organicsafflower.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 5f:4c:ca:9a:29:c0:cb:55 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=organicsafflower.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5f:4c:ca:9a:29:c0:cb:55
Serial Number (int): 6867086295307438933
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 8c:96:62:fb:74:b8:d6:ed:ba:9b:e8:ed:05:ca:20:b5:25:4e:da:28
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 75:8f:12:4f:27:af:b3:98:4a:4c:59:c3:2f:ab:52:66:aa:ab:63:5d
Fingerprint (sha256): 7e:11:ed:00:62:a9:e1:a0:09:89:10:e1:e7:86:10:da:c9:07:8a:68:95:6a:bf:50:80:e9:d8:26:90:5c:32:51

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7192.crl

Check the revocation status for certificate organicsafflower.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for organicsafflower.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

organicsafflower.com

Other certificates including the domain name organicsafflower.com

(limited to 100 certificates)
vrealitycasino.com
paintboothforsale.com
www.oregonstemcellcenter.com
www.laurengracesnyder.com
bomb-shelter.com
dynafreeze.com
www.jacksonvilleboatrepair.com
organicsafflower.com
www.furryflats.com
kevinkelleher.com
www.plastimaster.com
newmexicostemcellclinics.com
hairdecor.com
www.lamborghinishowroom.com
tenantappraiser.com
tickpuller.com
olmanriver.com
iotcreations.com
gretelbranding.de
organicsafflower.com
www.greenvillesportsdoctor.com
www.sunnyhorizonsdiner.com
carolinasportsdoctor.com

Certificate

The complete raw certificate details for organicsafflower.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6867086295307438933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 13:29:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 13:29:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'organicsafflower.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770852741831123464654960855485836446555301091939330748398673029028735495769440102583491803158714525284788413672775056525835872964673385502249032669749939013175906999245715586256886523851363647297739332096397979471680016277022579236813694676306779205639275408579160826616650881911463533267188359681938185599739306830141332934464105311139112225968269099924444062492443795515708043822746530408572957747665297620030184174278598023151629163404639405483646723498305066128447525578192367634280372295555951845559564853079976482695368836815150801110784364778114365599084322093454052550550420441596132727654524031429260013187066233204695552448151042362484932204225222454123384869891720399596112916367895152792447062204155418050818207274742298477201877749299796638770240767853218872325218523015078902571166241495361489299035302808836815858944283770902587956951992962612623379684976903854006446220044999501613561506152261198441184721323728261453207698263983640905734805367629122625606323684250598903053308543486449236954237088890140201109556964053599231972497784916874322012066945266152252099357457147275060670730914143582048552455337902178104740692693870301149810320184910361310789845958046676962456594500078203834358091875177594751112456297591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7192.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsafflower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c9662fb74b8d6edba9be8ed05ca20b5254eda28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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