DV SSL/TLS Certificate for devinberry.org

Certificate is witin its validity period

Issued by Google Trust Services (WR1)

About the devinberry.org DV SSL/TLS Certificate

This certificate with serial number 8e:9d:96:44:5b:08:fd:9c:0d:35:35:81:ad:15:19:ae for devinberry.org was issued on by Google Trust Services.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for devinberry.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Google Trust Services

Organization: Google Trust Services
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 8e:9d:96:44:5b:08:fd:9c:0d:35:35:81:ad:15:19:ae
Serial Number (int): 189568613785377625548221724465789475246
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 4f:1b:ed:0b:a1:68:67:e2:cf:2d:2e:57:fe:ed:e2:d2:d0:03:da:98
Authority Key Identifier: 66:69:49:d4:de:2a:9c:91:03:cf:89:0e:24:b8:0e:30:03:6e:88:2e

Fingerprint (SHA-1): 8f:89:a2:80:48:b2:d3:35:3e:f4:c0:3d:a7:aa:f4:90:d1:cd:e9:b6
Fingerprint (SHA-256): 90:22:3b:9d:6f:08:bf:e1:c9:a0:72:fb:ad:25:6f:73:16:7e:fd:2e:5b:07:27:b6:d7:d2:8a:8a:e8:5a:0f:27

Issuing Certificate URL: http://i.pki.goog/wr1.crt

Revocation Information

OCSP Server: http://o.pki.goog/s/wr1/jp0
CRL Distribution Point: http://c.pki.goog/wr1/ehmxk4X0Mqk.crl

Check the revocation status for certificate devinberry.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for devinberry.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for devinberry.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7R3gR+J01k3NEvXMVGi
/Y7HpLUdbaqBQbSXOWOY3Yd5ZxJA9NdDL1X9dmlANFWclY0vB3zDjBJ6HSJW7H3z
Y4dW/vIwsxWuaerPl6tUOywR8Wnwn9N038M4cDoafPScbQ6Di4wM+ffvsCdgO0ON
zNAadipWseJPk63QAFcvgbLuKH7Ywmg7rIKvVpCiyjk9YuMwLCZvnqY2o+BDHtzG
U8WxaDRb28inRW9Qo8i0gOXHM+VYXSZu0mqqI/skG2alOP1adctUQzeZ772I3r9q
yCvE3RnE5T8z7BvAlUl/z9fHX7RXqvtlO+LBHlrCDUTIdLYJe1MdWsuaF30Z1zLg
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189568613785377625548221724465789475246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 16:33:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-26 16:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devinberry.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25210414190994512436275438437451951579653681947063629160610761776154826438778225705702326979125210204355019566347565837733873540245661220820798300337214411591017650830266107749999108837413614422867562433267695958835251466676062167962746759210164209706858692918420606956893805544024436816512780931615990823676007291141199005723189288082513728932199587545724547563456501979163401659065403934581581034389959390508440207493515648463660600245872762319244501085429085624471345419547901862949145373557274895984662618975901039927098878980886402761515503881764506146291554087116817156175465025862030426876694497905171928113363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f1bed0ba16867e2cf2d2e57feede2d2d003da98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 666949d4de2a9c9103cf890e24b80e30036e882e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr1/jp0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devinberry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devinberry.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr1/ehmxk4X0Mqk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019717f53e97000004030046304402200f6242e8b59ec1bc58f6fcc897b60aab184c569f1d011ee8b2b291e4f753ba6f0220272d4d7ca0f92631401396601fd347b1840f7d402a58434ab0897343afbdce390075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000019717f53e8b000004030046304402200a6c5fae164a743232fbeff71aa364db15833a50c058657501ec938e0f67a855022048931ecf539cabbaf19350f29524b72006a4ec124d61fa918ccb987f8d1198e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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