sold.cool

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 4d:bd:03:ab:d2:ec:89:43 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sold.cool

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:bd:03:ab:d2:ec:89:43
Serial Number (int): 5601637548031772995
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 08:9d:24:d1:ec:3a:45:c3:17:a0:8a:57:e8:e1:0d:73:c6:67:c6:86
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 3c:60:9d:fe:0f:f5:24:cb:53:e0:b4:9b:1f:96:c6:65:b4:9d:fa:4b
Fingerprint (sha256): a4:7f:38:0d:60:39:5c:55:93:65:02:b9:d2:1a:a9:11:03:d3:0b:a2:23:7d:e5:ee:1a:a5:9b:4c:b6:76:0c:04

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6953.crl

Check the revocation status for certificate sold.cool

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sold.cool

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sold.cool

Other certificates including the domain name sold.cool

(limited to 100 certificates)

Certificate

The complete raw certificate details for sold.cool in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsAvquXJP//nM64RYFEr/
RkS4EyRED0Fr6XPDQ3PeDlkCxbC4qLQL8LYQGkCJy+8Moh1jGbmnEu+rmEkbSPYl
ClAlmTh6loElQ1FpIWq+y892PaX7KK6nJf2IKS8QBPcUYE0g/lf+4QyOZE5Rb/hR
Kg4QYGhuuLxD/GdpVk1rD/PEeNBASpRtmqPpEdGSQX+iRdX/aKWQOKwxWiH8resG
OpWMvHFAj29BUsuIdQeG9d9/ECreuwMmJLZlvem4L+pIdzmvKwcs7nic3zyFE4LX
Ezbb052rjk9Ct3Kp7hoA6X3EeTghrL7j5q0+a7QluefCK+nEOfDZYeuCzldHXJGz
lq8GVO97c22iZ05ZlDA/W1HphpdFPAG2kwTLIIQMfJbUcQAzVuAr7HlOTTqhBHOL
zTznT3HIfKXY/WV1Z1SUHitaKpQqb5PySFFzq+J7McxGWqC2goC0hZ0crrbRT6cr
ilCrbGOZZCsZ80ZXBY67D2rFhdt28o3gLDpdzlIIO+iqAAXmGz+E4vVIG4PKIpmV
lu33M6KkZNWytKnSlvKka61IaeErQh3BcY+mJUj7RTkiT9P2owsSMxYBjlRF0EiA
IK9emLvvEaf29tTvQQMzdHE/a5Fx68FNEk0FLU+dKNBdSquzVnB8Ws4Odngs5Gle
pJftAUL/Gigm2RYxR0WBLcMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5601637548031772995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 04:18:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 04:18:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sold.cool'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718207264872051182848693903126298504818420914867168242068515206532112259429393395347962797428172210371230057365117028383331918161559877420986889691980170606614657968468892373807098045567324154973000714082262113799639035863938122720523090236150011198957353088085233560803186170813270207035892155868461274458542523052802974245786363042863073842581528382080349059699811115542030946952757051460550756754780078236194889379791780114454071956488966828925476310634198091751984723085714211251702171702564798233343631479351787785830559835524281316906764528298390223662067447931780108236785045806500958465133340066867643114821580114799140172069383007784412871782317924603971167879405857143681342758850973264753759829720965424974660325737216904295636055315361938018808487033106246482352593428557295669508634216335821661250909750357079618965676644882643328507642805515948028792445081086704690281380261633973172557941434058602847814059441346524054677633757308625417436839762062278963977794870146480495552875572296047824342177205283385330026676486349815247656304961975597961040668761254916325888061890825457421453330251828910504081724793224110400464483000757653206361189827635790907373780027042877578270959602848186381102711456937707993263335615939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6953.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sold.cool'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							089d24d1ec3a45c317a08a57e8e10d73c667c686
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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