*.qa.teleflora.com

- Teleflora LLC -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:77:ae:4c:3b:36:8d:fb:02:8c:07:ca:07:a0:cd:ed was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Teleflora LLC

Organization: Teleflora LLC
Organization unit: IT
State / Province: California
Locality: Los Angeles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:77:ae:4c:3b:36:8d:fb:02:8c:07:ca:07:a0:cd:ed
Serial Number (int): 15242926458736673622189357057701891565
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:1a:b3:fb:56:32:74:a2:2e:19:1e:ca:d1:54:5c:55:c2:ee:b0:2d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 22:df:07:85:92:45:5a:e9:81:8c:61:23:48:33:cf:1f:d5:a8:5b:51
Fingerprint (sha256): 1b:d5:54:e9:a5:97:5c:d2:5a:b6:ad:f5:7e:5e:c9:8c:b5:ff:9b:16:cf:40:4b:38:10:18:83:4a:d4:52:ee:71

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.qa.teleflora.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.qa.teleflora.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.qa.teleflora.com

Other certificates including the domain name teleflora.com

(limited to 100 certificates)
stg.orderinterface.teleflora.com
san.cloudinary.com
www.teleflora.com
m-dfs.teleflora.com
autodiscover.teleflora.com
san.cloudinary.com
altiris.teleflora.com
s5-san.cloudinary.com
*.teleflora.com
san.cloudinary.com
m-mkconnections.teleflora.com
*.din15.teleflora.com
m-savings.teleflora.com
*.dev.teleflora.com
cloudinary-pin-sni.map.fastly.net
stg.mydoveapp.teleflora.com
m-savings.teleflora.com
m-frontierairlines.teleflora.com
s5-san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
s1-sni.cloudinary.com
s5-san.cloudinary.com
*.teleflora.com
m-employeeorder.teleflora.com
estgweb.teleflora.com
estgweb.teleflora.com
www.teleflora.com
san.cloudinary.com
webmail.teleflora.com
assets.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com
s5-cloudinary-pin.map.fastly.net
cloudinary-pin-sni.map.fastly.net
fr.teleflora.com
s5-san.cloudinary.com
blog.teleflora.com
s5-cloudinary-pin.map.fastly.net
m-amtrak.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
www.teleflora.com
s5-cloudinary-pin.map.fastly.net
assets.teleflora.com
homemade.teleflora.com
tws.teleflora.com
e.p.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
m-amtrak.teleflora.com
*.teleflora.com
twsstg.teleflora.com
s5-san.cloudinary.com
posimages.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
s5-san.cloudinary.com
assets.teleflora.com
cloudinary-pin-sni.map.fastly.net
posimages.teleflora.com
san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
m-perkopolis.teleflora.com
*.qa.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
fr.teleflora.com
s1-cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
m-unionplus.teleflora.com
m-savings.teleflora.com
www.aafes.teleflora.com
blog.teleflora.com
s5-san.cloudinary.com
san.cloudinary.com
m-gettington.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
cloudinary-pin-sni.map.fastly.net
*.teleflora.com
omnistats.teleflora.com
m-jcpenney.teleflora.com
dvm03.dev.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
san.cloudinary.com
estgweb.teleflora.com
san.cloudinary.com
stg.mobilesolutions.teleflora.com
fr.teleflora.com
m-hawaiianmiles.teleflora.com
san.cloudinary.com
m-perks.teleflora.com
www.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com

Certificate

The complete raw certificate details for *.qa.teleflora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxxxeizv8A5laXMs47kM
tMl0QMp8B5xTatjnOl20SZbHFdEJdwrQGgdk77PCQ8EoArmqWavivl0mnnHXxZz+
OnVqN4+MwBnT5y40v/q9HrIGCc2CZLAOh5T+kju0+NVirpOD5MllmxO8VEyYCmhh
vDHJ8f4RCV+qIaBFUr5G79tBqYBp0vKrcCCaK9LSbyZqlfBYfT9aPqDwxVxAJgy6
Kzk/whs2FMYT7RPVy5nvA2Tul36ASmWGxBFWV9sGVyeLcZjgtnBtiGPs/PW5oHwH
igUX0IgbgpkdCB3oOq64pw+SI1PplZZkHltcGwDghEKYJ4D8Ipq05KcGKm6j8e7i
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15242926458736673622189357057701891565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Teleflora LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qa.teleflora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25640401807546243542293507069780900914569388995161224480965983981006834129182927271659865666353594198347874875497269079467629143611455256822784295095269515697110244891231567585174581535406815233190453569961961938826116353547615963462703318125218311786847054465928364314753597067535441930656534070175638926226940977809348962927597495139262481265504966884589202623797069187085038764509499265990117782401258215872941960042829271721050496920156492481232701830826710322114012089474010102207224080116921426758443165660422227968664958484736785319369363801044489953072754716735028295274428630966771344545666832051004616139453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e21ab3fb563274a22e191ecad1545c55c2eeb02d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.teleflora.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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