ocgco.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number cc:78:f4:ec:0c:60:99:f9 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ocgco.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): cc:78:f4:ec:0c:60:99:f9
Serial Number (int): 14733795475599694329
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 86:2d:39:4d:f6:aa:9a:5c:ec:99:4b:98:ca:ef:35:0e:1c:e2:15:a6
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ab:08:ec:98:3c:66:cd:0a:34:1e:2e:d9:45:89:13:14:2d:e1:db:04
Fingerprint (sha256): 70:f2:9c:0b:ec:96:89:9e:a8:3a:d3:03:b0:a2:8d:15:47:d7:aa:99:72:09:60:13:e2:b7:a7:41:af:e1:23:2c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7186.crl

Check the revocation status for certificate ocgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocgco.com

Other certificates including the domain name ocgco.com

(limited to 100 certificates)
www.floriana.org
ocgco.com
www.ocgco.com
www.uvpondfilter.com
wildlyhappymarriage.com
ocgco.com
fundydiscoveryaquarium.com
scarpedacerimonia.com
www.ocgco.com
responsibilisation.com
ocgco.com
ocgco.com
ola.guide
307exchange.com
www.ocgco.com
www.stock-cases.com
www.ocgco.com
providencebeer.com
autostoppisti.com

Certificate

The complete raw certificate details for ocgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14733795475599694329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 10:10:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 10:10:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806015449713628513719459375120089761302997491205490972435078150389264419040661804574967830785093883958046804190026933772120710052514323625857172104682394444092359749433834470914652129053431012868757711333050624498279581743995996223208595992457317306020048782018622720951728158406997035611235415394890613171465240728920540624165311579451106586409238961507827608048386435028961744604570024495739683377931615610204927456347599480537924156401986791547326595305049068883045383083945766151145157490122540501782750337731277469102142834572572329416665870908235414631014083988646280684872124976363519258709501266508295372244759639377997793836911420118188376575625188370792244938249763011762690670656044043701026209654729845945653979780513039616726878273399578311138773387184268248560418347745875109498412948943479410855974148193968434159733704486601398550577305827067174771742895667278051594323350832398032935527425763330055394883901858813968748471303457491116962746463732394007294629594976612491908186498185587433318078715471858858394692192442769678757956748886581613072872185349671464796407948118044999824555576740937087120938321992856362072185904917485774349061524077777647781435131882763670646738159116135691266145325645148690285613852593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7186.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							862d394df6aa9a5cec994b98caef350e1ce215a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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