*.overtureshops.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:a0:4b:5a:e8:a5:bd:40:5a:f2:b0:17:54:c7:9d:52 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.overtureshops.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a0:4b:5a:e8:a5:bd:40:5a:f2:b0:17:54:c7:9d:52
Serial Number (int): 12795347842685604188970169278363311442
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4a:7f:57:6d:a5:e5:0a:ed:e6:17:8f:e0:8e:f8:36:16:a2:e8:8e:3d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): d4:8a:15:c1:79:51:91:92:ed:cb:fe:a5:81:f2:6d:4f:e5:1f:ad:a8
Fingerprint (sha256): aa:3b:03:73:07:87:e8:db:4e:68:da:fd:5a:61:6e:8c:c2:b7:68:6c:35:48:ba:a8:8b:d2:18:ea:41:b6:50:05

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.overtureshops.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.overtureshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.overtureshops.com
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
www.mccafefamilygames.com
mccafefamilygames.com
shopdevrystore.com
www.shopdevrystore.com
brandstore.faro.com
www.responsiblysourcedcoffee.com
responsiblysourcedcoffee.com
shop.delivery.com

Other certificates including the domain name overtureshops.com

(limited to 100 certificates)
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com

Certificate

The complete raw certificate details for *.overtureshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnzX60ycAlxW/y/C/zxN
HDx1hIQFTRaQsRYF903fF9lYdSW/uAztuLF9JNwQmadxmp8IiKo82FzLOL4ijPvC
AdzYyGpQXkOtzaylPhMKRNn0FSXbh3hs1N7dtC5X+XMFhu+PAT3q917g9pSnu/Eq
zPS1hFs8cFUSzA9drEPpZa8MWqRFyAgulevUMuhbFIQnlDOFhPEI/4YvTqxYBJF7
wwbBgxWhiMbRqBygwPlNHgpIzUw8fLNz9aaJ4ovs9L7HuNb2zYgUwhZEXOUq17VQ
ImIOSg6QXUFEMi434NVgxyKsyGIVbGVsboxsiNUecfoR+V+qV3aWQfK4f6Jc3PAi
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12795347842685604188970169278363311442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.overtureshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24551793755254936809121382352845679015245713825499809232966405810455313210000270169399628679194087825070080703474028819827455755897817809192068771281264622251559513128237097278505986289265465365134101747659511536252099073174417244210027929474605594799635101595155484769865308944701355466701686746539616283217428372037531452974390272587812921590137330015961622485278490648551965605895475745166877899204460410358037691952340087571139521995104988660446394512337291154898641908525331312748951931166938074346896721888456166803694621937938321930596193717290299814038104666566548486301576276142443498641397163697969831092959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a7f576da5e50aede6178fe08ef83616a2e88e3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (404 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowmarketplace.wowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunnyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.funfetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafefamilygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccafefamilygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandstore.faro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.responsiblysourcedcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsiblysourcedcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.delivery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000180ae7c39f7000004030046304402201f690820e15275c0e4e1adb1f8b17fdb17b48399d2fe6de16ff066a7a4f276fa02204cb3ae7c9f8a8a0808fd7627480941059698ca937dd173955a9d3dd66c6145f700750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180ae7c39dc000004030046304402200307e119144a7a2bfde67b8a202c55c981c066d738811f1fe0ed9b6b39fc81700220540f003ffff18584f0cf11933c3f35e99340939ed0059551f1cb48b2ef37b5da007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000180ae7c39f9000004030046304402205f395448468a9c1ae93f5adf98bf056f57cdbd8e6868d74fd0527e154b6a3e5c02206087b1676a447f179a7bfaac69b7919ea87914bb44608c27e39a72b2ae6710b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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