compliance.exterro.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ce:54:85:a0:da:42:3b:4d:0a:00:00:00:00:f8:3c:7b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=compliance.exterro.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ce:54:85:a0:da:42:3b:4d:0a:00:00:00:00:f8:3c:7b
Serial Number (int): 274259830372340684579331365493490072699
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:79:0f:1e:b2:31:fe:81:d7:f6:3f:53:49:8d:46:ae:66:98:90:9c
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d1:7f:38:9f:bb:d0:12:5b:77:e9:e6:d7:bd:b2:67:5f:b3:48:5b:3d
Fingerprint (sha256): 03:a0:fe:1d:9a:83:68:16:30:39:6e:da:fe:da:b4:5e:da:39:ef:9b:cc:fc:0e:85:00:d7:e0:57:92:91:c1:87

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d4
CRL Distribution Point: http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl

Check the revocation status for certificate compliance.exterro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compliance.exterro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compliance.exterro.com

Other certificates including the domain name exterro.com

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
compliance.exterro.com
exterro.com
www.exterro.com
j2.shared.global.fastly.net
tracking.exterro.com
dns-vetting1d.map.fastly.net
go.exterro.com
compliance.exterro.com
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
exterro.com
hr.digital-studios.ca
connect.macleodmarketinggroup.com
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
go.exterro.com
j2.shared.global.fastly.net
employees.boldercontracting.com
tracking.exterro.com
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
info.exterro.com
employees.boldercontracting.com
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
www.exterro.com
j2.shared.global.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
*.exterro.com
j2.shared.global.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
tracking.exterro.com
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
go.exterro.com
j2.shared.global.fastly.net
j2.shared.global.fastly.net
tracking.exterro.com
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
hr.digital-studios.ca
hr.digital-studios.ca
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
helpdesk.exterro.com
j2.shared.global.fastly.net
j2.shared.global.fastly.net
exterro.com
j2.shared.global.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
connect.macleodmarketinggroup.com
connect.macleodmarketinggroup.com
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
j2.shared.global.fastly.net
hr.digital-studios.ca
j2.shared.global.fastly.net
connect.macleodmarketinggroup.com
j2.shared.global.fastly.net
connect.macleodmarketinggroup.com
j2.shared.global.fastly.net
go.exterro.com
j2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
j2.shared.global.fastly.net
internal.help.exterro.com
j2.shared.global.fastly.net

Certificate

The complete raw certificate details for compliance.exterro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEcDCCA1igAwIBAgIRAM5UhaDaQjtNCgAAAAD4PHswDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjEwODAyMjAzODU0WhcNMjExMDMx
MjEzODU0WjAhMR8wHQYDVQQDExZjb21wbGlhbmNlLmV4dGVycm8uY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTlzWGTcFfkxuDbsZ5U8NHHl4pJS
+4Ecge2ukHK9L3MBhvqe6MboKJgbDLTQPjt9z5M3YH66lMuDpgLdVM/utlYyWYZ0
8UwoSqag1kbLC9d4KAAF4sWi/rqzQLpNrw5GeYf1Uk/rEc7uRoNTOcYOnEKBRnkg
6tBQqIZ75l0ZE6XpHkqKOi5zEg+5R+18fXBlAEvcpOjAT/mSCKBKwbC56fjKrW2O
+ZZYD2r/98WoVAriYOJtphEzxrtfk8/cK/gX6/9wt3YzLuJjlkBG7kBqO0tEMhLO
gg2vVxbNmd3cSULrm1bfHm6g9o/jCnIHY9OrGY9jSMuRvAIZYBXYkUoQWQIDAQAB
o4IBfDCCAXgwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFOt5Dx6yMf6B1/Y/U0mNRq5mmJCcMB8GA1Ud
IwQYMBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMGoGCCsGAQUFBwEBBF4wXDAnBggr
BgEFBQcwAYYbaHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMWQ0MDEGCCsGAQUFBzAC
hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMCEGA1UdEQQa
MBiCFmNvbXBsaWFuY2UuZXh0ZXJyby5jb20wIQYDVR0gBBowGDAIBgZngQwBAgEw
DAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2ku
Z29vZy9ndHMxZDQvUUFqeFA5YkV1a0EuY3JsMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQA6zf/OYOiAe5ofxV5KsXYrs/p+gFleSSF/jXw0
Xy37woK5vzmkftbIZMOTmhsyU7G7f05veQOXgSB7LigsSdDMNy74MAzM7YSYh7jF
8Q5lBgK4oyb05intvG3+5vsaAa/trslCRB2CFgiMRMNhGqMefZupBN15jP+/4a8s
ihzY0jhlYiYbVgWvf8MLoQXNU64PpUcU/mGTKbC3dY3W97Jpm7w9ckp0pUYx3dJN
sbYUNljCfKRFYI06Fp1D/XYQD16Ukh+P0tqEqcUJWWYuHij7Mht1cqquElKkNPTq
f8y9lTBHc5ZpQZZC68We6drCRkcUFAKiU38M1sz0yrtQCho4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTlzWGTcFfkxuDbsZ5U8
NHHl4pJS+4Ecge2ukHK9L3MBhvqe6MboKJgbDLTQPjt9z5M3YH66lMuDpgLdVM/u
tlYyWYZ08UwoSqag1kbLC9d4KAAF4sWi/rqzQLpNrw5GeYf1Uk/rEc7uRoNTOcYO
nEKBRnkg6tBQqIZ75l0ZE6XpHkqKOi5zEg+5R+18fXBlAEvcpOjAT/mSCKBKwbC5
6fjKrW2O+ZZYD2r/98WoVAriYOJtphEzxrtfk8/cK/gX6/9wt3YzLuJjlkBG7kBq
O0tEMhLOgg2vVxbNmd3cSULrm1bfHm6g9o/jCnIHY9OrGY9jSMuRvAIZYBXYkUoQ
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274259830372340684579331365493490072699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-02 20:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-31 21:38:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compliance.exterro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20352697030257995778691047181973621060046382463367019293846265962495759525984274220905130352154625637000753534157513988457582607171519488891498522506727865075463339591068281983466318119061422247889207813459221928544359559015635408472092372307536688210050012104579441359480238209872589015421021621806334603190423725119519253681690325676025598734168068052061186138377874930662614770927307404824934937902611617187884563555991798698892544623859935661410316021980284201114302457594672966258690135646635433846304185172132300425707498710145191828193514230090581303064925159636326909851948791609387635627878681314196443500633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb790f1eb231fe81d7f63f53498d46ae6698909c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.exterro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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