Tel:
314-889-1100
Fax:
314-889-1101
www.bdo.com

101 S Hanley Rd, Suite 800
St. Louis, MO 63105

REPORT OF THE INDEPENDENT ACCOUNTANT
To the management of Starfield Technologies, LLC (“Starfield”):
Scope
We have examined Starfield, subsidiary of GoDaddy Inc. (“GoDaddy”), management’s assertion
that for its Starfield and GoDaddy Certification Authority (“CA”) operations in Arizona andVirginia, in the United States of America, for its CAs as enumerated in Attachment B, Starfieldhas:•

disclosed its business, key lifecycle management, certificate lifecycle management, andCA environmental control practices in the applicable versions of its Starfield Technologies,
LLC Certificate Policy and Certification Practice Statement (“CP/CPS”) enumerated in
Attachment A•

maintained effective controls to provide reasonable assurance that Starfield provides its
services in accordance with its CP/CPS•

maintained effective controls to provide reasonable assurance that:o the integrity of keys and certificates it manages is established and protected
throughout their lifecycles;o the integrity of subscriber keys and certificates it manages is established andprotected throughout their lifecycles;
o subscriber information is properly authenticated; ando subordinate CA certificate requests are accurate, authenticated, and approved•

maintained effective controls to provide reasonable assurance that:o logical and physical access to CA systems and data is restricted to authorizedindividuals;o the continuity of key and certificate management operations is maintained; ando CA systems development, maintenance, and operations are properly authorized
and performed to maintain CA systems integrity

throughout the period July 1, 2022 to June 30, 2023 based on the WebTrust Principles and Criteria
for Certification Authorities v2.2.2.
Starfield does not escrow its CA keys, does not provide subscriber key generation services,
subscriber key storage and recovery services, integrated circuit card lifecycle management for
subscribers, and does not provide certificate suspension services. Accordingly, our examination
did not extend to controls that would address those criteria.

BDO USA refers to BDO USA, P.C., a Virginia professional corporation, also doing business in certain jurisdictions with an alternative identifying abbreviation, such as
Corp. or P.S.C.
BDO USA, P.C. is the U.S. member of BDO International Limited, a UK company limited by guarantee, and forms part of the international BDO network of independent
member firms.
BDO is the brand name for the BDO network and for each of the BDO Member Firms.

Certification Authority’s Responsibilities
Starfield’s management is responsible for its assertion, including the fairness of its presentation,and the provision of its described services in accordance with the WebTrust Principles and Criteria
for Certification Authorities v2.2.2.
Independent Accountant’s Responsibilities
Our responsibility is to express an opinion on Starfield management’s assertion based on our
examination. Our examination was conducted in accordance with attestation standards
established by the American Institute of Certified Public Accountants. Those standards requirethat we plan and perform the examination to obtain reasonable assurance about whether
management’s assertion is fairly stated, in all material respects. An examination involves
performing procedures to obtain evidence about management’s assertion. The nature, timing,and extent of the procedures selected depend on our judgment, including an assessment of therisks of material misstatement of management’s assertion, whether due to fraud or error. We
believe that the evidence we obtained is sufficient and appropriate to provide a reasonable basis
for our opinion.
We are required to be independent and to meet our other ethical responsibilities in accordancewith relevant ethical requirements relating to the engagement.
The relative effectiveness and significance of specific controls at Starfield and their effect on
assessments of control risk for subscribers and relying parties are dependent on their interaction
with the controls and other factors present at individual subscriber and relying party locations.
Our examination did not extend to controls at individual subscriber and relying party locations
and we have not evaluated the effectiveness of such controls.
Inherent Limitations
There are inherent limitations in the effectiveness of any system of internal control, including
the possibility of human error and the circumvention of controls. For example, because of theirnature, controls may not prevent, or detect unauthorized access to systems and information, or
failure to comply with internal and external policies or requirements. Also, the projection to the
future of any conclusions based on our findings is subject to the risk that controls may become
ineffective.
Independent Accountant’s Opinion
In our opinion management’s assertion, as referred to above, is fairly stated, in all material
respects.
This report does not include any representation as to the quality of Starfield’s services other thanits CA operations in Arizona and Virginia, in the United States of America, nor the suitability of
any of Starfield’s services for any customer's intended purpose.

