plainbrain.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a0:4e:b4:94:e0:90:a1:32 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=plainbrain.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): a0:4e:b4:94:e0:90:a1:32
Serial Number (int): 11551368645767635250
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: c5:e0:7b:f3:df:d2:4b:84:66:c2:80:19:20:a3:e6:3e:f9:49:76:97
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): a3:77:d6:cb:b4:92:20:7d:e4:76:01:5a:e4:c8:b3:e8:96:61:7f:b1
Fingerprint (sha256): 77:a4:ad:a1:7e:20:d3:20:d4:7c:61:c1:36:27:c1:df:f5:40:28:e8:e3:e3:c3:32:62:8f:26:7c:29:16:aa:5c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6913.crl

Check the revocation status for certificate plainbrain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plainbrain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plainbrain.com

Other certificates including the domain name plainbrain.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for plainbrain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11551368645767635250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 00:25:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 00:25:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plainbrain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798259145263986294947671419747819278278459760047701293284053756568308134016838942556851604972350518339092137220871257524494168871100101158995186635721285510155120914210077351150130823359254585709687988313189420005867564676142517713230282930030799360629329594300100361565675196827867450782471380334402495300828634853304367860738284759457448925777006520851869050643820141312320524068466257327400097499436708515221110861849834910102540005814183918978828139181239427722119678865987813946581667766798210504684430866610504585523377676319939965213124093745408945828037352068381833222063150251598611983018089919660984079542258923068115521565256277919786378174971074026953949382291170852626340610987731735202304653983758295902239953987710010243329757117650242828128542257697368579173416122893011202762844073809837604306537861618656727401363864321808567544240612536057510470988633650733682020309708509885765932621180647453233061741767270107068265203286321987548993202105630861830739791122647756863071403140776684448261121689576301183613778549439026017320524952644875606189122157556742287514362912256761248768423826450004588699844673331572780194681045720763920472608386329462893978772917997786324001500295996520338943523407057874683067313888183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6913.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainbrain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5e07bf3dfd24b8466c2801920a3e63ef9497697
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b89bd11157235c3ee9274dd612c6d594beaa3dfdf10d140ca245379bad6ec7ff9a72dde60bb5d5a7ac1e66bdaba83f5d17658e8a5fd7211bb627045994703d187756d483ebd2ffe97807e50c2adc8454575d6fa0be7ae00fe0ebda491850290d326238e1ace91b2716d34b0d905d48543b0d05104988a2a68707779769ee3bf118766a9e4006f64c142690cc197cfc128cc978f0562272e77bb86d8821d64c6f7d5b78e57878e73c385ed9f11122f6d0112dbf7c91015c318290b10e2310dfd94c29dd79b173557fe9b962e98d8b80d83017c74858edcedb8e484bd925d932a8d45b4d483b0fe6254aeb9caca154aa3421896f292fc15bd561319c8355f7bb3d