*.canaryhealth.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 4c:cb:08:39:1a:96:39:61 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.canaryhealth.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:cb:08:39:1a:96:39:61
Serial Number (int): 5533525608506997089
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 90:e7:ed:8b:a1:e7:4e:2a:19:47:76:c2:e3:d7:f2:02:17:9e:d4:52
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 7b:f9:3a:6f:c7:6a:8a:c6:ce:b7:5c:30:30:f6:1f:a6:86:62:d2:27
Fingerprint (sha256): fb:34:60:2e:eb:9f:f2:86:07:52:6d:3d:8d:cd:4d:5e:e4:f9:d1:0c:8d:23:f6:9c:df:5a:d9:2d:76:26:83:24

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-895.crl

Check the revocation status for certificate *.canaryhealth.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canaryhealth.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canaryhealth.com
canaryhealth.com

Other certificates including the domain name canaryhealth.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.canaryhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5533525608506997089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 16:31:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 19:58:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canaryhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1001485051802846407002716021662040629506003941462464301640391865820052418957137209421501446666266888388045888792493902401429984536889017965846758768593258257499244924042507567368968278776204978434443652209591269844023107244432364812350381277530585472305610281776216065164005131873950966564731225476410582479195892997688163356355872531092619590388839793658736288494370681887995697381511372109331129737690940890419091071631267245099204486096335754264908693062717813952831502223011295069553091875440399534799697986178669027729547174323815585424740385400809016945345586604382339007267245161112197041112173133918167549800920941868978066315949872124060510237221055316970786636790027745290757357905595619183500289441443167406805311359245376938174146120714941772566123193052889959780304598277323572879012126000233707861421158677343726870579866970168842676739390662619121565103522772151305687990936965729515536139978838881470849781026174316735276866679517674753161879620445930049516944903229760256053803740993319862195694420890877156333937802977688274379957135902906114608853815483357233089049539779453089125521781170868905168584399725662341610905910105034214619231105953835210640252633730556886274251338122655423266996010908110381338789756867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-895.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canaryhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canaryhealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90e7ed8ba1e74e2a194776c2e3d7f202179ed452
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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