www.barstowflowershop.com

Issued by RapidSSL SHA256 CA - G4

About this certificate

This digital certificate with serial number 08:6d was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.barstowflowershop.com,OU=GT81425888+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:6d
Serial Number (int): 2157
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: f3:b5:56:0c:c4:09:b0:b4:cf:1f:aa:f9:dd:23:56:f0:77:e8:a1:f9

Fingerprint (sha1): ed:05:ea:3a:f0:ca:7a:8f:b4:bf:9d:73:5d:5d:7a:67:f6:53:db:4a
Fingerprint (sha256): e8:a4:4e:b3:bd:d1:b8:cc:d6:b3:e6:a6:33:06:9d:8f:20:48:70:48:3f:b7:f5:1d:a7:7d:85:67:20:c9:bf:40

Issuing Certificate URL: http://gz.symcb.com/gz.crt

Revocation information

OCSP Server: http://gz.symcd.com
CRL Distribution Point: http://gz.symcb.com/gz.crl

Check the revocation status for certificate www.barstowflowershop.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.barstowflowershop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.barstowflowershop.com
barstowflowershop.com

Other certificates including the domain name barstowflowershop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.barstowflowershop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMCVVMx
FjAUBgNVBAoTDUdlb1RydXN0IEluYy4xIDAeBgNVBAMTF1JhcGlkU1NMIFNIQTI1
NiBDQSAtIEc0MB4XDTE1MDgxNjIwMDkyNFoXDTE3MTAxNzA0MjcxOFowgZ0xEzAR
BgNVBAsTCkdUODE0MjU4ODgxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29t
L3Jlc291cmNlcy9jcHMgKGMpMTUxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZh
bGlkYXRlZCAtIFJhcGlkU1NMKFIpMSIwIAYDVQQDExl3d3cuYmFyc3Rvd2Zsb3dl
cnNob3AuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxIX4Wruc
7kqjETiXcf55ZnVKE4WHlqTz4iTDLPQ7nbwZjQkGFLmsT0wshKQriAj2pdRj/+DQ
345UqDeKzRMnANbW/7kezoOEl70Xi6ySqH1xFAKb/wrfj8o+wp0qnxbE2saBBcZA
+4TvezodBlwXK3kR91a2rCrnAv9LvwJJ1fV9TiIAvdIK1DbdFJGt5s2be5H/6u5m
4IzWwpDfop3yoRJY4w/xX5fs8Igjv1Y42kOc4ZNWfqGjfSVHXXnSlKv9KowAP/xo
PVxoshVudyjxVFScBs/XwkOF45nvbQALYibGDvBw7sQX9vKUUc3SZwK3sol16oIS
On4IGYTxDLy84pJOgols7F2YJqcFYkWj6F8ES5JaxTZRG9Imfv3/sbBamUSL54ZL
LRUxQwATMRrfSaOGqxfcCgvTwaTiFyFcxatXqzvhgGSVaY1pXQJHiS2GsG94DibD
H5kCxIfv6BhYS0eUcKBlKae0qbmBUJ+/2QLyaS0JkSaCCScvjJ0K5PWl/A63QnMK
igTPHcFN422fGnY4Rm8jGjELhUk4v2BPEf1d7orPD3s4ab3HbEFqQ1i4vVWWXG+K
v68osMftNjCj5IRAtxU9EhY3mGDSYfBAZ06qsH5c5lCJFrEdFAC0IRdr3uIsmxmb
ogi2r6mZ9hTpYqZvBVrmABfI5qtnmaPw2HUCAwEAAaOCAWgwggFkMB8GA1UdIwQY
MBaAFPO1VgzECbC0zx+q+d0jVvB36KH5MFcGCCsGAQUFBwEBBEswSTAfBggrBgEF
BQcwAYYTaHR0cDovL2d6LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2d6
LnN5bWNiLmNvbS9nei5jcnQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjA7BgNVHREENDAyghl3d3cuYmFyc3Rvd2Zsb3dlcnNo
b3AuY29tghViYXJzdG93Zmxvd2Vyc2hvcC5jb20wKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL2d6LnN5bWNiLmNvbS9nei5jcmwwDAYDVR0TAQH/BAIwADBBBgNVHSAE
OjA4MDYGBmeBDAECATAsMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNz
bC5jb20vbGVnYWwwDQYJKoZIhvcNAQELBQADggEBAJ6RRhkctBpHfTQV11Sj71h+