2

Other Matter
Without modifying our opinion, we noted the following other matters during our procedures:
Matter Topic
1 Certificate Revocation
2

Certificate Validation

3

Access Management andAccess Review

Matter
GoDaddy disclosed in Mozilla Bug #1793848 that they failed
to revoke a number of subscriber certificates within the 24
hour requirement.
GoDaddy disclosed in Mozilla Bug #1793642 that four (4)GoDaddy root CRLs were version 1, and two (2) GoDaddy
root CRLs were version 2 but do not contain CRL number
extensions.
Access to in-scope servers was not revoked within 24 hours
for two (2) users that were removed from the trusted roles
and transferred to other positions within the organization.
These users were not identified during quarterly accessreviews.

While the Starfield assertion notes all issues disclosed on Bugzilla from July 1, 2022 through thedate of this report we have only noted those instances relevant to the CAs enumerated in
Attachment B and applicable to the WebTrust Principles and Criteria for Certification Authorities
v2.2.2.
Use of the WebTrust Seal
Starfield’s use of the WebTrust for Certification Authorities Seal constitutes a symbolic
representation of the contents of this report and it is not intended, nor should it be construed,
to update this report or provide any additional assurance.

September 21, 2023

3

ATTACHMENT A – CERTIFICATE POLICY/CERTIFICATION PRACTICE STATEMENTVERSIONS IN-SCOPE
Policy Name

Policy Version

Policy Date

Starfield Technologies, LLC Certificate Policy andCertification Practice Statement

Version 4.18

November 11, 2022

Starfield Technologies, LLC Certificate Policy andCertification Practice Statement

Version 4.17

June 17, 2022

4

ATTACHMENT B – IN-SCOPE CAs
Root CAs
Subject
OU = Go Daddy Class 2 Certification Authority
O = The Go Daddy Group, Inc.
C = US
CN = Go Daddy Root Certificate Authority - G2
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = USOU = Starfield Class 2 Certification Authority
O = Starfield Technologies, Inc.
C = US
CN = Starfield Root Certificate Authority - G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate
OU =http://certificates.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G5
O = Starfield Technologies, Inc.
C = US
CN = Starfield Root Certificate Authority - G6
O = Starfield Technologies, Inc.
C = US
CN = GoDaddy Root Certificate Authority - G5
O = GoDaddy, Inc.
C = US
CN = GoDaddy Root Certificate Authority - G6
O = GoDaddy, Inc.
C = USSHA2 Thumbprint

Valid From

Valid To

C3846BF24B9E93CA64274C0EC67C1ECC5E024FFCACD2D74019350E81FE546AE4

6/29/2004

6/29/2034

45140B3247EB9CC8C5B4F0D7B53091F73292089E6E5A63E2749DD3ACA9198EDA

9/1/2009

12/31/2037

1465FA205397B876FAA6F0A9958E5590E40FCC7FAA4FB7C2C8677521FB5FB658

6/29/2004

6/29/2034

2CE1CB0BF9D2F9E102993FBE215152C3B2DD0CABDE1C68E5319B839154DBB7F5

9/1/2009

12/31/2037

B5BD2CB79CBD1907298D6BDF4842E516D8C78FA6FC96D25F71AF814E16CC245E

6/2/2008

12/31/2029

414F6C10FA816561832751BDB241ED8AE2BB0E2EBE651DE48E317ABB774E38F0

6/20/2022

6/20/2042

FDB2C428AC393FD61B386497E0CC6652D71F35F6683C8E0AD0E754CF8F133D2A

6/20/2022

6/20/2052

E0562C0CD4CD5959DB2AB9D8E7426B248FD75534F5D50CFAF8CB312239F93086

6/20/2022

6/20/2052

DB3C05E9C55D5259B057474D7F7F3E54A2A51AFAA71EC5C41D8C3CBE68108799

6/20/2022

6/20/2052

5

Cross-Signed Certificates
Subject
CN = Go Daddy Root Certificate Authority - G2
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Root Certificate Authority - G2
OU = https://certs.godaddy.com/repository/
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G2
OU = https://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
OU = https://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

