bonitabeach.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 40:9a:02:41:9b:12:b2:c4 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bonitabeach.org

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:9a:02:41:9b:12:b2:c4
Serial Number (int): 4655035645638652612
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 37:26:c6:61:35:48:4e:48:97:a7:0a:6f:7a:21:02:37:1b:04:72:66
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): fc:82:7a:20:a3:d6:60:5a:6d:b9:e4:00:8b:b0:07:f3:a8:b3:dd:2b
Fingerprint (sha256): 73:c4:e6:01:c4:63:48:57:63:e5:a6:78:48:9f:06:5c:95:8e:7e:04:b4:08:b2:cf:c1:e9:0d:c9:73:49:70:54

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6825.crl

Check the revocation status for certificate bonitabeach.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonitabeach.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bonitabeach.org

Other certificates including the domain name bonitabeach.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for bonitabeach.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4655035645638652612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 11:10:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonitabeach.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717158557656227632843042029057616328210379950217311944646999264587198977329686839439169790911933618311082618944995871245036457197546328781112042812107862607570211911524826231369666503458111754131350284807935345854566737375429852252938209482008778309654383851263127475065641685919642816184797886493019873195145877695927936501908447604432971525934698579441689532499674558444375129642981751588262768679698760197733228571049838478010200008721477685111656305878771653750927085299856265374431710133224172015139930430922206422579820217344225155044649550878288959433153977357607740435616844237488886505773197628577094706298982745106355710628673776089681980877575661533842545132172837360473057446002685597002758334017281716707707800108199747151179833103267875553978543916300734526405587979938728373242697267262661307477766094246175581407453800935316244728740802218760551945979262465406651632817699411056328848725902854089503671025152846283105774705909480515316061449558760658483918715166479359603890740626053009571109334989893032664338354260892063225775869469307517605072965611045575202404290170378233594982886878988594879892648592928607164990648503861209125903288046649231486199526137072168430362310073784303627237964646978526431227070835619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6825.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitabeach.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3726c66135484e4897a70a6f7a2102371b047266
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005afcbf5f2be4b65be9147365ac7c863e253d65020dca3cc81600fe4b30ff36058a1f13c2b152347bd76d2b322414aad3e8fe52f3092413b5020d7bdeb988a5f40e66d5e42d1b5b82e742271d8c9da9368e54697c799fd0586a23899b5232f6f5dad080aca3500c7dcfd0d3ce52ba3171a42773a60fbe8e5e5c16a89fca483bf9da146aa04a9f0a16773bf5c7f7c72af02aed7a005075142ccbe598088139434e5f0e7252f780d65cbfa929eefc85bb2e16dd27f31f7db274a333aebab653ee4974fd10cdcb5722c5682fcff74d65ad74c9b718e7f2db96bac93c9785f7df4d325dfa59f24db106c1692a7c845966e5ce8ac5665688929395ef548deb73036163