*.google.co.id

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number ba:53:81:03:6f:c5:35:4c:02:00:00:00:00:38:d9:40 was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ba:53:81:03:6f:c5:35:4c:02:00:00:00:00:38:d9:40
Serial Number (int): 247669984558367347825707487840586750272
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:25:cd:f7:b7:c5:5f:cb:b1:b9:c6:24:22:6a:3c:b9:2d:68:c4:49
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 4b:bd:a5:ed:ad:c9:1e:60:ce:3f:70:6a:d2:90:16:d6:9a:b9:4d:da
Fingerprint (sha256): 07:78:8e:5b:1f:59:29:b7:a7:b5:5c:30:10:53:c1:b3:ce:db:20:38:ac:fd:1d:69:21:d6:ae:bd:af:65:df:67

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.google.co.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.co.id
google.co.id

Other certificates including the domain name google.co.id

(limited to 100 certificates)
*.google.co.id
google.com
captive.googleapis.com
*.google.co.id
*.google.co.id
*.google.co.id
*.google.co.id
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.co.id
*.google.co.id
google.com
google.com
*.google.co.id
*.googleapis.com
google.com
google.com
google.com
*.google.co.id
*.googleapis.com
*.google.co.id
captive.googleapis.com
google.com
google.com
*.googleapis.com
google.com
google.com
captive.googleapis.com
google.com
captive.googleapis.com
*.googleapis.com
google.com
google.com
google.com
google.com
google.com
captive.googleapis.com
*.google.co.id
google.com
google.com
google.com
google.com
google.com
captive.googleapis.com
*.googleapis.com
*.google.co.id
*.google.co.id
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.co.id
*.google.co.id
*.google.co.id
google.com
*.google.co.id
*.googleapis.com
*.google.co.id
*.google.co.id
captive.googleapis.com
*.google.co.id
*.google.co.id
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
google.com
*.googleapis.com
google.com
*.googleapis.com
*.google.co.id
*.googleapis.com
*.googleapis.com
*.google.co.id
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.co.id
google.com
*.googleapis.com
google.com
google.com
captive.googleapis.com
*.google.co.id
*.google.co.id
captive.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
google.com
*.google.co.id
google.com

Certificate

The complete raw certificate details for *.google.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTFS/IxlGAGwbvufPn3x
VY6erjQW1AnHgLOIfCvrQ+KN+bD7uahEm1peD+cR93ekkV15jNgPtwnsS8GUYzau
yaXDYJtqsVYGJg09qMltAUXJd8OjKQoxhh3IAAhuAxZI4uB1B+3bj4Tb2dhZrhAY
qDD06RXVukQ7Rmrome7tHbEYhJu3HM9exy6VC22pa8npvQQMugI5vgCbFYqvamiR
YzEJtrvOAuo1d6J6SYPebJ58x/nqjZW88Ur1bViRZG/afC2o5eQbUwKf7XW8BcsL
TJ7GkVZlqWcBjL5w+1sX0h5o6MGP5foCRSHN2NVT2ZPvMOwxP6TLDTNim53iaozE
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247669984558367347825707487840586750272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 07:27:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 07:27:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23378409071534072802881514070608064966807458642630202956166612452139912096148854367908053809535970519747062462177456758950827090141740905093983780737697542034975482658307394211557012157355215052769186526554588911606683995011722046836701635791442445411278810728229780486827665413253590728783471597705506801455279422407847212651820754135638241969060288466066298795633844834434715292286488669936603738648211177615515668581253515465111156915451728880367898260668667332352843554223443507437838591011290720497882145577313428222242983643689322695811625024130401556248990604090713598653267337748617700813069062859861015708693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e725cdf7b7c55fcbb1b9c624226a3cb92d68c449
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b69b2d46d000004030047304502210088b0641dd9df51ac4d9d5fc1cffac53abce73f704bc6ac540809544b94638f7602204cd7fca595f150ad3e75cbc875e98260c40bdab704114666ea4617aa7f40e99d007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b69b2d4870000040300473045022027e550f77da99c14a5b5e19e8441d73399cc15ac5b395f04de3b8a19ebfca99f0221008e650a582c8382a9dde59cdd38b96917545c2a9f28b82e4d6f0cc5e7c74ef0b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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