DV SSL/TLS Certificate for centcom.ca

Certificate is witin its validity period

Issued by Google Trust Services (WR1)

About the centcom.ca DV SSL/TLS Certificate

This certificate with serial number 6c:d8:5b:12:9f:61:00:bf:0e:1d:73:06:a6:6c:8f:eb for centcom.ca was issued on by Google Trust Services.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for centcom.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Google Trust Services

Organization: Google Trust Services
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 6c:d8:5b:12:9f:61:00:bf:0e:1d:73:06:a6:6c:8f:eb
Serial Number (int): 144680006840920680490582104200012664811
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 84:1c:2f:34:e8:94:a7:8a:03:70:0d:fd:3d:84:af:b8:a0:5e:35:cd
Authority Key Identifier: 66:69:49:d4:de:2a:9c:91:03:cf:89:0e:24:b8:0e:30:03:6e:88:2e

Fingerprint (SHA-1): 26:60:2b:cb:ce:23:f0:4d:d4:88:c5:7c:a3:5c:93:7a:38:6e:ba:8a
Fingerprint (SHA-256): af:5f:14:29:dd:c0:92:18:4c:dd:b1:64:c6:36:39:aa:a8:22:a3:88:bc:d3:59:2c:75:3d:08:4a:0e:34:d3:c3

Issuing Certificate URL: http://i.pki.goog/wr1.crt

Revocation Information

OCSP Server: http://o.pki.goog/s/wr1/bNg
CRL Distribution Point: http://c.pki.goog/wr1/jWg-VIyZ1sY.crl

Check the revocation status for certificate centcom.ca
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for centcom.ca

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for centcom.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIQbNhbEp9hAL8OHXMGpmyP6zANBgkqhkiG9w0BAQsFADA7
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww
CgYDVQQDEwNXUjEwHhcNMjUwNzAxMDc1MjQ5WhcNMjUwOTI5MDc1MjQ4WjAVMRMw
EQYDVQQDEwpjZW50Y29tLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBW4gk9mKgI7nw8hmwwHTMhSQ6mIS0vK1YoRgbGxY7axYw2NgOSxzlh8IniR
njDeqp9Nj8uD85+5BmiuQgBrkPAFUlwLqFClnlO5gFl35+yJQEWx9LlbRQcGMNUC
T05MMwE4KaqsqPeLfxYMblNENVAVK7fyfSuM7NrgiwQxRi3190FtqXy0DKvkU31x
XKF+Kh/YRGYkAZueYoF1JMiRthjpZ9Hq8HMdn5UWbtwpIH1ZEGlJT4L9dE7nf8Y9
cBs7PFTRcPWoQNymAgsxKqaBHmgpN5IWRR1QgOW16L/1ymrQ7+c2DlgWqHV+lOZq
e9Qg/w/ViAvZrTSkJX7IGp96FQIDAQABo4ICVDCCAlAwDgYDVR0PAQH/BAQDAgWg
MBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIQc
LzTolKeKA3AN/T2Er7igXjXNMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+JDiS4DjAD
boguMF4GCCsGAQUFBwEBBFIwUDAnBggrBgEFBQcwAYYbaHR0cDovL28ucGtpLmdv
b2cvcy93cjEvYk5nMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93cjEu
Y3J0MCUGA1UdEQQeMByCCmNlbnRjb20uY2GCDnd3dy5jZW50Y29tLmNhMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5n
b29nL3dyMS9qV2ctVkl5WjFzWS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA
dgDd3Mo0ldfhFgXnlTL6x5/4PRxQ39sAOhQSdgosrLvIKgAAAZfFMFneAAAEAwBH
MEUCIC+Nc0qWdhuFfVXO7+Ggzm9/QY2YCOReSlguwM+qee6xAiEAvMkl1kFplLHG
JB0auwTTnzv2W1iwGAdvS30ImJv/pRIAdwDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2X
jbapflTA/kwNsAAAAZfFMFm7AAAEAwBIMEYCIQDdNx6+hq8ktXTpr/ZiEv+AGpwc
Tlt2wL1lauzB9XVi0QIhAJ3U/1kqF/rtSWhvg3FAlpbsUhBPe/6nlpZAqLQTrE4O
MA0GCSqGSIb3DQEBCwUAA4IBAQCvMfsiSrOwOWd+MAnlJLp+Ynp+nSgBKeEVxNNL
Z8Vwn59uAPVEBnkrifKjAAsqTVE1sh0j/Lc6Ct6iXdcxPAeeFOljDl9LUCIk6Dcs
B1LimqhuclAmdY3eUPRnkLmfGboQDcldsNU0UNeN1jbz7rSSUV8gFaYGfmWAtsuw
fbnumiwiY0EwkS4mI/7f1v7oPxmzY+RpzG2zmvXHSgBbGMqd6nsDktpTFdsNVAfE
/IhjMb0gS9sDbs+KGjwFElyTcNV6CALbDSjUM9KE+8+ixDt5L3vr4PFODUJsKeXy
YV2qYhdOYPTG2GIs5Fcqk5r3JKElfWPV2z3xvYHY1hBkGDVW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBW4gk9mKgI7nw8hmwwH
TMhSQ6mIS0vK1YoRgbGxY7axYw2NgOSxzlh8IniRnjDeqp9Nj8uD85+5BmiuQgBr
kPAFUlwLqFClnlO5gFl35+yJQEWx9LlbRQcGMNUCT05MMwE4KaqsqPeLfxYMblNE
NVAVK7fyfSuM7NrgiwQxRi3190FtqXy0DKvkU31xXKF+Kh/YRGYkAZueYoF1JMiR
thjpZ9Hq8HMdn5UWbtwpIH1ZEGlJT4L9dE7nf8Y9cBs7PFTRcPWoQNymAgsxKqaB
HmgpN5IWRR1QgOW16L/1ymrQ7+c2DlgWqHV+lOZqe9Qg/w/ViAvZrTSkJX7IGp96
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144680006840920680490582104200012664811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-01 07:52:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-29 07:52:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centcom.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22733605789183864060526693692184582600965290902824016480053134509564093511894662841950231591330943463684992770220249949711478736237907389119076212856418455365191053460695769831523599768224740035855448960189389802247407830186487793570183991384776059431483005775553457305222362151495409472435463049466124006529673395442674614983639327116925870237155478956221178707585431109967055056546002412101977720241134823207120383229810701114178730272252110167954489696150495269109971667657128475472378943726730744517043573292165985862249908382961506800345272399608554224584015082398626477766058578514254636964110795193374371445269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							841c2f34e894a78a03700dfd3d84afb8a05e35cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 666949d4de2a9c9103cf890e24b80e30036e882e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr1/bNg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centcom.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centcom.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr1/jWg-VIyZ1sY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197c53059de000004030047304502202f8d734a96761b857d55ceefe1a0ce6f7f418d9808e45e4a582ec0cfaa79eeb1022100bcc925d6416994b1c6241d1abb04d39f3bf65b58b018076f4b7d08989bffa512007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197c53059bb0000040300483046022100dd371ebe86af24b574e9aff66212ff801a9c1c4e5b76c0bd656aecc1f57562d10221009dd4ff592a17faed49686f8371409696ec52104f7bfea7969640a8b413ac4e0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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