*.fia.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 09:5c:b3:7e:a6:98:38:1c was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.fia.org

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5c:b3:7e:a6:98:38:1c
Serial Number (int): 674611400740976668
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 8b:ad:4d:48:f5:8b:1c:35:c3:d3:8e:0c:9a:5a:6e:ee:de:d7:fe:f6
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): d7:61:17:6d:5b:e1:5f:32:a4:02:c8:72:71:fe:e4:65:b5:d0:6b:9f
Fingerprint (sha256): 63:c4:e7:ed:45:b2:03:3e:25:79:ae:15:02:e9:c0:da:bd:0c:25:d4:33:e2:f8:30:8f:4f:42:90:6f:e9:f1:6c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-5421.crl

Check the revocation status for certificate *.fia.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fia.org
fia.org

Other certificates including the domain name fia.org

(limited to 100 certificates)
it.uahs.arizona.edu
*.fia.org
fia.org
*.fia.org
hub.meed.com
good.gsm.cornell.edu
webmail.fia.org
club.kjzz.org
secure.fia.org
host2.openminds.com
local3599.com
dmist-standards.org
secure.fia.org
2fadmin.govdelivery.com
fia.org
agd.nebrwesleyan.edu
inside.gc.cuny.edu
fia.org
secure.fia.org
2fadmin.govdelivery.com
secure.fia.org
international.dev.oceana.org
dg-0035-c25fe2a.client-tls.adestra.com
dmist-standards.org
sters.us
cloudapp-eu.appcelerator.com
fia.org
secure.fia.org
intranet.olivecrest.org
dmist-standards.org
cms.legacy.com
fia.org
fia.org
d7.cmc.edu
agenslotgacor.gsm.cornell.edu
info-dev.calperformances.org
internal.gcir.org
5732322821275648-fe4.pantheonsite.io
webmail.fia.org
dmist-standards.org
d7.cmc.edu
cetys.udesa.edu.ar
online.fia.org
international.research.ucsb.edu
cetys.udesa.edu.ar
dmist-standards.org
csc.arizona.edu
csc.arizona.edu
international.research.ucsb.edu
agd.nebrwesleyan.edu
dmist-standards.org
secure.fia.org
csc.arizona.edu
international.dev.oceana.org
webmail.fia.org
fia.org
international.dev.oceana.org
coins.rutgers.edu
ipv6.earthjustice.org
design-engineering.princeton.edu
cetys.udesa.edu.ar
gws-uat.earthjustice.org
access.fia.org
2fadmin.govdelivery.com
agd.nebrwesleyan.edu
host2.cenmi.org
fia.org
fia.org
connect.iadb.org
d7store.juilliard.edu
international.dev.oceana.org
info.vcfa.edu
5732322821275648-fe4.pantheonsite.io
2fadmin.govdelivery.com
5643172898144256-fe4.pantheonsite.io
cmmb-portal.cmmb.org
info-dev.calperformances.org
internetcouncil.nacha.org
international.dev.oceana.org
access.fia.org
connect.iadb.org
fia.org
international.dev.oceana.org
covid.usmle.org
csc.arizona.edu
fia.org
infonet.fia.org
cloudapp.appcelerator.com
webhost1.fia.org
*.fia.org
covid.usmle.org
autodiscover.fia.org
fia.org
5732322821275648-fe4.pantheonsite.io
httpbin.earthjustice.org
internal.gcir.org
dg-0035-c25fe2a.client-tls.adestra.com
fia.org
csc.arizona.edu
agenslotgacor.gsm.cornell.edu

Certificate

The complete raw certificate details for *.fia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjt9uPT4v3e4pjXehfo
tzagN88bMDlRJ/ayVsJNAnWJKJJYsgwn6ERE8ksQrLmgvR1v1qe0ofsb/4Mj0vxJ
AF9l7z1UAGHRVl9gwyjHkdml7YvB1Hl3HjW+Gv5FfFtnOm/aTwNf1hj82ZoFGpUS
5CmC4Cv3fndDVugSr5Wo58yOzu0Jh+YsXo/6k55EuKttpxxQEMqB9IiJXwFCi+AO
6xGDKHILTvNZlRLpekJQkrSgLNm2sgpoCxfUr6Lni26QxpIsx1YumElNC/wQw5Bf
KvpJHRMrYlNbv1+13GDGdLg5+PXfvh2/FLwF7y5ijguz46dj/+ZEueBIAXoMXE6k
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 674611400740976668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-31 17:29:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 17:29:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20833723643875079361028254182214214307571572490000125378594474747747186424067481421314918773734762720341164214533577478943897365547731018387395821025739533786855143045580884134102574740436432117362361404145677305659538499821656589546387205119164330861119420861678265928830052420200839063068495376465289748570933684673931992901891650714336963912048672313399507109769096454694550987078609507119434900156852256789739704473128899068851109934029986999589188965111548023374447891450477651293796988913702666412690635346991114711355184308178815811221331612039150286282361070345816705111879651795979786556810977697863782278189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-5421.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bad4d48f58b1c35c3d38e0c9a5a6eeeded7fef6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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