christmascom.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 58:34:42:c2:16:29:4f:6a was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=christmascom.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 58:34:42:c2:16:29:4f:6a
Serial Number (int): 6355778375489507178
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: e3:6a:70:29:60:12:0f:4c:83:58:66:51:b2:89:cb:22:2b:35:e4:6e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 58:7e:07:4b:44:c6:15:c9:25:fa:ae:62:b8:78:db:89:c5:20:16:19
Fingerprint (sha256): 9b:a3:1f:36:e6:a5:f2:16:98:96:1d:1c:2f:03:65:a0:58:0f:74:b7:70:b8:be:e7:03:6e:1a:14:0d:e8:a8:e2

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6545.crl

Check the revocation status for certificate christmascom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for christmascom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

christmascom.com

Other certificates including the domain name christmascom.com

(limited to 100 certificates)
infra.software
christmascom.com
www.christmascom.com
www.christmascom.com
www.nextderm.com
www.flax-oil.com
jointpaincharlotte.com
dynachill.com
christmascom.com
christmascom.com
www.christmascom.com
web-room.com
kid-rock.com
christmascom.com
lainate.org
www.christmascom.com

Certificate

The complete raw certificate details for christmascom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6355778375489507178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 09:10:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 09:10:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christmascom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788440557469346943608056752826772550763371543836771519523463541918227400280843143952449532170652992911008623642740913466690787142835070494111002929322201197474678580527084618325927642680797303765312864241240534201247253038775280089090070510672092532980252418275761736037602817315190521870314363740523399432304873091465532073489065751100519547631512703914407803772619103413546260336873509018163991749026145165899015561016347748273585641729203184382997170962302719639035138295605438227854497056135223712286153314912918892478611631555383307145492383728751833573751542423591176822722659155097788425988264371057977168828512177679985965592603340490367304204929124430620139151758456091883830736141372827084358005315162318535700084827504637573403280255825521620691223324139957536754704216873398381647034575992382093699492397383256420661675585191213382459400737016899128969548315645532893892887757945879531936244948119822829622971010385494031348868639717076062501679019502859516542837825220258105010359617974649484038028780756582008345339744435263417414947247330135298070068222994613398597732092834413173326504442823093896334760857497760975421766209716860016396231747261212969793434540842551598390626888278348701327577922532941727252340449377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6545.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmascom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e36a702960120f4c83586651b289cb222b35e46e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c1a798ee8fdee361ba3296bb31a4b082df3ee91b04b5f2d5e91a57331fb669ee8d2a3b2a465ad2c5fb6ef43dfdd7c69a6b508ad7c0b0edcce020ac206fb2b0c0f3b0e665fb838c328d5ef58b3275040097c244f0fc259596100fa13b4ba2b96824f8ef78e64764011aecec94f1d4b7d7d20474349c63feb54b583aba0436c18046f9cfa23e83d81ff4824a5e512b7452891d24261c7c89a40e4f4d73366df228753b4a00bb78257f63f6f3271a26f5b3cb3c878193ad645911e0ed8594bc05dd4f9cd6cc15e38b229d30ed6eb035cc3571baf6a3567b2cae1b9eed33a8c4716c5c37f32acda685572b4a80cd7aaef0024e802c4ed165ecb1b78a934266a5c64