singhit.ca

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 3c:a5:c1:06:59:1d:8f:15 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=singhit.ca

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:a5:c1:06:59:1d:8f:15
Serial Number (int): 4370111246442008341
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 61:35:4d:ba:71:53:08:8b:f4:81:af:04:50:fc:45:6e:49:43:1c:0b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): a1:6c:21:b3:1a:53:53:a3:5c:84:aa:86:ee:f3:cf:5f:64:71:7e:1f
Fingerprint (sha256): 7a:67:c3:6b:75:c1:f5:8c:29:b8:81:6f:4b:f6:b1:0a:46:99:62:a9:d1:d2:c7:74:88:2b:89:cd:2d:28:1a:5e

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6443.crl

Check the revocation status for certificate singhit.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for singhit.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

singhit.ca
www.singhit.ca

Other certificates including the domain name singhit.ca

(limited to 100 certificates)
status.carolinahandling.com
status.sirocco.global
status.signin.interac-id.ca
status.sirocco.global
retailstatus.sts.pl
monitor.oaim.ca
status.sirocco.global
status.sirocco.global
status.sirocco.global
status.sirocco.global
site24x7.isp.com.de
status.carolinahandling.com
status.singhit.ca
status.signin.interac-id.ca
status.sirocco.global
site24x7.isp.com.de
status.meshcaid.com
status-clp-sg.uleeco.com
status.swiftech.news
status.sirocco.global
status.sirocco.global
monitor.oaim.ca
status.sirocco.global
status-clp-sg.uleeco.com
status.singhit.ca
status.amecor.com
status.sirocco.global
status.sirocco.global
status.sirocco.global
status.meshcaid.com
status.smartdraw.com
monitor.oaim.ca
status.amecor.com
status.sirocco.global
monitor.oaim.ca
status.sirocco.global
status.sirocco.global
status.sirocco.global
status.sirocco.global
status.citynet.net
status.sirocco.global
retailstatus.sts.pl
singhit.ca
status.sirocco.global
status-clp-sg.uleeco.com
status.sirocco.global
status.swiftech.news
status.sirocco.global
status.singhit.ca
status.pecoraricloud.com.br
status.sirocco.global
status.carolinahandling.com
statuspage.onmex.mx
status.wisecx.com
status-clp-sg.uleeco.com
status.sirocco.global
status.odpcloud.net
status.sirocco.global
status.sirocco.global
status.sirocco.global
status.singhit.ca
status.meshcaid.com
status.pecoraricloud.com.br
status.pecoraricloud.com.br
status.sirocco.global
status.sirocco.global
status.signin.interac-id.ca
status.amecor.com
status.sirocco.global
status.odpcloud.net
status.odpcloud.net
status.meshcaid.com
statuspage.onmex.mx
status.wisecx.com
status.wisecx.com
status.pecoraricloud.com.br
status.sirocco.global
status.sirocco.global
status.swiftech.news
status.citynet.net
status.sirocco.global
status.sirocco.global
status.smartdraw.com
status.odpcloud.net
retailstatus.sts.pl
status.sirocco.global
status.sirocco.global
status.citynet.net
site24x7.isp.com.de
statuspage.onmex.mx
retailstatus.sts.pl
status.smartdraw.com
status.citynet.net
status.sirocco.global
status.swiftech.news
statuspage.onmex.mx
status.signin.interac-id.ca
status.carolinahandling.com
status.smartdraw.com
status.sirocco.global

Certificate

The complete raw certificate details for singhit.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf5bZE0QAJbj0CfnqeCx
KmqExmAwuaIA/B8Zmdmg+p/AeOZ9Jff/zwoGgzi1ezzNxLNWgvtFzyRtNrh1ut68
fHwDGOFLeJuYp7hemVC2Xc+zuHnlBXQOSQnHG18SmWJHzrkkeAvhqYVG2tmkoGW0
uG4aFhrMvfXCnNYCXmez1CQqD5qFcT8cuqleSOKr+MUzIIAVN5Vc791mPRtR6xv5
nPSVP0c5O3StK8JImGJPOHKSaHTqSe0kf4Dt043iM+6+tqwXHhMKWy50RGKdFNTH
c8cP8xs8naudMeyXBRAq8Q94CZPTcoDzchcKYxljeZPHAcYV6aAuHLmVgUoWWJ2Z
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4370111246442008341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 19:01:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 19:01:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'singhit.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24994374189399729532839228129071393681417706468147145511845517977417314550966325132865301482316259042144915747965533358280763880790063553136600201689559987738020797398677798853971313295439863996282937703771911506136769798681239730694515374588471354056563969234788910113959945186346388969216973796319025804692286624766508432672692601610810029507351721096193074774010976589931339788912161157992594758585233672479407773907270528138533383365100864729374501751415845381616857657846011038472902489440002478074052537556739557488141068299757772437571299771303424942709545027159498655817551602902310304495600577600580501739947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6443.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singhit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singhit.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61354dba7153088bf481af0450fc456e49431c0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052181bceff9d84cdb06ea271b56bae413da7b600b2bdce0ebdcdf6adc85b13e1b36c50e471ca0e5b2a3daa67c89f43a26ec96656e3996c79b831d63005d12f3de1b75e7a7a83adc2e98e6530e675c467f8643d50e7774dc2fcaa092b5b5b1c2fae4b7e3f278cd7ed4e3278b4346d483cd242164e209623e889e01145bf6cdc6a107731c40f61b348ca3ecd68079e79bbac17bd960cc9bb9127cc4143660e2bfb8c2f49ad438f1ae6e6f632d24534df11c59ea5f4ef53c72e01b6481c55c06a0d122ce3b9a3316a42e06b29f22d5704f8e53e3d62c5c92b66f87d4fbb9287d0494baef62bd34751b076a4ea9b70bc73a2f99bfedf00aae1921012c72002f7b7ef