t-antenna.asana.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 24:3c:34:a4:14:bd:7f:58:10:3b:cd:ad:c9:ad:3b:9c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=t-antenna.asana.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:3c:34:a4:14:bd:7f:58:10:3b:cd:ad:c9:ad:3b:9c
Serial Number (int): 48164813344905891849822918442547493788
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c0:32:5b:5e:e4:48:3d:b3:d8:59:32:d0:1b:44:a3:ca:c1:e1:6d:23
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 7f:e0:7b:d5:aa:ce:1d:9f:e2:1d:9c:b0:7a:5a:5f:6a:cc:ac:e0:22
Fingerprint (sha256): 01:63:17:4e:94:5f:f4:b2:27:af:ea:33:36:fb:9e:63:07:3e:03:ca:f8:e0:66:28:db:d4:df:2a:68:88:a9:a8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/5of28b_EjX0
CRL Distribution Point: http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl

Check the revocation status for certificate t-antenna.asana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t-antenna.asana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t-antenna.asana.com

Other certificates including the domain name asana.com

(limited to 100 certificates)
hello.asana.com
dns-vetting1b.map.fastly.net
partnerlearning.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
dns-vetting1m.map.fastly.net
*.beta-us1-asana-exp-cell100-238a3931.app.asana.com
t.ssl.fastly.net
leapfrog-ssl-56.gcs-web.com
academy.asana.com
leapfrog-ssl-56.gcs-web.com
bistatus.mplatform.ch
kubeville000.asana.com
go.asana.com
share.asana.com
leapfrog-ssl-56.gcs-web.com
labpages.braze.com
webhooks.revenue.asana.com
dns-vetting1b.map.fastly.net
t-antenna.asana.com
wavelength.asana.com
*.prod-internal-internal.app.asana.com
t.ssl.fastly.net
hello.asana.com
godaddy-status.elastic.co
advisors.asana.com
govcloud-status.elastic.co
sales.asana.com
shop.asana.com
shop.asana.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
forum.asana.com
prod-au1.app.asana.com
t-antenna.asana.com
dns-vetting1j.map.fastly.net
wavelength.asana.com
statuspage.io
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
gtm-analytics.asana.com
customer-test.ssl.fastly.net
sepsbe.status.symantec.com
sepsbe.status.symantec.com
customer-test.ssl.fastly.net
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
gdrive.asana.com
wavelength.asana.com
customer-test.ssl.fastly.net
go.asana.com
prod-eu1.app.asana.com
*.prod-prod-prod-us1-prod.app.asana.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
partnerlearning.asana.com
partnerportal.kornferry.com
partnerlearning.asana.com
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
*.beta-us1-asana-cell01-0b7a99d5.app.asana.com
customer-test.ssl.fastly.net
labplaybooks.braze.com
forum.asana.com
t.ssl.fastly.net
t-antenna.asana.com
hello.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
eng.asana.com
dns-vetting1b.map.fastly.net
t.ssl.fastly.net
value.kpmg.ch
t-antenna.asana.com
blog.asana.com
t.ssl.fastly.net
certifiedpros.asana.com
dns-vetting1b.map.fastly.net
community.asana.com
b2-alt.shared.global.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
*.asana.biz
advisors.asana.com
dns-vetting1m.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1j.map.fastly.net
customer-test.ssl.fastly.net
b2-alt.shared.global.fastly.net
customer-test.ssl.fastly.net
space.adlittle.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
wavelength.asana.com
portal.kearney.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
t.ssl.fastly.net

Certificate

The complete raw certificate details for t-antenna.asana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VE1Y0ljAdpmY6s7hsxQ
qd/oBGq2DUWv9ixHuGzh1BTcDzm7yRLOm9xFqK3uAvf3A0NmKci3ImoMclKUnNg+
SOhdE/Z+eoMsi7ketKUjkgRhp10SVLgFhfdLn7GIoLMOjc6uMwHmnR7L52CXz1wL
XX6FETZ1ce1aOAcCErdOjF2XQK5abpIaXNcUd6SbbSTSB9OkH6Vgo9tBztltMc+B
5amOWHq7bJfSj1ovHE3EBodDDvhWXTS2v+QQVifbj++yCuW9kLKKmIlw/ZH5ZQ9n
zUuOKhx7ehuXwOJqSfs/hzZPjt3U0RWB+rSXzRwH6b8DSAI1WBALBIHRfW5Lhytm
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48164813344905891849822918442547493788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 11:55:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 12:47:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't-antenna.asana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29453570483758218558837677725444254243353238702065533029223350905471488524902026360835096818296188423987493427145105045913468375097931144229086970065533123856536059314707301748145030577797106680475840907996447736483693292488826343271138642832043753789524879679955122073186620480820141069537676158671283897707669281022019804032890405798994702190419056581190354003440461521764700085517253395213662677944758867153989888163296834026874800538580139081983097230623114149403360718154609068860612207389549885908814251699603470143303193474198648499557079317311112900035329269169418692733184174045088747184547239487819049821747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0325b5ee4483db3d85932d01b44a3cac1e16d23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/5of28b_EjX0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-antenna.asana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f9f080510000040300473045022100f8101263d7e65c429a77fa3b0d768c1a7a82bdbffa9c00fccb202cad25a36de70220576809827f21e62be76d1c7d030de6df3c9ebf2464271f6e464d3b9eb015d9c5007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186f9f0805a0000040300473045022100ffdf0dbaf4d81082ed6bb518f8f1c0e55e8a040747852c0d6eb7b48720787e9502202fbb7b5830a8ab03cee9f2a1a0c58e2802688f3c126d6a1663719d814b65e199
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009dc13ecf12f28d22dc74bc139d590e33deed812f15549143cc50e25d7bc1b34bbcd1fd3087c3651ff5322a3749c3b13e02686aaa7afc1fabc5d0fd976a9bef864ad7cba5ddf972e1795542729f44fd9e6eea80a8bd73cc651a05f7fac2abdd079b83a22d08d6b07acbc8ee8e60bb55c7f481c164d51ad47b1562891f7bc4711d89d0aa896a6ccc4eb6fabb08346c33a7eebc21f7ded8fc91554e07e0fdda61fcb181b097ac3115fb85994a557270938ea81498a61bdca82c5b8e79f04aca2aba0e6e8c3bb2ee791b68d869c5881e8601a73f0064acf0c3d4f9dfe7557134be1db0706ccd6168d2835a14da6054c843fef678909b94de39086c6d89f078aa9f2a