*.overtureshops.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:19:ff:8b:72:c9:66:24:66:46:e1:97:fb:d7:95:9b was issued on by DigiCert Inc.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.overtureshops.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:19:ff:8b:72:c9:66:24:66:46:e1:97:fb:d7:95:9b
Serial Number (int): 1464218479936574784527845059414431131
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a4:0f:3c:10:2e:43:98:71:51:05:41:a2:97:95:80:95:c2:e1:ee:a4
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): f6:2f:ea:2e:17:d6:64:3a:63:ee:9a:ba:09:31:e9:4e:cb:4e:e8:82
Fingerprint (sha256): af:8c:99:1b:3f:5c:b6:e1:09:f6:1a:c3:89:48:8d:16:10:50:b0:9e:cf:bd:9f:79:fc:ee:08:80:c6:1a:68:1c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.overtureshops.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.overtureshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.overtureshops.com
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
shopdevrystore.com
www.shopdevrystore.com
brandstore.faro.com
www.responsiblysourcedcoffee.com
responsiblysourcedcoffee.com
shop.delivery.com
na.osf.store
springsip.com
www.springsip.com
*.doordashstore.com
*.doordashstore.ca
*.doordashaustraliastore.com
overtureshops.com
doordashstore.com
doordashstore.ca
doordashaustraliastore.com
invoices.bluesodapromo.com
*.tiktokswagshop.com
tiktokswagshop.com
overtureshop.com
www.overtureshop.com

Other certificates including the domain name overtureshops.com

(limited to 100 certificates)
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com

Certificate

The complete raw certificate details for *.overtureshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDpCDW77QkT+ylx6X5ua
UpS8twnSXab/HaWPhMRc+X3gfaoK1TqcShXj7VVJHveUqebPZQrmV+MsRJIL9iIF
BudqVRxs0NpzB+UNxppiIq/UGRUKuNZ4YlKv6sUx7RrLsXbWHjFgEOw2XYYP2+rt
Qj3Wrqj0g9OC/mzWiIoP1anMFmTs0OIT9cEyNB+rS3ROnI0OLDfr7KPaEkInk1qy
vL2/30aJ+GBy9GTvBCTICCE6ec3NGLHrILV/bezCUXTEiN9DQkpXzKUqcxvVgp8k
y9qoSzyuVJybPeo9wN8EgMBrfdbdR/e3WW0r+ExAoYlcgnswu0wcChggiKxEQLlv
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1464218479936574784527845059414431131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.overtureshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25276389092341669754787156070534999478211659416752342774473881143323818432934967985824671842894655134953703183440627816396783830613281237190616872897665380260505209267727975775404904120345622417675867756325816621142327984272868207005531825147488779885286417464949313168491119494556282720423492297157870908494444375385094641770636041404559614602318962928794200849221777571142006875465451010052400494239749686859305406631548413174920149150003289850588330086530007734108533372695493715080132224656905522456151083547994347668530924048331301460987407160767950150776427359119698958692659490465002690044269975683198420086577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a40f3c102e439871510541a297958095c2e1eea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (667 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowmarketplace.wowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunnyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.funfetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandstore.faro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.responsiblysourcedcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsiblysourcedcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.delivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.osf.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoices.bluesodapromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overtureshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overtureshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018689f7023e000004030047304502204ce0fd865a54e9290e0c4d300ec1a4f1acb3b3a8bbcc173a3ddebdcc99d5e69c0221009f317143e333a4f6b1ba26416d91a07dbbaadf34acea723f25de9d1ce100bbe400750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018689f702810000040300463044022040fccc2ae8a1f240c6de8ba39a4450b5bafab803b949188af79f794f379134240220703886820ec75d97cc5351d00eed2692e1f3064bdeb025121a2c5f52abf949e100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018689f701eb000004030046304402201d8259ea4540ad22a5d895fef1db368ddd0a630443f95fbf09fb15f43db5999b022063e412db607f14f06d74855622a4bb954c6462a0835a6925ead0e69e11befac5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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