*.wellspringlutheran.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 2d:00:5f:a5:42:40:94:3e was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.wellspringlutheran.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:00:5f:a5:42:40:94:3e
Serial Number (int): 3242696895092528190
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 7d:a6:3b:e7:ba:80:72:39:c5:70:f1:7a:77:e0:f5:3f:66:a0:63:1e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): a1:ec:90:09:dd:22:61:1a:32:bc:f5:22:f0:4e:24:52:de:5d:82:bf
Fingerprint (sha256): bc:f9:1b:15:ff:0e:bc:a9:2e:f1:c4:0f:fb:da:05:d6:7a:4f:d1:c1:34:47:4c:8e:fd:b5:1c:3a:5d:87:b4:76

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-4540.crl

Check the revocation status for certificate *.wellspringlutheran.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wellspringlutheran.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wellspringlutheran.com
wellspringlutheran.com

Other certificates including the domain name wellspringlutheran.com

(limited to 100 certificates)
help.i9labsinc.com
supportdev.intellidash.net
alpha1.microman.com
wellspringlutheran.com
community.microvellum.com
learn1.trybooking.com
alpha1.microman.com
community.microvellum.com
*.wellspringlutheran.com
team.shieldtechservices.com
destek.tomubilisim.com
helpdesk.idotz.net
help.bucket.io
support.whiteiron.cloud
wellspringlutheran.com
ticket.ctsupport.com.au
support.eclock.com.mx
wellspringlutheran.com
support.atpenable.co.uk
support.marketwho.com
help.apartments-alfama.com
helpdesk.miotel.co.za
wellspring.newhallklein.com
helpdesk.idotz.net
support.civiclift.com
*.wellspringlutheran.com
wellspringlutheran.com
tickets.northerncompass.net
sapo-support.fuseit.co.za
helpdesk.awarelabs.us
wellspringlutheran.com
helpdesktemp.wellspringlutheran.com
*.wellspringlutheran.com
wellspringlutheran.com
ticket.ctsupport.com.au
softwarerequest.rauschcoleman.com
helpdesk.littlefixit.com
help.fleetsquared.com
*.wellspringlutheran.com
support.enertiv.com
help.apartments-alfama.com
ayuda.rubenrivera.mx
soporte.pysoft.tech
helpdesk.ttwgroup.com
support.taureanpac.com
*.wellspringlutheran.com
support.kimblelabs.com
support.enertiv.com
support.prolim.com
tickets.northerncompass.net
wellspringlutheran.com
support.optimalstation.com
support.taureanpac.com
support.itnetsolution.com
help.inpath.com

Certificate

The complete raw certificate details for *.wellspringlutheran.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoB1skSiL6Y0OLozlv6i
IchFVl0KwhstXjNC3e1WFFsfLgbuyNGwwKYWLmlcfDQE49lhDiwYnZObYXpaJQs2
w94opuT6Lju1bhXM6x+HHNClBFF0XHJhqE8s5ehHTJPvPQBHmSDaK0I4uauPM39M
n91CCeN+xumVhBwO/1FaMC7WK0dlM+PBAkCg7KqrWCmkrat1xg/K/mAdsgrEbiy7
doklyUdjpCasHyd5yVHKHA3dl3LWkE1nrxpuAlrswVCMmns2jctcdPQRCWa3D1Rf
p0rxO/x9mfc2ziNznkCT2DXm2UIhNinJUDMrWjKP1dpvbOBYiQBRCGmTx1MyNPfP
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3242696895092528190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-24 07:12:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 07:12:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wellspringlutheran.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22533764148309099748695117875848583712585750974151053548103732463144285214473933815276146410662570012630926665893346148837964246336436896746786124588787270937511201767612830604085119760193407789052108167252350300779932208914922310300127122562262611068442325740562688243148574589582942317356247339876494100661796180345765130187100353621871779680090908724835392581583834181170936361826729745615108981055456456892667099474876725696776097832673976988653880474931424712950825911038183800058737489104539902380529613277321434985754530246353457121871451253614562703272673663202219193306075308753092744743975758401824808751043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-4540.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellspringlutheran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellspringlutheran.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7da63be7ba807239c570f17a77e0f53f66a0631e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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