tuuma.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 38:40:65:3c:6c:e0:a6:83 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tuuma.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 38:40:65:3c:6c:e0:a6:83
Serial Number (int): 4053350974832551555
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 77:07:17:39:64:d4:ba:be:b9:b1:0f:f9:2b:93:4a:b5:b3:95:d7:6e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 96:af:df:9a:23:20:08:49:1d:76:ff:c4:e9:bf:1d:b0:d3:5d:73:b0
Fingerprint (sha256): 71:34:c9:2b:43:e1:1f:cf:76:e2:dc:ce:ce:c7:28:99:8b:f5:59:88:e0:df:44:dd:55:d1:22:0d:94:7a:80:c9

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7114.crl

Check the revocation status for certificate tuuma.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tuuma.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tuuma.com

Other certificates including the domain name tuuma.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tuuma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4053350974832551555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 14:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 14:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tuuma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816453450946100484409521073555778500867127012600934287156602011673643202061745240661185189538918389562948494192130081831724819946004590464512989609855218175299420481215615037749691175430392293133550318954778110122075439696673928987115939439961024185957058010195974047129741736507271516119164337804980585584571909694977895635702516321550047357304566385661661293933352256107752369201244435127835515922456226816677125696156486505416345356924373933474705581238713449048006558955076851647146163949336190384237816916455412615626352294653930219027460859898419929262469474665909246391980346361072079448153221426266377140542278148171145207764526603424996375967747824375947255031754334249517700876842818797295244206021011542323055929764391370192400891916477556326412946701627928272526209141993428324381454020734625756549314428520694740509965868658203722748836539710691419877466269270439403274119513431357565392540090707291665891006234116273366729658403852107906863206273796241014657121729931423754924480617727635171932816432545363315865634766034621425709793056233080721339846059115358753891729722047302877624876785943893978556565131778924258424812134030506214056183936182839848846270116085669976665809899854574596129943530726572344771728016943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7114.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuuma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7707173964d4babeb9b10ff92b934ab5b395d76e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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