3A2FBE92891E57FE05D57087F48E730F17E5A5F53EF403D618E5B74D7A7E6ECB

1/1/2014

5/30/2031

9BF58967545996194512DB6177151AFE99706AEA3DA36FEEE7AD9F8B3C0507CB

5/3/2011

5/3/2031

9F43D52E808C20AFF69E02FAAC205AAC684E6975213D6620FAC64BDE5FCAB4BC

1/1/2014

5/30/2031

454040E4969070401CC35BDF7F2A4EBCE5797BB7694AE731D93A8115FD59929C

5/3/2011

5/3/2031

EB159C922A3FC2191475CA20A53816D87A38A1A79A7264789193D2F1F750E85E

1/1/2014

5/30/2031

A24B9440F9FCBEBB48C274C03DE7D24C5ED1CA59D2D362F29ED3B457762C75BB

5/3/2011

5/30/2031

6

Cross-Signed Certificates
Subject
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

2D12B619A660CEFB013271831D891213FC434E982A21568256CF4E2E86324BEA

8/30/2009

6/28/2034

28689B30E4C306AAB53B027B29E36AD6DD1DCF4B953994482CA84BDC1ECAC996

9/2/2009

6/28/2034

7

Intermediate CAs
Subject
serialNumber = 07969287
CN = Go Daddy Secure Certification Authority
OU = http://certificates.godaddy.com/repository
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Secure Certificate Authority - G2
OU = http://certs.godaddy.com/repository/
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Secure Code Signing Certificate
Authority - G2
OU = http://certs.godaddy.com/repository/
O = GoDaddy.com, LLC
L = Scottsdale
C = US
CN = Go Daddy Secure Extended Validation CodeSigning CA - G2
O = GoDaddy Inc.
L = Scottsdale
S = Arizona
C = US
serialNumber = 10688435
CN = Starfield Secure Certification Authority
OU =http://certificates.starfieldtech.com/repository
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Secure Certificate Authority - G2
OU = http://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

09ED6E991FC3273D8FEA317D339C02041861973549CFA6E1558F411F11211AA3

11/16/2006

11/16/2026

973A41276FFD01E027A2AAD49E34C37846D3E976FF6A620B6712E33832041AA6

5/3/2011

5/3/2031

EF356CC299AA637916C81A48891B5BA2F333A2064D93A89BA14F63A14AA6B251

4/1/2014

4/1/2034

9EFC910271094B886BD9A8FC9E394DBF2AE514778CB373544085AF815CABFE2D

5/1/2015

5/1/2035

05A6DB389391DF92E0BE93FDFA4DB1E3CF53903918B8D9D85A9C396CB55DF030

11/16/2006

11/16/2026

93A07898D89B2CCA166BA6F1F8A14138CE43828E491B831926BC8247D391CC72

5/3/2011

5/3/2031

8

Intermediate CAs
Subject
CN = Starfield Secure Code Signing Certificate
Authority - G2
OU = http://certs.starfieldtech.com/repository/
O = Starfield Technologies, LLC
S = Arizona
C = US
CN = Starfield Secure Extended Validation CodeSigning CA - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

26CFA206753E96AED7C30F5674E7C6F5A0CB2F93837AF6A1596C2F799C725385

4/1/2014

4/1/2034

F41A694B3825942DB89523E9775F997DB9FA2998398DC39A74B72670DACFD468

5/1/2015

5/1/2035

9

Timestamping CAs
Subject
CN = Starfield Timestamp Authority - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = US
CN = Starfield Timestamp Authority - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

5E9223124187AC792056A8CFBDD23E643CD774DB8431A914D4FCFA1CD4B3A353

4/15/2019

4/15/2024

0EA223D9132909B625DDDC6C94FB85AFDED0A20DCFF55B7E65BFECF1411386AC

9/17/20199/17/202410

DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6STARFIELD TECHNOLOGIES, LLC MANAGEMENT’S ASSERTION
Starfield Technologies, LLC (“Starfield”), subsidiary of GoDaddy Inc. (“GoDaddy”), operates theStarfield and GoDaddy Certification Authority (“CA”) services for the CAs enumerated in Attachment
B, and provides the following CA services:









