www.discoveryparts.com

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 02:71:f0 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.discoveryparts.com,OU=GT32194520+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:71:f0
Serial Number (int): 160240
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 7c:92:9f:dc:d6:d5:01:af:42:51:43:b5:73:b7:d1:bc:22:e7:e3:6d
Fingerprint (sha256): 0d:82:6e:62:4d:f5:43:84:f9:d4:42:b1:e9:70:bb:92:d3:79:6c:27:98:e4:dd:81:06:46:65:21:f9:15:0e:25

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.discoveryparts.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.discoveryparts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.discoveryparts.com
discoveryparts.com

Other certificates including the domain name discoveryparts.com

(limited to 100 certificates)
ssl391315.cloudflaressl.com
www.discoveryparts.com
ssl371660.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371660.cloudflaressl.com
discoveryparts.com
ssl371659.cloudflaressl.com
ssl371660.cloudflaressl.com
discoveryparts.com
ssl371658.cloudflaressl.com
discoveryparts.com
ssl371658.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371659.cloudflaressl.com
discoveryparts.com
sni.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl391314.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl371660.cloudflaressl.com
sni.cloudflaressl.com
ssl371660.cloudflaressl.com
discoveryparts.com
ssl391316.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl391314.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371659.cloudflaressl.com
discoveryparts.com
ssl391315.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl391314.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371659.cloudflaressl.com
www.discoveryparts.com
ssl371660.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371658.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl371660.cloudflaressl.com
sni.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl371658.cloudflaressl.com
discoveryparts.com
ssl371659.cloudflaressl.com
discoveryparts.com
ssl371660.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl391314.cloudflaressl.com
ssl371659.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl391316.cloudflaressl.com
ssl391315.cloudflaressl.com
ssl371660.cloudflaressl.com
ssl371659.cloudflaressl.com

Certificate

The complete raw certificate details for www.discoveryparts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eyJ76LMUbn2XRbHfGvj
0eoef50oyJ6iTKgOkjaUAhndqKNKaNdmydsrXFKRsofI0WImlXXwrep+rHG6/ylK
qrYZDMbEnUyjiSOyfwxb4PtUQY6uk9Sc8yT5NRovT+iN7LrgyS48GdorYNDxJHa8
BV1g2SWqQ1w7tkeN27qkLG8aJaCbb+5k2al9ZUf6Cfd0h/549Z4Pjbcmi8MLuMGa
NDozZRzgRP6d6NgWfRg35O8Y3/De53KjJBhr5v4PCViYSC8Vo8D4aqd0Byc6aclc
AxZ6nwSNkz5ev7T0FKEzlN2uhqn8zSXA4L26vIag7JT72YLaGVHaEDUytSOHhRsx
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-24 20:02:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-25 15:25:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT32194520'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.discoveryparts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28520260253250200604039398368255934879831512534122824229785156407987831121793405127313066995020489161272051616591399292037818869310130073409856154172004503357080763058886918849764562085834047900329246190432685870684407953225888881334646186827221315839054587067218334731215450026248497535910969098005125304479425692179055445512608655875254452007610155969377651090628048423544587908480819495562068568070055075587427173192860983900779117228160110648178781507964005485692358540095579923962248340962706289007906524019011031549896740061577627787517614550200578557885961645718041849004923062641762750483729196341433449787669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveryparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoveryparts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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