lititz.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number c9:16:e7:d4:4c:33:f0:cc was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lititz.org

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): c9:16:e7:d4:4c:33:f0:cc
Serial Number (int): 14490023750108704972
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 2c:e5:7f:a9:6b:fb:0b:8e:6a:91:79:14:58:d9:d8:0e:c5:d3:71:9d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 10:69:a0:ef:37:44:ce:3a:32:1f:fe:b4:63:60:16:86:f4:c8:53:f1
Fingerprint (sha256): 53:d2:96:50:f4:ff:71:5a:ad:1f:fa:ff:87:4e:af:6d:2b:f1:6a:40:7b:1c:3e:80:6a:03:a6:88:d4:8c:4d:2c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7062.crl

Check the revocation status for certificate lititz.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lititz.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lititz.org

Other certificates including the domain name lititz.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lititz.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14490023750108704972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 00:53:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 00:53:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lititz.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 608847147303790893942269177963340544358514113748365709136654605200497759780349285781012266491913071206986736393931086649255982811315136271119264740030545286514960124223571584662781875538634358707768294125447325588477891311724922584837985823250463090507988430075191091495577439324668293266898556282203616301986498368353894271677477777662494525842016096981701164081002249278770519748650261250132148465449899630862980108677824323719114187049757196558035319723085667047239868800442846694626644234786482555552981349511625405049038968165519028444145664868134081185549426386856776923296148302494007819439357105021507438021090789181538888761713321646679321185529359966664946119680919188958246236581494926549653569533063878223738397431217201061679043248749600579650877902745892167841595504719648161871720574263504669557505372721129573391497834283710132471314422559220961405727193854328563552307919983049081858842165531325643140676671647071839974506966099293762976146199929888390106504982418023465169899422042331956844831194114601292808699574283548608322736426854765594245084458857336557945248806374706555763646369420952095176155046190240433700612946985042995691794346054679792169982154726723937521148107491583073356368209658318108932585859839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7062.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lititz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ce57fa96bfb0b8e6a91791458d9d80ec5d3719d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018970c960870000040300473045022100ad6de76400bf64fd813456a2015172222fd5c1e181ee2cbcba23d34f4dd50944022026f4de95f64880928714caa375e54ec7174628b0600fc99fe5abccb9a675ba2900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018970c96150000004030047304502200cc029634c2d582b5b6a3720b35805a2c980b9511506d94d0d5928b0512c8b0d022100fea58a5217f0637f937933c0fed536e746f82fcf9e518ab4e302638ff2823da9007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018970c96205000004030046304402205d017c056c5d3cea752b264d924aa3938353d28cf2c018b9916359c8937338f50220496d815a9f7b7114c24beaff535ad4faf60279905b28b3005230c6a15b7559f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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