Subscriber registration
Certificate renewal
Certificate rekey
Certificate issuance
Certificate distribution
Certificate revocation
Certificate validation
Subordinate CA certification and cross-certification

The management of Starfield is responsible for establishing and maintaining effective controls overits CA operations, including its CA business practices disclosure on its repository, CA businesspractices management, CA environmental controls, CA key lifecycle management controls,
certificate lifecycle management controls, and subordinate CA certificate lifecycle management
controls. These controls contain monitoring mechanisms, and actions are taken to correct
deficiencies identified.
There are inherent limitations in any controls, including the possibility of human error, and thecircumvention or overriding of controls. Accordingly, even effective controls can only provide
reasonable assurance with respect to Starfield’s CA operations. Furthermore, because of changes in
conditions, the effectiveness of controls may vary over time.
Starfield management has assessed its disclosures of its certificate practices and controls over its
CA services. Based on that assessment, in Starfield management’s opinion, in providing its CA
services in Arizona and Virginia, in the United States of America, Starfield has:

disclosed its business, key lifecycle management, certificate lifecycle management, and CA
environment control practices in the applicable versions of its Starfield Technologies, LLC
Certificate Policy and Certification Practice Statement (“CP/CPS”) enumerated in
Attachment Amaintained effective controls to provide reasonable assurance that Starfield provides its
services in accordance with its CP/CPS

maintained effective controls to provide reasonable assurance that:o the integrity of keys and certificates it manages is established and protected
throughout their lifecycles;o the integrity of subscriber keys and certificates it manages is established andprotected throughout their lifecycles;
o subscriber information is properly authenticated; ando subordinate CA certificate requests are accurate, authenticated, and approved

1DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6maintained effective controls to provide reasonable assurance that:o logical and physical access to CA systems and data is restricted to authorizedindividuals;o the continuity of key and certificate management operations is maintained; ando CA systems development, maintenance, and operations are properly authorized andperformed to maintain CA systems integrity

throughout the period July 1, 2022 to June 30, 2023 based on the WebTrust Principles and Criteria
for Certification Authorities v2.2.2, including the following:
CA Business Practices Disclosure

Certification Practice Statement (CPS)
Certificate Policy (CP)CA Business Practices ManagementCertificate Policy Management
Certification Practice Statement Management

CA Environmental Controls











Security Management
Asset Classification and Management
Personnel Security
Physical & Environmental Security
Operations Management
System Access Management
System Development, Maintenance, and Change Management
Disaster Recovery, Backups, and Business Continuity Management
Monitoring and Compliance
Audit Logging

CA Key Lifecycle Management Controls











CA Key Generation
CA Key Storage, Backup, and Recovery
CA Public Key Distribution
CA Key Usage
CA Key Archival
CA Key Destruction
CA Key Compromise
CA Cryptographic Hardware Lifecycle Management
CA Key Transportation
CA Key Migration2DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

Subscriber Key Lifecycle Management Controls

Requirements for Subscriber Key Management

Certificate Lifecycle Management Controls








Subscriber Registration
Certificate Renewal
Certificate Rekey
Certificate Issuance
Certificate Distribution
Certificate Revocation
Certificate Validation

Subordinate CA and Cross Certificate Lifecycle Management Controls
Subordinate CA Certificate and Cross Certificate Lifecycle Management

Starfield does not escrow its CA keys, does not provide subscriber key generation services,
subscriber key storage and recovery services, integrated circuit card lifecycle management for
subscribers, and does not provide certificate suspension services. Accordingly, our assertion does
not extend to controls that would address those criteria.
Starfield has disclosed the following matters publicly on Mozilla Bugzilla’s platform. These matterswere included below due to being open during the period July 1, 2022 through the date of thisreport.

3DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

Bug ID
1777128
1793848
17936421829024

Summary
GoDaddy: Misissuance of Cross Signed
Certs
GoDaddy: Failure to revoke 210 subscriber
certificates within 24 hours
GoDaddy: CRLs are version 1 and lack CRL
Number extension
GoDaddy: CRL Issuer Mismatch

OpenedClosedResolution

6/28/2022

8/15/2022

FIXED

10/5/2022

11/26/2022

FIXED

10/4/2022

1/15/2023

FIXED

4/19/2023

5/5/2023

FIXED

In addition to the matters disclosed in Mozilla Bugzilla’s platform, Starfield has noted thefollowing matter:
Matter Topic
Access Management andAccess Review

MatterAccess to in-scope servers was not
revoked within 24 hours for two (2)users that were removed from thetrusted roles and transferred to otherpositions within the organization. Theseusers were not identified during
quarterly access reviews.

9/21/2023_____________________________________________
Andres Armeda
Senior Director, Product Management – Security
Starfield Technologies, LLC_____________________________________________
Sarath Geethakumar
Chief Information Security Officer
Starfield Technologies, LLC

4

9/21/2023

Management Response
GoDaddy noted the twousers that transferred
positions did not accessin-scope servers after
the change in position.

DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

ATTACHMENT A – CERTIFICATE POLICY/CERTIFICATION PRACTICE STATEMENTVERSIONS IN-SCOPE
Policy Name

Policy Version

Policy Date

Starfield Technologies, LLC Certificate Policy andCertification Practice Statement

Version 4.18

November 11, 2023

Starfield Technologies, LLC Certificate Policy andCertification Practice Statement

Version 4.17

June 17, 20225

DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

ATTACHMENT B – IN-SCOPE CAs
Root CAs
Subject
OU = Go Daddy Class 2 Certification Authority
O = The Go Daddy Group, Inc.
C = US
CN = Go Daddy Root Certificate Authority - G2
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = USOU = Starfield Class 2 Certification Authority
O = Starfield Technologies, Inc.
C = US
CN = Starfield Root Certificate Authority - G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate
OU =http://certificates.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G5
O = Starfield Technologies, Inc.
C = US
CN = Starfield Root Certificate Authority - G6
O = Starfield Technologies, Inc.
C = US
CN = GoDaddy Root Certificate Authority - G5
O = GoDaddy, Inc.
C = USSHA2 Thumbprint

Valid From

Valid To

C3846BF24B9E93CA64274C0EC67C1ECC5E024FFCACD2D74019350E81FE546AE4

6/29/2004

6/29/2034

45140B3247EB9CC8C5B4F0D7B53091F73292089E6E5A63E2749DD3ACA9198EDA

9/1/2009

12/31/2037

1465FA205397B876FAA6F0A9958E5590E40FCC7FAA4FB7C2C8677521FB5FB658

6/29/2004

6/29/2034

2CE1CB0BF9D2F9E102993FBE215152C3B2DD0CABDE1C68E5319B839154DBB7F5

9/1/2009

12/31/2037

B5BD2CB79CBD1907298D6BDF4842E516D8C78FA6FC96D25F71AF814E16CC245E

6/2/2008

12/31/2029

414F6C10FA816561832751BDB241ED8AE2BB0E2EBE651DE48E317ABB774E38F0

6/20/2022

6/20/2042

FDB2C428AC393FD61B386497E0CC6652D71F35F6683C8E0AD0E754CF8F133D2A

6/20/2022

6/20/2052

E0562C0CD4CD5959DB2AB9D8E7426B248FD75534F5D50CFAF8CB312239F93086

6/20/2022

6/20/2052

6

DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

Root CAs
Subject
CN = GoDaddy Root Certificate Authority - G6
O = GoDaddy, Inc.
C = US

Cross-Signed Certificates
Subject
CN = Go Daddy Root Certificate Authority - G2
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Root Certificate Authority - G2
OU = https://certs.godaddy.com/repository/
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Root Certificate Authority - G2
OU = https://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

