mastersplash.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 38:c8:bb:29:d7:a5:55:49 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mastersplash.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 38:c8:bb:29:d7:a5:55:49
Serial Number (int): 4091726049852085577
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 2a:4b:0a:99:fe:cf:0d:0a:e8:b5:ee:80:8a:7e:5a:76:0b:ff:bb:77
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 0e:9c:89:49:02:c4:e1:42:0b:71:37:27:89:6a:db:93:20:6f:f6:22
Fingerprint (sha256): b6:3b:bd:98:26:55:f3:1b:96:9b:31:7a:48:f3:05:08:54:ee:07:da:d5:8e:f0:e8:1b:9c:f7:1d:35:e0:70:4e

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6713.crl

Check the revocation status for certificate mastersplash.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mastersplash.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mastersplash.com

Other certificates including the domain name mastersplash.com

(limited to 100 certificates)
www.organicfashionweek.com
5-5.org
enderm.com
craftsmenofcapital.com
lapromozione.com
genzanodiroma.org
panduik.nl
www.defamationattorneys.com
cymar.com
fuctthatnigga.com
exerciseinducedasthma.org
www.cleanrightinc.com
mastersplash.com
www.malerealdoll.com
starsignplanner.com
mastersplash.com
rieping.com
cleanrightinc.com
www.nyprp.com
www.atlanticforum.com
girliath.com

Certificate

The complete raw certificate details for mastersplash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4091726049852085577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 10:08:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 10:08:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mastersplash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750158665327749874301864243156375333546566117093435559783258434634072341118677005723556711412205916290184397788574493242894817755167249843835573110048647133212327275082889758431826943690955085032875545132941641836694193559037353872899293752301243856918161413919507408123870001601640222543873008930441006213382213315988870473704793852873274008513307069530739408895384815265428999086792899280374221182826481699247491796016062215156539092842260931537356143608774293856957201422820632511554689389560013360828370057367697467074358496808023879186394554700563190161211553621007359201403875902437208724440699368350637034012675653183821165305446875353605471324850633263182703061115742411494477751139634303759329197844838157591595259584249260763140598884351094914303582802410864664009050710493811730058071957562884326877905119966140734541364456621683179710879325232107773181740068093794870963284928068097906427758561386055116430450249808122992182877202834482000497669118258641175748174823614103812600171761214648434940053395686004944397601898294085178156668774405008326121302713841899821224194471327822915709663605057083583545876424206588844618145726181499970518576215631405261996301105504122209087583661317820368107190668964963282431178207273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6713.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersplash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a4b0a99fecf0d0ae8b5ee808a7e5a760bffbb77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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