*.google.com.tj
- Google Inc -
Issued by Google Internet Authority G2
About this certificate
This digital certificate with serial number 07:bf:e4:f2:32:ca:6b:bf was issued on by Google Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Inc
Organization:
Google Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:bf:e4:f2:32:ca:6b:bfSerial Number (int): 558416607702576063
Serial Number lenght: 59 bits, 8 octets
SubjectKeyId: 9d:86:28:d0:ee:01:c3:2b:8d:d6:c9:b1:30:76:b6:5e:e2:ad:26:99
AuthorityKeyId: 4a:dd:06:16:1b:bc:f6:68:b5:76:f5:81:b6:bb:62:1a:ba:5a:81:2f
Fingerprint (sha1): 55:fd:a9:f9:2c:30:12:bc:99:fd:e0:07:2b:76:83:47:5e:93:ec:52
Fingerprint (sha256): 05:0b:62:36:3f:e6:33:13:8c:b3:88:5b:4e:90:0e:b4:a3:3f:b9:48:27:3b:57:ec:ae:fa:03:c7:af:33:51:a5
Issuing Certificate URL: http://pki.google.com/GIAG2.crt
Revocation information
OCSP Server: http://clients1.google.com/ocspCRL Distribution Point: http://pki.google.com/GIAG2.crl
Check the revocation status for certificate *.google.com.tj
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.google.com.tj
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.google.com.tj
google.com.tj
google.com.tj
Other certificates including the domain name google.com.tj
(limited to 100 certificates)
*.google.com.tj
google.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
*.google.com.tj
google.com
*.googleapis.com
*.google.com.tj
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.google.com.tj
*.googleapis.com
*.google.com.tj
google.com
google.com
google.com
google.com
*.google.com.tj
google.com
*.google.com.tj
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.tj
*.google.com.tj
*.googleapis.com
google.com
*.google.com.tj
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
google.com
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.tj
*.google.com.tj
google.com
google.com
google.com
*.googleapis.com
*.google.com.tj
google.com
*.google.com.tj
google.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
*.google.com.tj
google.com
*.googleapis.com
*.google.com.tj
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.google.com.tj
*.googleapis.com
*.google.com.tj
google.com
google.com
google.com
google.com
*.google.com.tj
google.com
*.google.com.tj
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.tj
*.google.com.tj
*.googleapis.com
google.com
*.google.com.tj
google.com
google.com
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
*.google.com.tj
google.com
google.com
*.google.com.tj
google.com
*.google.com.tj
google.com
google.com
*.google.com.tj
*.google.com.tj
*.google.com.tj
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.tj
*.google.com.tj
google.com
google.com
google.com
*.googleapis.com
*.google.com.tj
google.com
*.google.com.tj
Certificate
The complete raw certificate details for *.google.com.tj in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIIB7/k8jLKa78wDQYJKoZIhvcNAQELBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTYwOTI5MTcxMjE0WhcNMTYxMjIyMTYzNzAw WjBpMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEYMBYGA1UEAwwPKi5n b29nbGUuY29tLnRqMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr87 G6T+BX2jKL11N8UYQPYXYF8EbGMHYZ2CHtPQBtTat01AzUb3g71KLrRt5QVphNXU pzTMAqJAJz8QwlaVPWDMgVOkaCo/KmkR1nPOWlardxPOALJLVzj6Gr2Gv1tmNvRa Le9qI+LT6iNlTZE6W5zWZxXtkZKKqzf34u7IUQGQmD9LCWNOmrblcj7QeRO0Pt8d V5qEJwa5imxCKCNUCZYwABPtiCRY7JjB2wjkQsE9Z2q2i452NHTQ99Qtxn0cVOcJ 1BaOapv6YR01yQ1petf9inNT2/aMoxGc3uSQtyD3ZchE+89rYmbKCXhmIabuzJzn 6dMkFGpKKFLyaTvtBQIDAQABo4IBWzCCAVcwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMCkGA1UdEQQiMCCCDyouZ29vZ2xlLmNvbS50aoINZ29vZ2xlLmNv bS50ajBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29v Z2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5n b29nbGUuY29tL29jc3AwHQYDVR0OBBYEFJ2GKNDuAcMrjdbJsTB2tl7irSaZMAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSt0GFhu89mi1dvWBtrtiGrpagS8wIQYD VR0gBBowGDAMBgorBgEEAdZ5AgUBMAgGBmeBDAECAjAwBgNVHR8EKTAnMCWgI6Ah hh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3JsMA0GCSqGSIb3DQEBCwUA A4IBAQAQocHb0qe2qHD3SOjaeDwFsbrB5a86L+8yDqy/tE3cfKfBll5xMlV649vO TFo1kjXATVKsj2Gj9McqMv5Lj9DQblWoP62TqJ+k5u27HOHuZ2mr2/PRSFSny3oO jpVEyWUAmS2CBpL2y8Yx5sfwn0vghoNi59+5MJ6CVI8Ji44ZoMe4oZPV8mFiOt0I px9IMPSCevOZ+mWudTS/krViJZZ3MCl2hC0OMXwERvyXvwTzzf3kpvjs3gs38n3c GXg3oS4sKx5n/W0qtjIN9gf6ZOe4pKFxn/Wo9vNCoeY2KW0rb9dWAXIxD8daTNKq bBHzt1y/NX4gMD5HbcWJSpK77H4S -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr87G6T+BX2jKL11N8UY QPYXYF8EbGMHYZ2CHtPQBtTat01AzUb3g71KLrRt5QVphNXUpzTMAqJAJz8QwlaV PWDMgVOkaCo/KmkR1nPOWlardxPOALJLVzj6Gr2Gv1tmNvRaLe9qI+LT6iNlTZE6 W5zWZxXtkZKKqzf34u7IUQGQmD9LCWNOmrblcj7QeRO0Pt8dV5qEJwa5imxCKCNU CZYwABPtiCRY7JjB2wjkQsE9Z2q2i452NHTQ99Qtxn0cVOcJ1BaOapv6YR01yQ1p etf9inNT2/aMoxGc3uSQtyD3ZchE+89rYmbKCXhmIabuzJzn6dMkFGpKKFLyaTvt BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 558416607702576063 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-29 17:12:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 16:37:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.com.tj' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18020138771910441311852817064124829461780520446478429172006991530149502194439026860364635771388194020933477318885426716233034826346407649409710721668972164465656205220907686599613482979272560561032118564444760649936704039642711437468738412503511745043178646664121384169278014860806013270928267655617340810785835245140782497046783870481228150783985851778648817081604078295723113615123022485390825639019104493758576598774378188570372278859661860473952213867770382007408263921561252980221020953584653038578511759218847992635251934151742517317409233848206398461720015711399500760206412372413536920097738608475639994117381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.tj' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.tj' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://clients1.google.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9d8628d0ee01c32b8dd6c9b13076b65ee2ad2699 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4add06161bbcf668b576f581b6bb621aba5a812f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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