polypaint.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number e3:1f:d4:cb:03:0c:53:64 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=polypaint.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e3:1f:d4:cb:03:0c:53:64
Serial Number (int): 16366033539282260836
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 16:9f:55:1e:a8:c3:7a:f0:06:ab:75:dd:ea:a8:d1:c9:b7:db:5f:49
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): c8:81:89:56:7b:83:7f:f0:3a:43:ef:98:d6:37:23:3e:ae:2d:6e:ab
Fingerprint (sha256): 58:ae:7e:0e:e6:33:ae:e9:3a:90:ad:95:a8:ea:da:ad:88:6f:4a:de:60:0c:b6:9f:8a:87:9a:6a:19:c6:3f:ec

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6584.crl

Check the revocation status for certificate polypaint.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for polypaint.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

polypaint.com

Other certificates including the domain name polypaint.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for polypaint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16366033539282260836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 10:27:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 10:27:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'polypaint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710888924481521891216131685592972591779659215160834302402005750567393050132793402432615402157058398009221372860809656841177795967817174487035888500142291658485563249950625755863990185415782198631600069293124781920140018425751796780956963258363434701300036302585705561188275774784660994788827590904257120703259089373024044116387714179669149341394101483901087412377635624065699326074365461432767493773169675703915524730521273861742101399076095399124684133739744841925586314434030871009026153081816182003668917056050474445367975278214191290699795190052928568119404046328110097211122444858241474927509937455874414977924470517648952014389617815836089518626183506747868523944065063140413329760472719854128186421597877792570313751189380818814905713657683584113439822973046455083028254287913790905460135481828890038351909620713776506241344973920435776341148807166576116139125445105502820384326932760895069840364777562319136724849246301118155880749208743419295146197440464229226790802585878149489283562171243258750832248636242945935066016523381483354722548816919826393701552716836113867765764687606073633518698059550286190206767709699299496294922639768068622924980525080873917009114964857711273794367557671844332469593144953499702957913770137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6584.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polypaint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							169f551ea8c37af006ab75ddeaa8d1c9b7db5f49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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