shop.flints.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:f1:cc:d6:5a:1a:ea:f9:8c:da:36:94:73:25:04:8c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.flints.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f1:cc:d6:5a:1a:ea:f9:8c:da:36:94:73:25:04:8c
Serial Number (int): 17206234086597999519033051712252609676
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:aa:24:f5:3b:de:ba:0d:6e:44:fe:5d:0e:c0:bf:34:7a:b8:ff:78
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 5a:4b:82:bb:1c:88:1f:40:70:4c:d7:38:a9:be:4b:aa:9b:cb:29:a9
Fingerprint (sha256): 59:e8:cf:25:a5:44:99:0f:70:80:c7:09:30:6c:43:1e:cb:dd:b8:f7:30:61:cd:7f:3e:99:14:fb:29:82:5a:3d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate shop.flints.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.flints.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.flints.co.uk

Other certificates including the domain name flints.co.uk

(limited to 100 certificates)
flints.myzen.co.uk
flints.co.uk
shop.flints.co.uk
shop.flints.co.uk
flints.myzen.co.uk
shop.flints.co.uk
shop.flints.co.uk
flints.myzen.co.uk
shop.flints.co.uk
flints.myzen.co.uk
shop.flints.co.uk
flints.myzen.co.uk
flints.co.uk
shop.flints.co.uk
shop.flints.co.uk
shop.flints.co.uk
shop.flints.co.uk
flints.myzen.co.uk
shop.flints.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
shop.flints.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
shop.flints.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
flints.co.uk
shop.flints.co.uk
shop.flints.co.uk
flints.co.uk
shop.flints.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
flints.myzen.co.uk
mail.flints.co.uk
flints.myzen.co.uk
flints.myzen.co.uk

Certificate

The complete raw certificate details for shop.flints.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkTH1zP2ekEqALXQmWDS
w9EX5YTYGTKzynZyIqsksS19lx7JWxnrS2KPogmBWCY4vvcdeoiMG2iyYKoTL7cY
qdOx/zbG2dW5iOSAF4g9UXQ9tRRogJNRg8w+hTJ6bRvK6KhlR0bwvuSoGUxVxY6J
MQ9+BaRRmpk2IiV+vzXf/BQqN+WSpWFG8eUJBLys29DOuZFiapV2/GkuYphX309e
zG6ezhs2nJySWbMvFNpvt9M/Z5tDv1SRPQHEIJtJQALv7yeVz+H4tRyUjHV4w6in
HEPb/1xOe7RVWuXaHGIhleVsBuQofNwHpdgrt4qtL0cXzitpnSgBNo6EWkuGi0aR
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17206234086597999519033051712252609676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.flints.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26039007814525438409877107020076892017946884072727454720283736084618735685915448608906722094769707550459446613293139748685803571150919691781417659163020577894002844271524683703681442440033272154227941542624116521410747633978755809485436226520604443892505560368108697365923451517318213248754719183297895437409604044678705246273589271096036283573033285071654231265242863359629262050968324518685053418008084285354381430221665185111227333007408953959128107297492439729008837935783552766264471976233357258142235992583250559984629362931343322610301249290993422021423048358473661098385674374748888765265716568515874805682493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8aa24f53bdeba0d6e44fe5d0ec0bf347ab8ff78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.flints.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004f2cac844e907e7eafaf278332b7dce352013e89cb7fb3f53632941f28bda5d1bcbb3b83ba6373cbeefb02b4b73683cc6d27a256555c041f13d099f5a7191cc6b00dc104abe0f3f9c6b8aeeaf763dfd88b4b000971233b387581c2880e3c17a06acf3ea488f4d6dbf90437dfeaf2c73023192c32f806eadacd82480b871910d65687fce92276b1ffe03da9e95210572b188059644b1a857f6ede464d500593492a9a283006070bd683817e4db53aa94ffac4fe1d4316b0d681e74ce699e7b8568c4176435d437365a4e39f129a0c16a7c4a936431182626b8e85dbb5bedce067287a6e128e5841f5cc32e7e140a1dd3884444576e0ea41403ff0a5c2c047d95f05e71bb1b14078fe2d030c5924061eed012da4142b45c214815db669051352556e8948d9c203779e7ab83b922bc5be371e2d6f1aadc44e86577db79e628e958c5f8a802e6416d6be799b57d3b74c103fcd837dfd62b0b48748e64b74c3902ccf5f03c3f80678832853f6cea23b25de6b301ff583db484fa363e36e04b42aa0ba745d84f6cce041f86e988ad53113fe4bc71cb036f546b5836eeaac2955f6a6096ff981c1cc1a03c3fda451bdd13b25300497b77fc6c1b2d9d8038b0783e04682c167a714fb28484659e53524ea8965002c7aed2099e29d2e46040d0eefd82f34bcb0fcb794d152d4c6ece74fd6b3b6399ce8fc585901bb9bbac1a8c913835cbb