research.g2.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f1:38:f7:61:c8:2f:5a:d2:13:7d:40:f1:4d:10:f4:7d was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=research.g2.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f1:38:f7:61:c8:2f:5a:d2:13:7d:40:f1:4d:10:f4:7d
Serial Number (int): 320639733110500791929245635994006385789
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 09:94:e4:7b:45:07:50:09:9f:f0:3c:d6:65:66:d6:f9:75:ed:fe:f2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 05:32:05:04:19:9d:15:e5:7e:3b:68:e2:4e:7e:80:7f:cf:7d:20:66
Fingerprint (sha256): 04:62:d6:c8:ba:f2:4b:df:0c:5c:25:a0:4a:cb:77:ae:88:c8:3e:d5:2c:5e:4e:5c:55:56:a9:5d:d9:50:ff:0d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/0Nsf2qnb7J8
CRL Distribution Point: http://crls.pki.goog/gts1p5/akx-9CicCo0.crl

Check the revocation status for certificate research.g2.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for research.g2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

research.g2.com

Other certificates including the domain name g2.com

(limited to 100 certificates)
swag.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
research.g2.com
eng.g2.com
s5-sni.cloudinary.com
ssl906984.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sell.g2.com
s5-sni.cloudinary.com
groove.ehlinks.com
s5-sni.cloudinary.com
connect.g2.com
track.g2.com
groove.simondata.com
s5-sni.cloudinary.com
looker.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
learn.g2.com
sell.g2.com
s5-sni.cloudinary.com
eng.g2.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
groove.g2.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.robinpowered.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.swivl.com
groove.lyric.com
track.g2.com
culture.g2.com
groove.kiva.org
s5-sni.cloudinary.com
trust.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
*.g2.com
s5-sni.cloudinary.com
engineering.g2.com
sell.g2.com
groove.ehlinks.com
track-sales.g2.com
s5-sni.cloudinary.com
g2.com
news.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
refer.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
track.g2.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
news.g2.com
s5-sni.cloudinary.com
groove.adpearance.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
track.g2.com
research.g2.com
users.g2.com
learn.g2.com
careers.g2.com
ssl906983.cloudflaressl.com
groove.cloudleaf.io
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
news.g2.com
track-sales.g2.com

Certificate

The complete raw certificate details for research.g2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOC/3+AdgeitCNjseuD
JkOaXb+CyGcWAcn6l2ZNeeH8cI8iBISP/F/6ScpTgJVBGpfxMbU9UNpjIs4EyWfL
jDblTYeaIBH2YU3XU1oLiHggulJuueuPOFgyI2k+uYzq+eX3Bj4EXuVsQ/EFZENX
gsfweer59kh0RmBLLSXMXwuk1U+orRwOpX4cH7UamiBbhCML9lb2CMml5WTPNByn
PwO824DMgym14NeeYz4C+0R8y6S3beUKaWw8ahCDLCU5gZVz2rJkyjvVCzDSQ1Fb
kT6dSYVxvCEyXIcdmwzvF1b6w3m+kIY+CJxO82qZNodOnEqVVW/Z8BTam12RmIM7
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320639733110500791929245635994006385789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 07:15:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 07:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research.g2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17501516715199747798441769251688332827321470590944556718432407726465029857834286592510767563127359003376940310831313396185906616599452523429510419438958999807293400672011376203426513828812781271997556859509698796129598428203005226311603390618540657932455046041151341055153220648363803077957568259074045690641068756912119583989265019885534783515953753454423462647074088703894833736331443918843940690614646904704714531624715670264190517024091527492942200031790410207716708271993811530228854552089443626095958790325203959719789954591440809354088785479728125468915835532802133069444682918100442385833489406895206208584699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0994e47b450750099ff03cd66566d6f975edfef2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/0Nsf2qnb7J8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.g2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/akx-9CicCo0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f7b51af120000040300483046022100e96a25a3f7702ac10b3d5573d2bb35b7a3b940dc25eaf737528bd267719f64780221009431a275d98b6f392ae0f16f39a9aa1b464353180fbb6246d7babf29564dca8900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7b51af0e0000040300483046022100fc5609ea609ba7ed985b546b48dcc8b3c9e1b95aee4e09a4e039f088036197fe022100a367f525bdbf08cb86a6d94ae8c7d3187f0b9acdd141b8c67c0f0947d5406164
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0018be3069934843cb6c2dd0172a08fbc9e39a731c211a4bf598ef7b758990d77f8291215e2512ff24c63f5d26aab07b390dca087053dd915b6d87aa14e273b8c3eb7cdcd5c1d4b9bc0aebe95aeda9f89b9accdb169eb9709985e98ead0c6cc8f3280c076c36c83d04d6ebc722690a9f886ceabfdd57a661339ebb858d773bde96b5f6c3eac69c8e75ecf086c2c3dcec2f84d3ce76ebc55aff86f7f26e4adf7570699987c3521865f4511952ac38df378f18e42481538fe51190568c6f52e62f55f35e4c402aed3a1ac9a8a58ed0516d8d152cdea159016689b2884c35c03fff078076268b7c1e2bd85c0ea72c34b4e68d8f55745b0eaa0bd21273a5b23fcb015f