discovery.keells.lk

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 88:29:b2:a4:34:c8:74:20 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=discovery.keells.lk,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 88:29:b2:a4:34:c8:74:20
Serial Number (int): 9811569681533269024
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: df:dd:3c:71:b2:69:ba:1f:07:29:2c:10:86:00:c5:40:1d:ac:7d:83
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 05:fb:89:ae:a6:dd:66:e7:9a:46:b3:2c:46:12:c4:4d:38:cb:6b:03
Fingerprint (sha256): 61:d8:98:0d:26:fa:15:17:8a:d7:ec:66:19:1b:9b:16:85:2a:cc:6d:f6:73:29:78:8e:47:d1:39:d4:c5:b2:b7

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-360.crl

Check the revocation status for certificate discovery.keells.lk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discovery.keells.lk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

discovery.keells.lk
www.discovery.keells.lk

Other certificates including the domain name keells.lk

(limited to 100 certificates)
keells.lk
clusterexpe.keells.lk
*.keells.lk
mail2.keells.lk
zeus.keells.lk
jkhprcmpub01-ms.keells.lk
zeus.keells.lk
sni.cloudflaressl.com
www.surgehighlights.keells.lk
discovery.keells.lk
*.keells.lk
helpdesk.keells.lk
discovery.keells.lk
*.keells.lk
discoverysync.keells.lk
tiger.keells.lk
clusterexpc.keells.lk
ssl945681.cloudflaressl.com
cbills.servare.co
*.keells.lk
cbills.servare.co
discovery.keells.lk
clusterexpe.keells.lk
*.keells.lk
discovery.keells.lk
sni.cloudflaressl.com
mail.keells.lk
keells.lk
*.keells.lk
*.keells.lk
clusterexpc.keells.lk
discovery.keells.lk
lion.keells.lk
discovery.keells.lk
clusterexpc.keells.lk
keells.lk
discoverysync.keells.lk
discovery.keells.lk
keells.lk
discovery.keells.lk
zeus.keells.lk
keells.lk
clusterexpe.keells.lk
*.keells.lk
mail2.keells.lk
clusterexpe.keells.lk
sni.cloudflaressl.com
clusterexpc.keells.lk
mail.keells.lk
cbills.servare.co

Certificate

The complete raw certificate details for discovery.keells.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9811569681533269024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-09 04:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 18:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discovery.keells.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729877773364816992664673924014760837246815012744059962488886739417503739828666635032433646281797237921549009072786300525663389428232035462597721915830106459126326237534646576291420944770496302681442601587115585961471402342622657680940655835695080561187285294817383134383643562785652612421382873779803656243569039139337617785028269130455882183081957520133622793623697032969106951279033065806414033910612770642273705850610225470499846557577667712498521505917394594107498458972381920240825761686148253405346608050024698519878668364160847612670818279073509650618059163907416080098740718186488905393603542997858649581697094355690611461380807744893502202469824708024129087112397015707667398254740192696944105439545905734287051676299046565276978027397865931292053657252214176190169962798193428901252678506309621003539236544750684120139272928886250985654510205470433922538486850708591435910349496858221718317777496381059781701881668295178559029371309925460612209413108663199274516891717614038459155128950647250696420446642185443384971591333571762281140196547339940235955928983320765317815614345729065468931339734876086496476305366561852851886373175671323908508972310020027539584103722499664426302420741453136958759338696293372016225013955239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-360.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.keells.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovery.keells.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfdd3c71b269ba1f07292c108600c5401dac7d83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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