173182541866308606872680336923933160969774099733016540529935437811427662329593415406941858143208159076552482678515643069070032908132164127258069938204340116062615281325410560188057634524426374063986260588761915803358523033529662548516234569497332074477055437289633571277892649511000156776778494217080521174876524512985033322812700482211008105067744226613941340323273257067283415396245515028481472647237837223938520322992714766732916611368909568238401398889289995595177717881852898088921332305530960205695862278618166732118133415661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-883.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envisioncanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envisioncanada.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992ef52c4d97a58efc1d1204f748a2c720054bf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166ca507aae0000040300473045022017cfba13430ec36658df8eeea56ef8f02d2cd9212fe6ebccf7d82e8eebc37b54022100a96967c9530e12f7f9c43ecf302467a9ae47929c1faa24bf88bbf6e75ce54027007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166ca507b3b00000403004630440220490d0df4f11727ce8efd4eed62cfed7c7dabc11f39306e8beb925e999cb3809c0220616a2fc70e0876458fdc8205743886072793b15e2addbf83537fd19d5e03f01c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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