uberproxy-san.consent.corp.google.com

- Google Inc -

Issued by Google Internet Authority G2

About this certificate

This digital certificate with serial number 41:36:59:4f:7e:b4:6d:0c was issued on by Google Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google Inc

Organization: Google Inc
State / Province: California
Locality: Mountain View
Country: US

Google Inc

Organization: Google Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:36:59:4f:7e:b4:6d:0c
Serial Number (int): 4699041459170733324
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 20:60:3d:0a:b7:19:cb:f9:b2:ee:6d:ae:b5:07:78:e1:d5:2e:24:47
AuthorityKeyId: 4a:dd:06:16:1b:bc:f6:68:b5:76:f5:81:b6:bb:62:1a:ba:5a:81:2f

Fingerprint (sha1): 5e:62:f7:91:71:ee:09:18:32:c9:08:20:51:ec:6f:c6:9a:99:b6:cf
Fingerprint (sha256): 01:de:63:6e:6d:91:9f:fe:53:b4:9f:18:27:16:b6:31:3e:d4:56:93:ae:09:06:0f:45:09:bb:f2:f0:5b:3c:81

Issuing Certificate URL: http://pki.google.com/GIAG2.crt

Revocation information

OCSP Server: http://clients1.google.com/ocsp
CRL Distribution Point: http://pki.google.com/GIAG2.crl

Check the revocation status for certificate uberproxy-san.consent.corp.google.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uberproxy-san.consent.corp.google.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uberproxy-san.consent.corp.google.com
*.consent.corp.google.cat
*.consent.corp.google.co.uk
*.consent.corp.google.co.ve
*.consent.corp.google.com
*.consent.corp.google.de
*.consent.corp.youtube.com

Other certificates including the domain name google.com

(limited to 100 certificates)
netcracker-staging.corp.google.com
*.google.com
m.google.com
mx.google.com
*.vp.video.l.google.com
uberproxy-cctlds.corp.google.com
ax-uat-ingestion02.corp.google.com
misc.google.com
www.google.com
*.google.com
*.c.docs.google.com
uberproxy-san.cert.corp.google.com
edge-static.google.com
*.ext.google.com
warpspeed-color.corp.google.com
uberproxy-san.corp.google.com
cert-test.sandbox.google.com
upload.video.google.com
google.com
mail.google.com
uberproxy-san.dclk.google.com
uberproxy-san.x20web.corp.google.com
sandbox.google.com
get.duo.google.com
mail.google.com
misc-sni.google.com
www.google.com
*.mail.google.com
cert-test.sandbox.google.com
*.googlecode.com
upload.video.google.com
misc-sni.google.com
uberproxy-san.printer.corp.google.com
wifi.google.com
wifi.google.com
*.clients.google.com
m.google.com
login.corp.google.com
uberproxy-san.x20web.corp.google.com
time.google.com
login.corp.google.com
mail.google.com
captive.googleapis.com
uberproxy-san.x20web.corp.google.com
*.calljoy.com
uberproxy-san.corp.google.com
upload.video.google.com
misc.google.com
*.rucn.google.com
wifi.google.com
accounts.google.com
edge-static.google.com
*.payments.googleapis.com
*.google.com
login.corp.google.com
supl.google.com
*.googlecode.com
uberproxy-san.dclk.google.com
*.google.com
sandbox.google.com
uberproxy-san.printer.corp.google.com
www.google.com
uberproxy-apphosting.corp.google.com
sandbox.google.com
m.google.com
uberproxy-san.dclk.google.com
cert-test.sandbox.google.com
sandbox.google.com
*.vp.video.l.google.com
ax-prod-ingestion15.corp.google.com
apps-secure-data-connector.google.com
wpri12.hot.corp.google.com
cert-test.sandbox.google.com
*.google.com
sandbox.google.com
devsite-wildcards.corp.google.com
m.google.com
*.mail.google.com
pry-bastion01.tarsier.prod.google.com
*.clients.google.com
parkstreet-color.corp.google.com
wpil13.hot.corp.google.com
adwords.google.com
mail.google.com
ads.google.com
*.google.com
uberproxy.corp.google.com
*.google.com
*.chrome.google.com
uberproxy-cctlds.corp.google.com
da-twd-7.da.ext.google.com
adwords.google.com
*.google.com
*.clients.google.com
edge-static.google.com
*.google.com
www.google.com
sandbox.google.com
uberproxy-san.cnsviewer-static.corp.google.com
mail.google.com

Certificate

The complete raw certificate details for uberproxy-san.consent.corp.google.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPMvbkQLOi8F9W2Tn788
VLEjwpmV5q0C3DO8Gpo0DiI9GkjC4wzvo6v44CV08zmkPOxCZ7sLWucns0z+wLlE
ZTyzL+sjy+CJwwk9NL02rVykHt1IfUVB8CX3gw47atL2VVxzDkFdydzPzg7BXD/s
7lqmRi/YeNCrznkFhNZg+Ig9bziCs/MKQRwzhmlKJTbGX2/8lkHR1m3WRWUIbcwN
zVEVE4rVCMm0lZZBRqazVOvf4Py3B6am1MWFi6xKb+T0Kk9tOX+YESC7lf530U7G
CmRRaTGYVIWq9RqehfCpgZ3Ar3HkMz3w6rXVESqFU2ClqCjyKs4Hs6UEPyA7Lvxe
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4699041459170733324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 08:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-30 08:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uberproxy-san.consent.corp.google.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18298235044289576195584961353095501715300499844300658176592057215775833155194544663375377712440275099863526375326043403764747233188857423580708084810968197490048368900797569527994629050153201436108372741182369017920898477770722415402477211481062465690661323029164540993159198544773823696532707421345937695715621417219251522315570703697963160721833249964822137724416026151465540157696437529283237989374024236409204889572778995749521136979376390351092906905632465477213106887366491125081770563996503170312827908109649982459447730098894859050283790923757486994806411783315314046511642794272756058075285259170309629304357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberproxy-san.consent.corp.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.google.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.google.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.google.co.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.google.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.corp.youtube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://clients1.google.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20603d0ab719cbf9b2ee6daeb50778e1d52e2447
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4add06161bbcf668b576f581b6bb621aba5a812f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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