leaf01.csr.pem
- Google -
Issued by FakeIntermediateAuthority
About this certificate
This digital certificate with serial number de:ad:be:ef was issued on by Google.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
- Subscriber Certificates issued after 1 July 2016 but prior to 1 March 2018 MUST have a Validity Period no greater than 39 months. (BRs: 6.3.2)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Certificate had unexpected key usage(s): KeyUsageDataEncipherment, KeyUsageDecipherOnly, KeyUsageEncipherOnly, KeyUsageKeyEncipherment ECDSA end-entity certificates MAY have key usages: digitalSignature, nonRepudiation and keyAgreement (RFC 5480 Section 3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
Organization:
Google
Organization unit: Eng
Organization unit: Eng
State / Province:
London
Country: GB
Country: GB
Organization:
Google
Organization unit: Eng
Organization unit: Eng
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): de:ad:be:efSerial Number (int): 3735928559
Serial Number lenght: 32 bits, 4 octets
SubjectKeyId: c8:1d:7a:da:22:af:be:80:74:3f:57:d6:7b:96:f2:5f:c2:10:ca:22:46:81:cb:b6:bb:33:7e:39:03:44:62:76:7a:70:30:be:67:ba:3b:ad:48:bb:8c:20:04:b3:17:fd:94:67:bf:aa:0b:f6:6d:52:a9:c3:fd:dd:f6:c2:5c:28:70:ff:85:11:d7:45:04:28:f7:e7:8c:fe:9a:2c:bf:12:f1:4e:2e:14:aa:70:cd:9a:24:ad:93:eb:81:28:5f:be:71:a1:69:0a:e8:d9:d9:f5:22:58:60:7c:10:3d:7a:b5:7b:67:f3:d0:7f:b1:07:32:e9:64:0d:66:d0:85:ba:fd
AuthorityKeyId: 01:02:03:04
Fingerprint (sha1): bc:7e:75:34:a1:9f:55:11:36:8d:06:4b:82:3e:56:3f:80:49:ca:88
Fingerprint (sha256): 00:19:52:e2:ba:6d:0b:16:dd:ce:58:92:ae:65:98:45:02:03:de:ff:ae:ea:7c:79:fc:ed:47:aa:25:49:ae:ee
Revocation information
Check the revocation status for certificate leaf01.csr.pem
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for leaf01.csr.pem
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA256
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement
Encipher Only
Decipher Only
Extended Key Usages
Extensions
4 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name csr.pem
(limited to 100 certificates)
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
leaf01.csr.pem
Certificate
The complete raw certificate details for leaf01.csr.pem in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIICgzCCAiqgAwIBAgIFAN6tvu8wCgYIKoZIzj0EAwIwcjELMAkGA1UEBhMCR0Ix DzANBgNVBAgTBkxvbmRvbjEPMA0GA1UEBxMGTG9uZG9uMQ8wDQYDVQQKEwZHb29n bGUxDDAKBgNVBAsTA0VuZzEiMCAGA1UEAxMZRmFrZUludGVybWVkaWF0ZUF1dGhv cml0eTAeFw0xNjEyMDcxNTEzMzZaFw0yNDAxMjAxNTEzMzZaMFYxCzAJBgNVBAYT AkdCMQ8wDQYDVQQIDAZMb25kb24xDzANBgNVBAoMBkdvb2dsZTEMMAoGA1UECwwD RW5nMRcwFQYDVQQDDA5sZWFmMDEuY3NyLnBlbTBZMBMGByqGSM49AgEGCCqGSM49 AwEHA0IABOs3TlJFnEbVqLjF7Vi5MCmmcIppoCZcni9uuGsjbIThRjqYNoJEpYoX i0GCMvQt4Ahbfgc4UvxHVignm+1gi6yjgcgwgcUwDwYDVR0PAQH/BAUDAwf5gDCB iwYDVR0OBIGDBIGAyB162iKvvoB0P1fWe5byX8IQyiJGgcu2uzN+OQNEYnZ6cDC+ Z7o7rUi7jCAEsxf9lGe/qgv2bVKpw/3d9sJcKHD/hRHXRQQo9+eM/posvxLxTi4U qnDNmiStk+uBKF++caFpCujZ2fUiWGB8ED16tXtn89B/sQcy6WQNZtCFuv0wDwYD VR0jBAgwBoAEAQIDBDATBgorBgEEAdZ5AgQDAQH/BAIFADAKBggqhkjOPQQDAgNH ADBEAiA0diFO1YjBH8RcRSdresXTKNVa5b7fzKI2dpU9hPG/vwIgRr2DSAloDezT oDKmataaODSI4lgVoBW1xaP54XX5krQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6zdOUkWcRtWouMXtWLkwKaZwimmg JlyeL264ayNshOFGOpg2gkSliheLQYIy9C3gCFt+BzhS/EdWKCeb7WCLrA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3735928559 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eng' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FakeIntermediateAuthority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-07 15:13:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 15:13:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Eng' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'leaf01.csr.pem' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004eb374e52459c46d5a8b8c5ed58b93029a6708a69a0265c9e2f6eb86b236c84e1463a98368244a58a178b418232f42de0085b7e073852fc475628279bed608bac . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (9 bits) 07f980 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) c81d7ada22afbe80743f57d67b96f25fc210ca224681cbb6bb337e39034462767a7030be67ba3bad48bb8c2004b317fd9467bfaa0bf66d52a9c3fdddf6c25c2870ff8511d7450428f7e78cfe9a2cbf12f14e2e14aa70cd9a24ad93eb81285fbe71a1690ae8d9d9f52258607c103d7ab57b67f3d07fb10732e9640d66d085bafd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 01020304 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . [c:0|t:3|false] BIT STRING (560 bits) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23728985962966761291457616059240611649444532327513270401116618135504973578175 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31996739566949967543413153417316157840006704445229995564276888937683335353012