DV SSL/TLS Certificate for www.opaliamarketing.net

Certificate is witin its validity period

Issued by GoDaddy.com, Inc. (Go Daddy Secure Certificate Authority - G2)

About the www.opaliamarketing.net DV SSL/TLS Certificate

This certificate with serial number 8d:1c:80:3e:70:d4:61:8f for www.opaliamarketing.net was issued on by GoDaddy.com, Inc..

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.opaliamarketing.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organizational unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 8d:1c:80:3e:70:d4:61:8f
Serial Number (int): 10168143064365031823
Serial Number Length: 64 bits, 8 octets

Subject Key Identifier: 0a:22:f9:b5:9a:99:f9:54:25:89:c9:b3:59:20:17:18:3b:2a:08:a7
Authority Key Identifier: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (SHA-1): 51:78:c3:da:a7:99:82:b5:d7:c0:e7:22:2c:45:17:a6:cc:c4:89:22
Fingerprint (SHA-256): 39:52:df:3c:a4:db:5d:30:58:b5:83:39:28:70:41:1d:ce:4f:06:c0:fd:2a:2c:cd:9f:e8:37:7a:2b:71:3b:a7

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation Information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-53115.crl

Check the revocation status for certificate www.opaliamarketing.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.opaliamarketing.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.opaliamarketing.net

X.509 Certificate

The complete raw X.509 certificate details for www.opaliamarketing.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfReJa/eJVsn10BJp6e2
dJF1y2zfojWV5ognK+fZQoqToR/b7dlPyi7Rhg/7rztoC8Fe2dSH7pPcVRt7gd7i
6jKdxpt7RgK8NQ4xrN/ur45HSGjj8/EXw8hguUmYT0omcDx51iQtJHgFc6U2vVAZ
pWkYuXOCpOXIXIrrwHkxV8Gut6o86M/mGtjmi+uz427O9Y2u+P4ss6/V001jz1hP
xLJ02VaBnWbRyrbsSQCF0Nkn62h3wKVll71umZA2jTEhuT1htpMM5UjezfVVMOoX
/2oP6uaAciwDOg1RBXrMI2//U0ddug/ZX3/nBzoGpH1Wr2VyXn7DO7f6AHZwaEyD
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10168143064365031823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-07 00:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-07 00:43:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opaliamarketing.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24484495093346330456182275679852434063736190959782127246330727611445641417323937034731348297525747697706673636969049721528591239457035533902131607011569746133678345070486352184763196280793278424402825073933121592637913452142130900935702227030199765348134743661983675901120036476560274244213853791771758427018236195710983953484979670305619687234448402046404344150437136566493140446319897772433366006771947787770684746007984304102078611341350821546083350668682306390129032502310808551064412671086388614449619943279539093203431406963537177786079337530697738868609847445185864051453670310406013326292574438476702412473209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-53115.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opaliamarketing.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a22f9b59a99f9542589c9b3592017183b2a08a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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