www.toocoolgift.com

Issued by Volusion, Inc. DV SSL CA

About this certificate

This digital certificate with serial number fc:6b was issued on by Volusion, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=-MfJ5dDfOgeAQBILKdXSBx3hOfekw/d9,CN=www.toocoolgift.com,OU=GT10483330+OU=Volusion SSL+OU=Domain Control Validated

Volusion, Inc.

Organization: Volusion, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:6b
Serial Number (int): 64619
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: 43:c1:b5:9d:66:23:d3:67:24:d8:e0:f7:56:28:f3:b4:bc:3d:f2:3d
AuthorityKeyId: c7:e5:d4:87:70:85:b8:15:ef:e7:c1:2f:50:9f:97:db:23:61:7e:0b

Fingerprint (sha1): 53:e3:99:b1:d8:c5:c9:cb:d9:c4:12:6c:96:09:94:3b:17:a5:b5:8e
Fingerprint (sha256): 03:8d:c8:ce:16:51:c1:5a:93:22:33:32:2c:b9:81:d1:bf:8e:5a:70:2a:15:2a:f8:2e:67:64:e0:be:8a:4c:89

Issuing Certificate URL: http://volusion-aia.digitalcertvalidation.com/volusion.crt

Revocation information

OCSP Server: http://volusion-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://volusion-crl.digitalcertvalidation.com/crls/volusion.crl

Check the revocation status for certificate www.toocoolgift.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.toocoolgift.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.toocoolgift.com
toocoolgift.com

Other certificates including the domain name toocoolgift.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.toocoolgift.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfqiDwQKsG+15OYZRe/u
SFAUo7g6Kzj3RwUco+otv6as78jrYeE/QGd1DMtLR0t92MXe/7JqaYFIabMT2jxd
hNVUtT0illgzWHtCWGeZ5baW7YCxiSP7JhaIk71wZR4BhZ+f6cM/JvxkClZpBfWn
HfB0jlMss4E58b4DxFTvFwKTXRkiUZJ8PFxZ/STdcJms2WJJLdEVPQWmYPEGyUyq
kd6Nb4VaUL5xGuDejagXtBMrlnd3eri7PAOJ2w9rAvZpDXu5SbSDA3gu73k7OG2g
Zty3ut6McypmHm586s5CfcVvulNEuur1Hhqq4fq3XKq5ATM9guUzWy1Jp3ecmCqw
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volusion, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volusion, Inc. DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-10 06:09:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-13 05:39:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '-MfJ5dDfOgeAQBILKdXSBx3hOfekw/d9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT10483330'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volusion SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.toocoolgift.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23982631397737199654691238565276948955297775740334283272209638498009757219339803020534327083458919326019716100380760513959185771159551419805128898870451278149372519214127938678654473826805578167858657045819115956927581282125622928408557810653521066928194143470293210802254049577139333356909959183162646148868769411622924028787657257410141832944292556094754116634594654935933196322958559952329231016577054454161876404216683593757977439408751488013369713562453631634155687793981915676135452911230615238772257943125528113341353956721165102699771637189942566913175316181277358009033196589485481527696280525087156659204301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7e5d4877085b815efe7c12f509f97db23617e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://volusion-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://volusion-aia.digitalcertvalidation.com/volusion.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toocoolgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toocoolgift.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://volusion-crl.digitalcertvalidation.com/crls/volusion.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43c1b59d6623d36724d8e0f75628f3b4bc3df23d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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