mongobay.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number e5:ab:ad:5e:90:f0:14:a7 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mongobay.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e5:ab:ad:5e:90:f0:14:a7
Serial Number (int): 16549511877373203623
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 13:b3:0b:7b:aa:19:e3:be:4b:91:f4:5d:4d:4d:fc:1f:62:c2:23:e5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 3a:af:2d:ac:a2:2e:38:eb:05:1c:6a:64:f9:bd:35:f8:e1:86:8d:06
Fingerprint (sha256): 72:9c:9c:c9:7e:23:3c:17:48:fb:f5:fd:48:e6:2e:ae:ae:15:e7:cf:ed:c5:1c:85:c3:4d:4d:1b:16:0c:94:4f

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6772.crl

Check the revocation status for certificate mongobay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mongobay.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mongobay.com

Other certificates including the domain name mongobay.com

(limited to 100 certificates)
kitchenme.com
mongobay.com
mongobay.com
pegasusphotography.com
realtorshome.com
smutjokes.com

Certificate

The complete raw certificate details for mongobay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16549511877373203623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 19:39:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 19:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mongobay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708541008231781402638809257734452495963432949407489068667889748644386212516719573330339842566421855952434650277870996350014501898969142482673870944439177370242832356034172759420236527239805190812228265779449120393324773027712899898353449830924164230152648700168706600030608433241719887943340915628701984533779534869297583062659405999465913487467507604483251985331133525201098753170063604006019511588040997055232135898379093132639021016937549811499705999529591699342287087159822602447823873300422474020022963090995860779831759583130534874608195097907401093060995712616691366837975366096152105134984461463021807898801959866562807826756100645689966986172091019412416534693955239169702528842956105934450669426720944738809173289795763871145914863011697736844087649764347014947869295901909836461587429880171702222875758505183061537859508157712309940716313140961743873219009016254423574075100073912290661310151692223152980610884749202802960821158543957474467003583419283171286156956745467412311108498995595149904844064348067561370346049170498678010356899281710909471864711012719560106590398255012469006939718127291272571088436486874250406241563697673816941040832010051387342301115712663382134978135051788234513463551130701989463999928233707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6772.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongobay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13b30b7baa19e3be4b91f45d4d4dfc1f62c223e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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