sg.latitudepay.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number af:c8:72:be:b2:d9:ad:e6:11:80:f4:1a:4f:b9:e6:3d was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sg.latitudepay.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): af:c8:72:be:b2:d9:ad:e6:11:80:f4:1a:4f:b9:e6:3d
Serial Number (int): 233655685937464427148994554030150247997
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 01:6b:05:d4:b3:cf:18:ac:86:e6:d9:9a:c5:57:2a:cc:a5:a5:f2:05
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 5d:8f:a2:b4:f7:5a:13:d6:f4:8d:69:11:2b:85:37:72:0d:4a:ca:73
Fingerprint (sha256): 03:02:aa:66:77:9a:ac:84:32:fb:fd:8d:17:75:10:3b:a0:93:57:49:b4:76:99:a7:7d:2b:4b:cd:e2:71:46:af

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/CzZxpwu0NHs
CRL Distribution Point: http://crls.pki.goog/gts1p5/1eLAQ7_rI1Q.crl

Check the revocation status for certificate sg.latitudepay.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sg.latitudepay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sg.latitudepay.com
*.sg.latitudepay.com

Other certificates including the domain name latitudepay.com

(limited to 100 certificates)
help.genoapay.com
imperva.com
forms.logicalpros.com
forms.logicalpros.com
forms.vivewell.health
forms.virtualpethub.com
help.genoapay.com
checkout.latitudepay.com
my.latitudepay.com
imperva.com
sg.latitudepay.com
lpay-app-originations-dev-au.dev.lpayapp-sandbox.lfscnp.com
pepper.sg.latitudepay.com
imperva.com
k2.sg.latitudepay.com
api.latitudepay.com
forms.divorcethesmartway.ca
forms.buteykofitness.com
imperva.com
tenants.landlordsa.co.za
app.my.latitudepay.com
help.genoapay.com
help.genoapay.com
forms.retama.co.il
app.octifi.com
forms.divorcethesmartway.ca
forms.solutionsplomberie.com
app.sg.latitudepay.com
docs.sg.latitudepay.com
imperva.com
imperva.com
forms.canagig.com
form.arvo.com.sa
*.latitudepay.com
forms.lhcc.org.nz
forms.kendallcliffs.com
my.latitudepay.com
docs.sg.latitudepay.com
help.genoapay.com
k2.sg.latitudepay.com
k2.my.latitudepay.com
help.genoapay.com
help.genoapay.com
forms.divorcethesmartway.ca
*.latitudepay.com
stage.latitudepay.com
imperva.com
my.latitudepay.com
app.my.latitudepay.com
imperva.com
forms.forefront.ltd
my.latitudepay.com
forms.buteykofitness.com
forms.romer.co.ke
uat.latitudepay.com
forms.romer.co.ke
forms.romer.co.ke
incapsula.com
www.latitudepay.com
imperva.com
imperva.com
my.latitudepay.com
uat.latitudepay.com
imperva.com
imperva.com
forms.buteykofitness.com
app.my.latitudepay.com
app.sg.latitudepay.com
forms.buteykofitness.com
forms.belong.life
help.genoapay.com
imperva.com
forms.dma.company
privacy.latitudefinancial.com
app.octifi.com
help.gemfinance.co.nz
app.my.latitudepay.com
forms.canagig.com
imperva.com
imperva.com
forms.buteykofitness.com
forms.kleenwayservices.com
forms.romer.co.ke
imperva.com
forms.canagig.com
checkout.uat.latitudepay.com
imperva.com
my.latitudepay.com
app.my.latitudepay.com
app.my.latitudepay.com
forms.latitudepay.com
lpay-app-originations-dev-au.dev.lpayapp-sandbox.lfscnp.com
imperva.com
*.latitudepay.com
forms.lens-energie.nl
imperva.com
docs.sg.latitudepay.com
imperva.com
privacy.latitudefinancial.com
app.my.latitudepay.com

Certificate

The complete raw certificate details for sg.latitudepay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0GHRGuDudqxx2uZBEe
JOuH8MiK4rSohAFKK8TTOvlHt+dYsq4cS9vl5lJCM+t62uA+w7pI5dUVtScksy+4
a5ZL8AKBIcp49b1M78rgZqRldbRMnHG1cHC1O296X/7mKFevYO1NC20EzqF/+Crn
BcZomeaSXKeyOZ4gBBMhrvm12CPsno9+9rFNapCvUlr7RREs0pEjJJBJY3f7k48u
MEahwYmFtWFjNBJ5nnyZoxpsouKx0dXD7PGmVQB7EhfHG4nvqFSeWjmgys8l8Xpo
2PwrwQIRmjFSkf0tFFPTDNGizBGQolsoukfFGSGOyJpnkKqCaeVTiOcI9Njn52O4
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233655685937464427148994554030150247997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 21:32:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 21:32:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sg.latitudepay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24615001889434053899543848554705426264527573356075899672077883562409616561652189757382170005676269259085603828321958742887453011800289152445874822809672142086904559369963761188299859169429790732788391074480404747403861930677764905915213785175441947734272477877760696139081637065227590173430136930227047787793382430068081523406944325835127077751715380798234127739017856838136621825221424964317851742142596655016701111237743388674441207509386297516853939504140390026972360848784400319010488633505875733280511454519826152070894341854498358579365693332964270033878512817695662662733279956267362036222834981589993822337117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							016b05d4b3cf18ac86e6d99ac5572acca5a5f205
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/CzZxpwu0NHs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.latitudepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sg.latitudepay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/1eLAQ7_rI1Q.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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