upper.ai

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 4d:29:f0:bc:56:7a:57:38 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=upper.ai

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:29:f0:bc:56:7a:57:38
Serial Number (int): 5560239906660964152
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f8:7f:01:9c:07:29:db:84:8f:fa:b9:b1:4a:40:e1:98:ee:fc:a8:36
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 84:ba:27:9b:07:77:a5:c0:83:9a:00:44:50:5a:78:58:a7:3b:1c:5d
Fingerprint (sha256): e9:9b:c0:40:07:a8:dc:95:eb:a6:68:7c:87:b1:1d:5a:b7:e7:23:19:28:cd:4f:f3:68:1b:a8:bc:d3:0a:b3:67

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-11033.crl

Check the revocation status for certificate upper.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upper.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upper.ai

Other certificates including the domain name upper.ai

(limited to 100 certificates)
login.cientificos3punto0.sanluis.gob.ar
upper.ai
lga-prod.itxi.aero
al-bitcoin.com
www.globevents.info
ancoconstruction.co.nz
hugofire.com
urbanstop.co
app.upper.ai
blanket.app
plataforma-posee.com.br
admin.klikkie.nl
lifebit.ai
friendly-pix.npmstack.com
dr420.app
staging.app.upper.ai
auth.speakbox-staging.ca
main.knpumi.cf
app.prontocombustiveis.com.br
www.honorablemikeeng.com
hairarrow.io
staging.app.upper.ai
preprod.ameliyat.com
cargops.app
www.bakerwed.com
esolidaire.fr
www.mercadito.com.bo
roadmapgo.com
www.jesselang.com
www.alperalbayrak.com
api-dev.upper.ai
app.avid.ai
448c-app.empower.eco
ipf.resolute.id
piasse.quebec
xn--p89ax10f.xn--vj5bn01a.xn--mk1bu44c
beta.flugy.com
thebuzzapp.co.uk
uniyearbooks.com
javascript.testry.ro
www.george35mk.com
app.canweconnect.today
www.phelix.co.in
saveepos.com
www.bankerfortrello.com
cms.apptruck.de
www.upper.ai
www.mercadito.com.bo
ucrtel.com
pryde.app
thanhdat.media
flavorbarbarian.com
detect.today
stkpisek.cz
es.dch.de
www.alliedrds.com
dr420.app
react.try.ee
www.arnaudbenassy.com
ihk-kompetenz.plus
app.publicidadencartelera.com.mx
weather.tognacci.net
panel.creatingyourhome.com
upper.ai
www.drakemorrison.com
betgoldtips.com
n.julionadal.com
thebuzzapp.co.uk
photography.marcrufeis.de
www.buk.app
ameerthehacker.me
run.matryoshka.app
upper.ai
www.freeinghk.com
redabits.com
xleb59.com
lintem.co.kr
alwaseet-poultry.com
upper.ai
www.amateurinmotion.com
www.dextereduventures.in
www.gopure.app
kimikoverse.com

Certificate

The complete raw certificate details for upper.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IzWWRnZATDw/Np35hON
0jyI2TbQ48i7lOWZoELUWgG9MO0DIDW848+Ucblw7hL4aI0Yb+d2dtRDX+gJp+yG
K4vw3uyt4UKIRJrvlkKaKBWgTTJzdVWOf08CL0/7ZBv5y+oDZ89X5EeljMB09qc4
SwxKxCFlHMx8Q56XlfcCrANgpDx1QggvvS0NFek4lyO1mDsxvg3R9jJ/2nRiuY1r
TMzQLp06iOrmScesCrMQxxsj7CHWmmGGpUoOcPHvTaF/dyP74rZvoHoIe4HdOhct
eTA2+FPwrx1vVAhumLO1sfihdOtxvg2kNkDqcet7XGJrBPUwKT83EEocSrirwN3c
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5560239906660964152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 02:32:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 02:32:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upper.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29861689431593272776418607414317600377648209236840293839900520672620486011967149389061954341355241264752297223421890796382910488870704784063030595280660092745834374712895603147585355463616218751525117900701491577934121453585178297306675604554076267794220621807471546740731565365696327918669496533052166943242240297175597298210423248211255676487106244486027860292933332150104559489091889631043578989869676359465666112883917751970311198906839633863851926648328482353453011080546886609539116234585696086299715677608472153716787036205657840506424557449606255899890551602502422520239848505149609038275463252354921530252343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-11033.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f87f019c0729db848ffab9b14a40e198eefca836
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a4c47445e6cfaa9aedbaeccf3f525ca5edb5bc6636dcd649b6fd567af75ad946cc1a460469887789395c42c166444cceb0e4a9f08ab068484191b738d9d3ef695c539c7a7e7cb4577e3dce5a85e74f0aac8415d2fba2b0dd4a88d48662e0b2f00769251fa7c322efdb275e5b9ad044e9889d2a1a04255541cbab65f22f719e5bd8165d2916ac03b7c8d71a5c2c16e8e7118e37f8ad187a91afb819c2165147c1a4246c3d454ec3182305197aef8e38202dd4c00e285220e8e4c0f68ffd4b7915408bb03500ffea93e0a1b96df121cd7f0f9208c669fae2989626367ccb536443ea6997152b1ec3ddfce48d5223c6a029f393b4e632728f1b1c067c94398358b