fiveguys.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:ad:f7:b7:c5:bb:f3:73:6c:99:e2:86:d6:c3:88:90 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fiveguys.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ad:f7:b7:c5:bb:f3:73:6c:99:e2:86:d6:c3:88:90
Serial Number (int): 19512483612636955200686924189617326224
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:20:d9:9e:e3:64:5a:ac:bf:3a:04:21:0e:73:2e:1d:b4:b1:12:61
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b8:e9:82:3e:52:b3:27:58:9b:93:29:68:f4:76:c9:50:f9:a4:96:f5
Fingerprint (sha256): c5:52:00:bf:13:a7:38:3a:1d:e5:e0:b9:04:0e:98:82:45:12:30:47:e1:1e:5b:8d:77:63:65:f2:43:86:6a:9f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate fiveguys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fiveguys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fiveguys.com

Other certificates including the domain name fiveguys.com

(limited to 100 certificates)
fiveguys.com
*.fiveguys.com
order.fiveguys.com
perfection.fiveguys.com
order.fiveguys.com
perfection.fiveguys.com
order.fiveguys.com
curbside.cpk.com
flybuy.radiusnetworks.com
nl-stores.iqos.com.yext-cdn.com
perfection.fiveguys.com
fiveguys.com
order.fiveguys.com
medialibrary.fiveguys.com
fiveguys.com
locations.carrabbas.com
pickup.belk.com
order.fiveguys.com
medialibrary.fiveguys.com
*.fiveguys.com
fiveguys.com
webmail.fiveguys.com
pickup.elpolloloco.com
hris.fiveguys.com
medialibrary.fiveguys.com
fhf.shopthefastlane.com
fhf.shopthefastlane.com
flybuy.fiveguys.com
order.fiveguys.com
*.fiveguys.com
www.fiveguys.com
fiveguys.com
fiveguys.com
www.fiveguys.com
pickup.belk.com
order.fiveguys.com
order.fiveguys.com
medialibrary.fiveguys.com
fiveguys.com
local.pharmacy.luckylowprices.com
*.fiveguys.com
punchh.flyb.uy
order.fiveguys.com
flybuy.fiveguys.com
fhf.shopthefastlane.com
order.fiveguys.com
fhf.shopthefastlane.com
order.fiveguys.com
locations.carrabbas.com
nl-stores.iqos.com.yext-cdn.com
www.fiveguys.com
flybuy.fiveguys.com
restaurants.fiveguys.com
webmail.fiveguys.com
order.fiveguys.com
*.fiveguys.com
flyb.uy
fiveguys.com
local.pharmacy.luckylowprices.com
*.fiveguys.com
dw.shopthefastlane.com
order.fiveguys.com
webmail.fiveguys.com
fhf.shopthefastlane.com
pickup.shop.gianteagle.com
pickup.belk.com
perfection.fiveguys.com
medialibrary.fiveguys.com
www.fiveguys.com
flybuy.radiusnetworks.com
demo-flybuy.radiusnetworks.com
perfection.fiveguys.com

Certificate

The complete raw certificate details for fiveguys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2US2RIxRe+7PWWrIUFS8
RvAQFd8wR+VA96Y0pyhqULRDScbE3pKDp7aRgbsofPNnxzXZsvxrK4bw8qvO+UqE
F69EoLE6Ys+SdsnRrl7cNeIJ36GF1iCjO41xZhp7ud6XvgZ8iKBD2MeAb73YH1IV
oyxK4Q/712lDI+ol1RzOeZa0Cli09OS2wMA22CO9VGjIhPa87s3JjSQmFdaAIK17
OrdPCMq9ILxfiGYkZzvHupV/yMVkWVcD2J2VBe3R/IhyHeiWHZtduZH1crCze1tU
abQ0zETi53tQunLhZAWBwCQVWPpSy7hAjmuu2ESq2uoVpPHcetoK/GCUMM2TZapo
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19512483612636955200686924189617326224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fiveguys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27427595319521469679625103802408807787093672130550559598924135852359449652567950427500106427720710021048319469172318781942778760864085530444786899874838199369210782860917416528634099915163106727411977656923019421994546288327011625055973117827928657312022507889244027952120120856192031027480358068725351929668865404180236169333762725494527772879503742876342305987334831576283295223788728076587736103644501497074567810636591896097025272097430813925930777041826889606804149019847141897696012030773685885608858734962315443050407166442134815537813004333706705751943883524621277629859855402996471239307079001788817856948257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9420d99ee3645aacbf3a04210e732e1db4b11261
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiveguys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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