*.grow.jiffylube.com

- Shell Oil Company -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:95:aa:71:fd:16:07:59:06:90:fb:79:2c:44:15:7f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shell Oil Company

Organization: Shell Oil Company
State / Province: Texas
Locality: Houston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:95:aa:71:fd:16:07:59:06:90:fb:79:2c:44:15:7f
Serial Number (int): 11410933238942339747354300874087470463
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:66:b0:6f:95:a7:36:52:a8:e4:6a:7d:17:54:14:09:58:42:7a:bb
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 46:64:d6:ec:7d:26:68:b8:b7:79:e6:1d:08:9c:1a:47:7e:8f:52:04
Fingerprint (sha256): 69:7d:2a:5c:40:46:18:60:eb:0e:7e:0a:36:4f:7a:bd:fd:ff:46:c7:e6:44:0c:55:5b:e2:79:1c:96:63:31:76

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate *.grow.jiffylube.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grow.jiffylube.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grow.jiffylube.com
grow.jiffylube.com

Other certificates including the domain name jiffylube.com

(limited to 100 certificates)
*.grow.jiffylube.com
*.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com
offers.jiffylube.com
*.jiffylube.com
offers.jiffylube.com
*.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com
posnet.jiffylube.com
*.jiffylube.com
*.grow.jiffylube.com
offers.jiffylube.com
www.storenet.jiffylube.com
offers.jiffylube.com
offers.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
posnet.jiffylube.com
offers.jiffylube.com
*.jiffylube.com
offers.jiffylube.com
posnet.jiffylube.com
*.grow.jiffylube.com
*.grow.jiffylube.com
offers.jiffylube.com
*.grow.jiffylube.com
www.franchise.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com
www.franchise.jiffylube.com
offers.jiffylube.com
*.grow.jiffylube.com
offers.jiffylube.com
posnet.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com
offers.jiffylube.com
*.jiffylube.com
www.storenet.jiffylube.com
www.myglovebox.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
*.jiffylube.com
offers.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com
posnet.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
api.offers.jiffylube.com.sq1dev.co
api.offers.jiffylube.com.sq1dev.co
www.storenet.jiffylube.com
*.jiffylube.com
offers.jiffylube.com
offers.jiffylube.com
posnet.jiffylube.com
*.jiffylube.com
www.jiffylube.com
offers.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
*.jiffylube.com
*.grow.jiffylube.com
offers.jiffylube.com
offers.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
*.grow.jiffylube.com
offers.jiffylube.com
api.offers.jiffylube.com.sq1dev.co
offers.jiffylube.com

Certificate

The complete raw certificate details for *.grow.jiffylube.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRz0M7evEBPdVKhhTa+L
6mETZ/C6paAgfMOKY2dVn7YS07J2VNYkCy8MoGSXtxhM6A00RtRcpDNetJnXOI5y
H2Tj9xzLGLUXTQLZVMCt/N79TN0xYGOfS+1S7QeFbxB49iwgapC7sq70Ud2SsVvZ
htebDKr3XL0bcWU3VF8b1L20WCPAKW4SrcIQOjHS5k59OIcryNC2zOJMg2qmc8nb
4gOSmYKEQYlzeCswJ06nEdZm1eLIefGS2lNiQXWgYgmGL4/lrTkBvaqPZOr+ucK+
5U7FbZWvxAXHadp2Nbjq/gkWdbLZNNTA1ySuX+h8FOyvoKDPlzzYgvO4WKk4qrcI
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11410933238942339747354300874087470463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shell Oil Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grow.jiffylube.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21348551246467056207072491042222418328310858940345278198785820986855346989087007508337223622814404178364857307074352759859774849988456315514440164923248858507271450619263281311391091857097707307141978882532266589834798465461700792587979570543425171917914429181083701751295824570817897096518779070106452726132582704946769616546272621371917394462837144572008086269341988132006518022874140997282403816776642833077427173629086286608619173051897363329579886857081279031219557944459117538778547267022202150670024716222510321709503063524317525685776229437164374978933948701195079730562850523400335776904674990710460484356141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9066b06f95a73652a8e46a7d1754140958427abb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grow.jiffylube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grow.jiffylube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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