*.oldsecond.com

- *.oldsecond.com -

Issued by Go Daddy Secure Certification Authority

About this certificate

This digital certificate with serial number 44:2d:0d was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • RawSubject attr oid 2.5.4.10 encoded PrintableString contained illegal characters PrintableString type's alphabet only includes a-z, A-Z, 0-9, and 11 special characters (RFC 5280: Appendix B. ASN.1 Notes)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

*.oldsecond.com

Organization: *.oldsecond.com
Organization unit: Domain Control Validated

GoDaddy.com, Inc.

Company registration number: 07969287
Organization: GoDaddy.com, Inc.
Organization unit: http://certificates.godaddy.com/repository
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:2d:0d
Serial Number (int): 4467981
Serial Number lenght: 23 bits, 3 octets

SubjectKeyId: e5:93:50:eb:54:fb:d3:12:d1:a6:8a:1a:09:10:9e:8e:12:5d:c6:ba
AuthorityKeyId: fd:ac:61:32:93:6c:45:d6:e2:ee:85:5f:9a:ba:e7:76:99:68:cc:e7

Fingerprint (sha1): a3:fc:70:e0:f8:e6:46:e0:20:e1:4c:4b:6c:ac:03:3c:91:64:c5:87
Fingerprint (sha256): fc:50:5c:f3:9e:30:e4:cf:40:a0:32:47:99:53:a5:70:44:6a:b3:63:f3:8e:5d:b1:e3:f8:6e:3d:80:b2:88:a5

Issuing Certificate URL: http://certificates.godaddy.com/repository/gd_intermediate.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com
CRL Distribution Point: http://certificates.godaddy.com/repository/godaddyextendedissuing3.crl

Check the revocation status for certificate *.oldsecond.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oldsecond.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.oldsecond.com
oldsecond.com

Other certificates including the domain name oldsecond.com

(limited to 100 certificates)
investors.oldsecond.com
o2vpn2.oldsecond.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
o2vpn2.oldsecond.com
o2vpn1.oldsecond.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
sip.oldsecond.com
www.oldsecond.com
stores.footlocker.co.uk
www.oldsecond.com
answers-embed.techem.de.pagescdn.com
onlinebanking.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
akamai-san145.exacttarget.com
mail2.oldsecond.com
*.oldsecond.com
sip.oldsecond.com
ens.oldsecond.com
akamai-san145.exacttarget.com
store.iwc.com
digital.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
local.oldsecond.com
o2vpn2.oldsecond.com
investors.oldsecond.com
locations.wauchulastatebank.com
www.oldsecond.com
o2vpn1.oldsecond.com
digital.oldsecond.com
local.oldsecond.com
answers-embed.techem.de.pagescdn.com
local.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
locations.wauchulastatebank.com
answers-embed.westmichiganderm.com.pagescdn.com
sip.oldsecond.com
oos1.oldsecond.com
o2vpn1.oldsecond.com
*.oldsecond.com
o2vpn1.oldsecond.com
lmweb.oldsecond.com
answers.waltoncommunities.com
webmail.oldsecond.com
oos2.oldsecond.com
mail.oldsecond.com
o2vpn1.oldsecond.com
webmail.oldsecond.com
o2WC.oldsecond.com
www.oldsecond.com
o2vpn2.oldsecond.com
mail.oldsecond.com
digital.oldsecond.com
akamai-san145.exacttarget.com
*.oldsecond.com
answers.lafamiliainsurance.com
sip.oldsecond.com
local.oldsecond.com
onlinebanking.oldsecond.com
www.oldsecond.com
mail2.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
answers-embed.westmichiganderm.com.pagescdn.com
answers.waltoncommunities.com
myloan.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
local.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
synergichealthcareers.yext-cdn.com
local.oldsecond.com
webmail.oldsecond.com
O2View.OldSecond.com
store.iwc.com
webmail.oldsecond.com
stores.footlocker.co.uk
o2vpn2.oldsecond.com
o2AE.oldsecond.com
synergichealthcareers.yext-cdn.com
seg.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
*.oldsecond.com

Certificate

The complete raw certificate details for *.oldsecond.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCU1qRq/ybxLW6KH1DdkGO2Q8J6
UzBDQ9lqtboKg5Eaw0z8JA9kRgwlSV9CX2+gospTOv+nW+G6f74razYaYzjyDAJM
NQ5BMqB4tI8boXfQv7Gan40rBJ01zIzGcIrWux613i7DyJf7pQrH4RBISP6wHMvM
enzJOetLxoYNw3xCZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4467981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.godaddy.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07969287'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-04-04 16:49:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-06 23:07:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '*.oldsecond.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '*.oldsecond.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 104517911387136852051614104396290592238629592145612386855932606169519838863465732260999356230741705864953502817411518741928391759178091775140254500600446976996727400538005104368823455551130784980901230396744123381032324057817646640372537462929755406909641414875444080766903579546260245044127111092431157477991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/godaddyextendedissuing3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gd_intermediate.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e59350eb54fbd312d1a68a1a09109e8e125dc6ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdac6132936c45d6e2ee855f9abae7769968cce7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldsecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsecond.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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