mail.tnaflcio.org

Issued by Go Daddy Secure Certification Authority

About this certificate

This digital certificate with serial number 2b:9c:06:23:18:86:78 was issued on by GoDaddy.com, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 1 DNS name(s) are bare public suffixes: main The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.tnaflcio.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Company registration number: 07969287
Organization: GoDaddy.com, Inc.
Organization unit: http://certificates.godaddy.com/repository
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:9c:06:23:18:86:78
Serial Number (int): 12274974171104888
Serial Number lenght: 54 bits, 7 octets

SubjectKeyId: e7:54:26:18:fb:66:9b:30:70:54:0e:42:19:6d:46:b7:a9:f8:a0:56
AuthorityKeyId: fd:ac:61:32:93:6c:45:d6:e2:ee:85:5f:9a:ba:e7:76:99:68:cc:e7

Fingerprint (sha1): 38:9b:21:1b:7c:2d:3e:0f:0d:7e:54:50:74:17:ec:b5:9b:f5:10:84
Fingerprint (sha256): 96:d6:09:6a:16:53:03:8f:25:11:34:6a:17:d1:0e:46:2e:ad:ec:c9:3e:eb:4e:3a:87:1c:c5:f1:a9:1d:70:86

Issuing Certificate URL: http://certificates.godaddy.com/repository/gd_intermediate.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gds1-96.crl

Check the revocation status for certificate mail.tnaflcio.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.tnaflcio.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tnaflcio.org
www.mail.tnaflcio.org
autodiscover.domain.local
autodiscover.tnaflcio.org
main
main.domain.local

Other certificates including the domain name tnaflcio.org

(limited to 100 certificates)
ak.aflcio.org
tnaflcio.org
tnaflcio.org
tnaflcio.org
alaflcio.com
tnaflcio.org
tnaflcio.org
alaflcio.com
aflciotechinstitute.org
call.tnaflcio.org
aflcionc.org
aflciotechinstitute.org
alaflcio.com
alaflcio.com
aflcionc.org
alaflcio.com
tnaflcio.org
aflcionc.org
aflciotechinstitute.org
tnaflcio.org
alaflcio.com
alaflcio.com
aflcionc.org
alaflcio.com
tnaflcio.org
aflcionc.org
alaflcio.com
aflciotechinstitute.org
aflciotechinstitute.org
alaflcio.com
aflcionc.org
alaflcio.com
aflcionc.org
aflciotechinstitute.org
alaflcio.com
tnaflcio.org
aflcionc.org
tnaflcio.org
tnaflcio.org
alaflcio.com
tnaflcio.org
aflciotechinstitute.org
tnaflcio.org
aflciotechinstitute.org
alaflcio.com
tnaflcio.org
mail.tnaflcio.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
alaflcio.com
alaflcio.com
aflciotechinstitute.org
alaflcio.com
alaflcio.com
aflcionc.org
alaflcio.com
alaflcio.com
tnaflcio.org
alaflcio.com
alaflcio.com
alaflcio.com
tnaflcio.org
sni.cloudflaressl.com
aflciotechinstitute.org
tnaflcio.org
aflcionc.org
aflciotechinstitute.org
alaflcio.com
alaflcio.com
call.tnaflcio.org
alaflcio.com
aflcionc.org
aflcionc.org
aflciotechinstitute.org
alaflcio.com
aflcionc.org
aflciotechinstitute.org

Certificate

The complete raw certificate details for mail.tnaflcio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx2QyC4mEtrAzGpOBYwi
Mc9h0KFETNDhAdhvrDRwNkjyR4sMmh+er2NnjB9lfIT8orCFY2okXc+ivawKN279
DibvQk6jhMPUujBIZYf2KBONjsAMVvTZ+X9md6AG9f0pSezdgJuSPyUea3cM4ojQ
cW5P8xzrHwEtSgqL8yitt6fl74VmN5mVMp/LZcxg8DtnlmK/wTDD6ruKQNdNp28P
VBts1N7KZF4XlbqnmeuCnlygbxoo9frX9Wgl65cSwQnKOH0G8iELthQU7cNVfYS0
LDC7hqBfnmiNcyAHgNAGtn6Jqywdq8RNp+ABfuMbLbhf7Rb5sgHquCxTQZmvTi9o
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12274974171104888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.godaddy.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07969287'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-07 18:05:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-26 15:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.tnaflcio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23116189127095499360123964014101027931041739526380218130384308301955080196729679537990373923390129578469606535806423336792699823448261703587492896273971714132993050306210200992120188457941837720887248102568036267054562707801903456494592400467496647037657107877541566077794952370730874492136933108809288637922547951170376776062300248926544077891569030155390335177334814000493317987681636163819089486183144240855156712640747015710626432585346050146293118763018183284277190545860681572911685491480406941302394678331973456352622407222062864794027762176964673553112565869765738841010918516361497227751110036200547909855251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gds1-96.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gd_intermediate.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdac6132936c45d6e2ee855f9abae7769968cce7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tnaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.tnaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.domain.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tnaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.domain.local'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7542618fb669b3070540e42196d46b7a9f8a056
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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