*.google.com.iq
- Google Inc -
Issued by Google Internet Authority G2
About this certificate
This digital certificate with serial number 5a:92:48:eb:09:45:09:13 was issued on by Google Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Inc
Organization:
Google Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5a:92:48:eb:09:45:09:13Serial Number (int): 6526358984323303699
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: ad:38:fa:ef:12:7a:d6:a0:a4:f4:06:8f:a8:2e:c2:ca:85:b8:44:13
AuthorityKeyId: 4a:dd:06:16:1b:bc:f6:68:b5:76:f5:81:b6:bb:62:1a:ba:5a:81:2f
Fingerprint (sha1): 75:d6:c7:4a:35:c3:43:33:de:61:ae:b1:e2:b1:5f:29:a7:e8:88:f3
Fingerprint (sha256): 03:a0:4c:1e:61:40:57:70:ec:08:64:08:c6:d8:05:ca:b4:0f:7c:30:e8:8c:54:f2:5e:f1:42:c4:0a:0a:81:e8
Issuing Certificate URL: http://pki.google.com/GIAG2.crt
Revocation information
OCSP Server: http://clients1.google.com/ocspCRL Distribution Point: http://pki.google.com/GIAG2.crl
Check the revocation status for certificate *.google.com.iq
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.google.com.iq
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.google.com.iq
*.google.iq
google.com.iq
google.iq
*.google.iq
google.com.iq
google.iq
Other certificates including the domain name google.com.iq
(limited to 100 certificates)
google.com
*.google.com.iq
*.google.com.iq
google.com
google.com
google.com
*.google.com.iq
*.googleapis.com
google.com
*.google.com.iq
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.iq
google.com
*.google.com.iq
*.google.com.iq
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
*.googleapis.com
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
*.google.com.iq
google.com
google.com
google.com
google.com
*.google.com.iq
google.com
*.google.com.iq
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
google.com
*.google.com.iq
*.google.com.iq
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
google.com
*.google.com.iq
google.com
*.google.com.iq
*.google.com.iq
google.com
google.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
*.google.com.iq
google.com
*.google.com.iq
google.com
google.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
google.com
*.google.com.iq
*.google.com.iq
google.com
google.com
google.com
*.google.com.iq
*.googleapis.com
google.com
*.google.com.iq
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.iq
google.com
*.google.com.iq
*.google.com.iq
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
*.googleapis.com
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
*.google.com.iq
google.com
google.com
google.com
google.com
*.google.com.iq
google.com
*.google.com.iq
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
google.com
*.google.com.iq
*.google.com.iq
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
google.com
*.google.com.iq
google.com
*.google.com.iq
*.google.com.iq
google.com
google.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
*.google.com.iq
*.google.com.iq
google.com
*.google.com.iq
google.com
google.com
*.googleapis.com
*.google.com.iq
*.google.com.iq
google.com
Certificate
The complete raw certificate details for *.google.com.iq in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnzCCA4egAwIBAgIIWpJI6wlFCRMwDQYJKoZIhvcNAQELBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTUwMzI1MTYxMzQ5WhcNMTUwNjIzMDAwMDAw WjBpMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEYMBYGA1UEAwwPKi5n b29nbGUuY29tLmlxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnObp Q+9T58aKwtC7HlOimlz6GaroqJRytGJD/uHoKaTQEUa9zhTayMJeL1dGVU2I4KKK PII2A8Swxit1V1nED4nGdXa78J3sVomh951Ke38J6GNP7jNeHjU3h8WC3R7469cW /59kwALfpFAVH6No73Ey+JDl7ExqCRvBX3whQb+qS/Jz5klvaF/u/pnq/WdvvmYc 4RDT4+2onSl38zTCTLYwdbpkzjOv/SKPTeqqdSc9h6/EoCOXMew90ga0/EWF/PyE +kVpLG//B8HmmysOv0CWlcp571dtQExOpE8W/UkR/yNRjEJc/o7qj8LasIRtJP9i yjNswd3GjeVyZpNdKwIDAQABo4IBaTCCAWUwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMEEGA1UdEQQ6MDiCDyouZ29vZ2xlLmNvbS5pcYILKi5nb29nbGUu aXGCDWdvb2dsZS5jb20uaXGCCWdvb2dsZS5pcTBoBggrBgEFBQcBAQRcMFowKwYI KwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYB BQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5nb29nbGUuY29tL29jc3AwHQYDVR0OBBYE FK04+u8SetagpPQGj6guwsqFuEQTMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU St0GFhu89mi1dvWBtrtiGrpagS8wFwYDVR0gBBAwDjAMBgorBgEEAdZ5AgUBMDAG A1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcmww DQYJKoZIhvcNAQELBQADggEBAHhrRx7AIBGIX/KdcZ6gmJk6a35+JJWpiFpzOvnn 0kI3cEReKSpV9pRt5DZMCzBM94uCSSIp7ypMPBk7oeUGtp1MbG+WjgaSn1TCTU4u m25gS5U/qeoisei0t/ganecl2S+kMahm8L4SBKnQ7vsVgtdaHd1q8K6xisfcJ5E7 O8y1LBBT5CO/ytla1paiCvPf6rq+eqMFyjAI0EvtrUS9/PWqCuQZPegbMHmn4jm/ B3ZFfKVZF9sYIZYpHyuTfIl+rwyMdM8D8qGkJUThkCUCmXTl+sdvAv2YlHiuvA2d 2Bm/oRwn8Y3a7FOk/zv9l4zMPbTofDAyhfulDxTAj/PnBEw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnObpQ+9T58aKwtC7HlOi mlz6GaroqJRytGJD/uHoKaTQEUa9zhTayMJeL1dGVU2I4KKKPII2A8Swxit1V1nE D4nGdXa78J3sVomh951Ke38J6GNP7jNeHjU3h8WC3R7469cW/59kwALfpFAVH6No 73Ey+JDl7ExqCRvBX3whQb+qS/Jz5klvaF/u/pnq/WdvvmYc4RDT4+2onSl38zTC TLYwdbpkzjOv/SKPTeqqdSc9h6/EoCOXMew90ga0/EWF/PyE+kVpLG//B8HmmysO v0CWlcp571dtQExOpE8W/UkR/yNRjEJc/o7qj8LasIRtJP9iyjNswd3GjeVyZpNd KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6526358984323303699 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-25 16:13:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-23 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.com.iq' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19807042127765960111438334403471400875747904062048396061506990179111211450334784360163703817340304250105330240620699338784120361591009721297194324284979593952763580972273121284874418038956702001715461083542072584920388701833052355514093085106939594594362721984425258768881250782491783232810815020281944268528950662583936797819923008071762593712574562479626559599361645184862480927756753356937862903244185130881515900635441355575170207564219028230745915797916916275501816947457554952295867262194492027431466700904160841172972383714916194132807365791586801432829360476174668445995458162529843676151487046041402130783531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.iq' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.iq' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.iq' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.iq' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://clients1.google.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ad38faef127ad6a0a4f4068fa82ec2ca85b84413 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4add06161bbcf668b576f581b6bb621aba5a812f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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