sn6glgr9nPLTPEymHi8+knPY+wWIg8ZLBGSMNpZlhXQ6EHc7F2digxhY5OhmXbhC
dS7/MFeI7coRFbSF1MxV0JS9gaI9R6nTUQPWAF+lCca9IZIyjbIWKUFdlmDzpuc5
EhAJb2O6GQxF10xJPgDc7YfeNVt1Re0pZKL0Yzr6xAUM18TgHVAESecfyLixwkRA
MoHUVf4gZihM1v0iISxn+CUHEWareEcGhzW3mPylWGBlAkglmw3T3DBCal4ztCyz
AIXY2YWYi24mL29Mifw3d6DqnsunOMV6vyk9BswAi+7FCzIaBb6SRgqaImP0rgg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxIX4Wruc7kqjETiXcf55
ZnVKE4WHlqTz4iTDLPQ7nbwZjQkGFLmsT0wshKQriAj2pdRj/+DQ345UqDeKzRMn
ANbW/7kezoOEl70Xi6ySqH1xFAKb/wrfj8o+wp0qnxbE2saBBcZA+4TvezodBlwX
K3kR91a2rCrnAv9LvwJJ1fV9TiIAvdIK1DbdFJGt5s2be5H/6u5m4IzWwpDfop3y
oRJY4w/xX5fs8Igjv1Y42kOc4ZNWfqGjfSVHXXnSlKv9KowAP/xoPVxoshVudyjx
VFScBs/XwkOF45nvbQALYibGDvBw7sQX9vKUUc3SZwK3sol16oISOn4IGYTxDLy8
4pJOgols7F2YJqcFYkWj6F8ES5JaxTZRG9Imfv3/sbBamUSL54ZLLRUxQwATMRrf
SaOGqxfcCgvTwaTiFyFcxatXqzvhgGSVaY1pXQJHiS2GsG94DibDH5kCxIfv6BhY
S0eUcKBlKae0qbmBUJ+/2QLyaS0JkSaCCScvjJ0K5PWl/A63QnMKigTPHcFN422f
GnY4Rm8jGjELhUk4v2BPEf1d7orPD3s4ab3HbEFqQ1i4vVWWXG+Kv68osMftNjCj
5IRAtxU9EhY3mGDSYfBAZ06qsH5c5lCJFrEdFAC0IRdr3uIsmxmbogi2r6mZ9hTp
YqZvBVrmABfI5qtnmaPw2HUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-16 20:09:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-17 04:27:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT81425888'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.barstowflowershop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801745200083496344038303826629297360141548921452783512107600555477495993481401448709515062900317793871435289184066824718158083778161282032446016765608107650790510885842446808614348623248656240973342563589880257744730293781848648307921016105284587283544109888741386256212795714543673153256406332937160782345034400883534780314830539812685407819131154429059914309068734585845341823261676676425699115861426337431737322400730712372302300871354057882940704250824029859870232934211882781788852085167866004444495222327321677580303343375864620984437297490858540421028598373383046914973347420880630338869256183406883883660239606710876064580668309096021382431874508135298215221729277031158780563629898447881360024886308687178591481835486077672163624977579974891159474083916838175079606381401324762327769448555646668102690527153040824223851071409762750106113365481612464505464748465110847727961744066722911272846269713100319523245498066583092779117110394114350777995855563529629065737055995424473739828183889510437527841899770315920899052098238169753829667351626207420716018307268197518560434494347709150018786694064359402792201058572586545894828925228399834713525635664139451098274848448599720170228144378039460105883092753931676100994519849077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f3b5560cc409b0b4cf1faaf9dd2356f077e8a1f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barstowflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barstowflowershop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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