crystalscapes.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 9b:e8:11:b6:d6:55:0d:2a was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crystalscapes.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 9b:e8:11:b6:d6:55:0d:2a
Serial Number (int): 11234248747453320490
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 5d:34:42:29:47:13:aa:0b:03:a5:3b:77:ee:12:d5:0b:64:e6:55:e3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 6b:bb:d7:d8:92:31:76:d0:82:34:8b:58:71:ef:da:a6:0f:95:5c:f0
Fingerprint (sha256): b9:f0:91:a1:69:e8:06:82:61:e2:c5:57:b2:71:eb:c2:92:9b:5f:e2:81:94:a7:86:0c:b6:f1:4b:13:d2:23:29

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6826.crl

Check the revocation status for certificate crystalscapes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crystalscapes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crystalscapes.com

Other certificates including the domain name crystalscapes.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for crystalscapes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11234248747453320490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:51:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 11:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crystalscapes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958414320800626175928814584017858320471019837544450120176435937627652590148803828368319611736209797395567291502443382460601461644106567566862504649169829626182819821733399072594989412987025564653298030484624213771601301904100939147557838136945298170917528367835896987336718967460195958691684714771690038694373663330159565175036510892958422823404238225122909439909842717664728420025573299819942256059647176867605200833203659624880507670771743799005414130899242101604184697109131218877926469819668151269705156936347593599382015411335193081950716732700477793858666999521936206349831820974253030279748460645750074996534997802930327298421887381528142660044964657674548622391545374801528875316611675549438282345348206772245771064639679834230871733217009136730877240862159378920897994047254019218944708356640723010115476369041154735121932705319597040523623411769928244921879392109643212651404498951895444680935422081936024995540698939539238871126144318260384776772565483378048471326943976363294818066425776539676522610728530803688640724964777839384514482285222635847576969516526303047199965810253115625625163495504612944925769173511893560863907457416338947387228275207474428659621645522537790629108394493857957002395057152239131470107672869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6826.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalscapes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d3442294713aa0b03a53b77ee12d50b64e655e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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