brightxa.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 62:3b:31:9a:45:20:7a:eb was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brightxa.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 62:3b:31:9a:45:20:7a:eb
Serial Number (int): 7078305777997347563
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f9:e7:7a:54:4a:55:24:84:da:76:83:cb:dc:bd:91:ae:e7:98:35:6a
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 0b:69:7a:43:f0:52:34:69:8b:ff:7f:2b:89:78:c9:c5:97:7b:d5:06
Fingerprint (sha256): e4:00:65:21:20:8c:bc:49:f4:08:6b:d6:08:da:be:41:38:37:82:92:44:04:73:bb:d7:9c:43:e4:92:35:30:f6

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-15238.crl

Check the revocation status for certificate brightxa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brightxa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brightxa.com

Other certificates including the domain name brightxa.com

(limited to 100 certificates)
connect.aventos.com.br
events.iskala.net
virtualexpo.saknquare.com
www.asiagolfconvention2023.com
connect.aventos.com.br
www.brightxa.com
events.closedtitle.com
www.brightxa.com
evaluationforum.uky.edu
events.closedtitle.com
www.dotcybersummit.com
events.humanitarianglobal.com
events.closedtitle.com
nyambu.kyalo.co.ke
events.myriadas.com
events.humanitarianglobal.com
events.salam.sa
events.humanitarianglobal.com
events.humanitarianglobal.com
www.brightxa.com
www.asiagolfconvention2023.com
events.humanitarianglobal.com
www.dotcybersummit.com
events.humanitarianglobal.com
events.humanitarianglobal.com
connect.aventos.com.br
virtualexpo.saknquare.com
events.humanitarianglobal.com
nyambu.kyalo.co.ke
events.salam.sa
virtualexpo.saknquare.com
events.humanitarianglobal.com
events.salam.sa
nyambu.kyalo.co.ke
events.humanitarianglobal.com
events.closedtitle.com
evaluationforum.uky.edu
www.dotcybersummit.com
www.asiagolfconvention2023.com
events.humanitarianglobal.com
connect.aventos.com.br
events.humanitarianglobal.com
evaluationforum.uky.edu
events.humanitarianglobal.com
events.humanitarianglobal.com
evaluationforum.uky.edu
www.dotcybersummit.com
virtualexpo.saknquare.com
events.humanitarianglobal.com
events.salam.sa
brightxa.com
events.humanitarianglobal.com
www.brightxa.com
events.humanitarianglobal.com
www.asiagolfconvention2023.com
nyambu.kyalo.co.ke

Certificate

The complete raw certificate details for brightxa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCwwOrAkZf0IMQCIO9L
F5WuYMfyadp4L0JJgoT/WlspBumfEL1cqwMjl0eo75rcJFutjzGroF119IFlM4uY
rPQYClMu8Bw9rbAATsSuEXGv1QqDY1Bq+H5DxWPUuw+1GzYDIMrxlMn6ZplquEXE
J5Pd0Mc3NR24LkyMAdEMPYOuXZA0SBfC5gD+sFH9E4s2Xlc7zOlMl+dp1HB8O8MY
dWohr87/ervoXUIls2bD3kxWELRCCrGSuptjuJuGPLrTp2aTgI1zcY0Dlov7o3YH
BZ74+kuNpCuWNFjDdtal+4Yzqb3GY6piwRjQhSEpnpAiof8SavY/EwvbHPNIFxBa
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7078305777997347563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brightxa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22352410343520783537960980901505405640365781133113442999201413980535932692640625445496962310302328617047990740184017186664920707889147995806016916798167575439067211795245051933251941859767369840368184004257058124080499915904246501467099015397091291976378282468148977121823751907646913588533470347983524535920000207092949296441160764942161825963299945356060230133781488444937775352744534146218808115227740383595247068270377783332446721533495221190950068736704814553637108422141391982062472768076469109429577790094855456037644219242864283423302609032707709706563410506002047431016823404365943718225732591318055183735317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-15238.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightxa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9e77a544a552484da7683cbdcbd91aee798356a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059ff300ab67843ed854ab548f752e6cc787090217a2ddf8bb2856f1afb26bbc27fa8c3df7c04b8608964b9537792ef80b90352e01737c0b2885ab2345de6d95d7f34fd05fca2bd059c7bbbfca633bebbdcfc8b69fec36208a9fb8e7ee2b7ee9e02bbc1bc442f4902ca1123987ebfc17726989605f34984ae730f2da815cad97c60032b80660b5158b1928cec8d7866cff77b1487fcdd49a7f9f1f6b3496d6f0c99aae3ebc6f10e73f7f4884813a1a2915c2e9ab5452c7c0ead84879f82d06741255d82e6fdda642ce7a74f5052285abb5719f5bf95589fc4789d6c85eca3b696a1ae901bd69d367d97a16cd537f3f57fe6741d05fc883b3bf174bce55d15e0e9