qa.ftd.com

- Florists' Transworld Delivery, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9f:2e:ec:d7:00:00:00:00:50:d7:69:5c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Florists' Transworld Delivery, Inc.

Organization: Florists' Transworld Delivery, Inc.
State / Province: Illinois
Locality: Downers Grove
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:2e:ec:d7:00:00:00:00:50:d7:69:5c
Serial Number (int): 49264845593836071954456996188
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: c4:55:6b:55:cf:e3:69:a3:23:a5:b7:f2:e3:ee:bd:36:da:df:46:fe
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): db:94:c9:3c:4c:9c:0a:d7:b1:15:4b:f7:ab:2b:e0:c9:65:05:27:34
Fingerprint (sha256): 1e:95:f0:ec:c7:6a:e2:24:63:31:c0:0a:10:62:7b:36:22:d9:4b:d8:a5:f8:d6:ac:19:39:e1:f3:b2:3e:02:22

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate qa.ftd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.ftd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.ftd.com

Other certificates including the domain name ftd.com

(limited to 100 certificates)
testreminders.ftd.com
ftd-proxy.dca.ftd.com
d.eml.ftd.com
www.ftd.com
ordering.ftd.com
www.ftd.com
www.ftd.com
incapsula.com
e.eml.ftd.com
mobile.ftd.com
www.ftd.com
status.igdn.macrometa.io
se.eml.ftd.com
gcp-wildcard-san.gcp.ftdi.com
webcentral.florists.ftd.com
www.skava.com
www.ftd.com
mobile.ftd.com
gcp-wildcard-san.gcp.ftdi.com
reminders.ftd.com
www.ftd.com
pr.ftd.com
partner.ftdi.com
qa.ftd.com
d.eml.ftd.com
ordering.ftd.com
smetrics.ftd.com
t.ftd.com
www.ftd.com
qa.ftd.com
gcp-origin.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
sli-feed.ftd.com
partnergateway-qa01.ftdi.com
gcp-origin.ftd.com
www.ftd.com
giftsenses.com
m.ftd.com
gcp-origin.ftd.com
flowers.ftd.com
www.ftd.com
smetrics.ftd.com
giftsenses.com
mobile.ftd.com
www.ftd.com
testreminders.ftd.com
www.ftd.com
www.ftd.com
gcp-wildcard-san.gcp.ftdi.com
gcp-nonprod1-dev1-proxy.ftdi.com
testreminders.ftd.com
*.ftd.com
www.ftd.com
mobile.ftd.com
incapsula.com
gcp-wildcard-san.gcp.ftdi.com
gcp-wildcard-san.gcp.ftdi.com
www.ftd.com
incapsula.com
smetrics.ftd.com
ordering.ftd.com
d.eml.ftd.com
*.ftd.com
e.eml.ftd.com
incapsula.com
ordering.qa01.ftd.com
m.ftd.com
jccas.prod.ftd.com
tstage.ftd.com
ordering.ftd.com
c55.ftdfloristsonline.com
incapsula.com
qa01.ftd.com
mi.ftd.com
*.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
giftsenses.com
testreminders.ftd.com
d.eml.ftd.com
ordering.florists.ftd.com
reminders.ftd.com
gcp-origin.ftd.com
mobile.ftd.com
testreminders.ftd.com
*.ftd.com
ordering.ftd.com
smetrics.ftd.com
se.eml.ftd.com
www.ftd.com
tpreprod.ftd.com
gcp-origin.ftd.com
www.ftd.com
reminders.ftd.com
www.ftd.com
testreminders.ftd.com
gcp-prod1-front-end.proflowers.com
mpreprod.ftd.com
www.ftd.com

Certificate

The complete raw certificate details for qa.ftd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmc9dOUrs0R2tLruWVLv
j4niQezbi+tOf26TR0CUSsHl1nax3d4ra8b+6TY7frY4vKOjR+437SNT01zhH55v
f3dvybIbQKFDqQFKFmU1qsZrHO4wGTtkZyz8F262BfAs9+inWQ6dnFVVWm2X7pWF
7VO5z/nQfCEUhHzDTd5OSnRejUPaxhA+MStSzUz2ykzrR0k2X1sCc6I5udMBBYuf
otDCm/NR9uAphMqSPFpT3cIWo0cynav2eupyycqQEzvUjg2C5caVsXXtaVvhAa6u
1p5f/SrtP0YvKmZ/KZzjmzwDyL6n+rQsN524ICfm7BmtedUUnt+D2qj0HSLT0xHT
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49264845593836071954456996188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 18:10:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 18:40:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florists' Transworld Delivery, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.ftd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22521327857400794972384379947065366770563584965185521579445572653218937556036021230479032790888356612838903273321525774613818932470815670219348124998674872391989565666297936700226428201329387361926168210273010304706847538392540157211732630795696574835647280739064437949580381112107562557210707983945712540474700292267272869082341611439148701371005874628998789553958395703458303220446055857081212622386962275909318325939356404497924566710210499864823903443463681325156426904456263007041619212767514788929377551441187374331718468930328004003714029958927689280761550240209629865734824630637309891896106766652438394032911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.ftd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4556b55cfe369a323a5b7f2e3eebd36dadf46fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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