DB3C05E9C55D5259B057474D7F7F3E54A2A51AFAA71EC5C41D8C3CBE68108799

6/20/2022

6/20/2052

SHA2 Thumbprint

Valid From

Valid To

3A2FBE92891E57FE05D57087F48E730F17E5A5F53EF403D618E5B74D7A7E6ECB

1/1/2014

5/30/2031

9BF58967545996194512DB6177151AFE99706AEA3DA36FEEE7AD9F8B3C0507CB

5/3/2011

5/3/2031

9F43D52E808C20AFF69E02FAAC205AAC684E6975213D6620FAC64BDE5FCAB4BC

1/1/2014

5/30/2031

454040E4969070401CC35BDF7F2A4EBCE5797BB7694AE731D93A8115FD59929C

5/3/2011

5/3/2031

EB159C922A3FC2191475CA20A53816D87A38A1A79A7264789193D2F1F750E85E

1/1/2014

5/30/2031

7DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

Cross-Signed Certificates
Subject
CN = Starfield Services Root Certificate Authority- G2
OU = https://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Services Root Certificate Authority- G2
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

A24B9440F9FCBEBB48C274C03DE7D24C5ED1CA59D2D362F29ED3B457762C75BB

5/3/2011

5/30/2031

2D12B619A660CEFB013271831D891213FC434E982A21568256CF4E2E86324BEA

8/30/2009

6/28/2034

28689B30E4C306AAB53B027B29E36AD6DD1DCF4B953994482CA84BDC1ECAC996

9/2/2009

6/28/20348DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6Intermediate CAs
Subject
serialNumber = 07969287
CN = Go Daddy Secure Certification Authority
OU = http://certificates.godaddy.com/repository
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Secure Certificate Authority - G2
OU = http://certs.godaddy.com/repository/
O = GoDaddy.com, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Go Daddy Secure Code Signing Certificate
Authority - G2
OU = http://certs.godaddy.com/repository/
O = GoDaddy.com, LLC
L = Scottsdale
C = US
CN = Go Daddy Secure Extended Validation CodeSigning CA - G2
O = GoDaddy Inc.
L = Scottsdale
S = Arizona
C = US
serialNumber = 10688435
CN = Starfield Secure Certification Authority
OU =http://certificates.starfieldtech.com/repository
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

09ED6E991FC3273D8FEA317D339C02041861973549CFA6E1558F411F11211AA3

11/16/2006

11/16/2026

973A41276FFD01E027A2AAD49E34C37846D3E976FF6A620B6712E33832041AA6

5/3/2011

5/3/2031

EF356CC299AA637916C81A48891B5BA2F333A2064D93A89BA14F63A14AA6B251

4/1/2014

4/1/2034

9EFC910271094B886BD9A8FC9E394DBF2AE514778CB373544085AF815CABFE2D

5/1/2015

5/1/2035

05A6DB389391DF92E0BE93FDFA4DB1E3CF53903918B8D9D85A9C396CB55DF030

11/16/2006

11/16/2026

9DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6Intermediate CAs
Subject
CN = Starfield Secure Certificate Authority - G2
OU = http://certs.starfieldtech.com/repository/
O = Starfield Technologies, Inc.
L = Scottsdale
S = Arizona
C = US
CN = Starfield Secure Code Signing Certificate
Authority - G2
OU = http://certs.starfieldtech.com/repository/
O = Starfield Technologies, LLC
S = Arizona
C = US
CN = Starfield Secure Extended Validation CodeSigning CA - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

93A07898D89B2CCA166BA6F1F8A14138CE43828E491B831926BC8247D391CC72

5/3/2011

5/3/2031

26CFA206753E96AED7C30F5674E7C6F5A0CB2F93837AF6A1596C2F799C725385

4/1/2014

4/1/2034

F41A694B3825942DB89523E9775F997DB9FA2998398DC39A74B72670DACFD468

5/1/2015

5/1/203510

DocuSign Envelope ID: 96A165F3-5590-4BD8-A3F1-C8B98D4129E6

Timestamping CAs
Subject
CN = Starfield Timestamp Authority - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = US
CN = Starfield Timestamp Authority - G2
O = Starfield Technologies, LLC
L = Scottsdale
S = Arizona
C = USSHA2 Thumbprint

Valid From

Valid To

5E9223124187AC792056A8CFBDD23E643CD774DB8431A914D4FCFA1CD4B3A353

4/15/2019

4/15/2024

0EA223D9132909B625DDDC6C94FB85AFDED0A20DCFF55B7E65BFECF1411386AC

9/17/20199/17/202411