*.google.co.id

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 80:69:d1:95:fe:98:13:7f:08:00:00:00:00:01:b3:ec was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 80:69:d1:95:fe:98:13:7f:08:00:00:00:00:01:b3:ec
Serial Number (int): 170690625538011807744667115971344970732
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9f:4d:1e:4a:66:8b:d0:a8:f8:74:ba:e3:a4:a1:ef:55:e6:13:00:e5
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): da:00:42:73:28:87:67:bd:9b:70:97:97:28:85:7c:35:bf:59:47:05
Fingerprint (sha256): 07:ab:4b:51:d8:87:59:85:30:a7:df:87:b3:bc:0e:2b:a9:c6:29:b6:d5:09:8f:f7:43:de:3d:32:58:92:94:63

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.google.co.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.co.id
google.co.id

Other certificates including the domain name google.co.id

(limited to 100 certificates)
*.google.co.id
google.com
captive.googleapis.com
*.google.co.id
*.google.co.id
*.google.co.id
*.google.co.id
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.co.id
*.google.co.id
google.com
google.com
*.google.co.id
*.googleapis.com
google.com
google.com
google.com
*.google.co.id
*.googleapis.com
*.google.co.id
captive.googleapis.com
google.com
google.com
*.googleapis.com
google.com
google.com
captive.googleapis.com
google.com
captive.googleapis.com
*.googleapis.com
google.com
google.com
google.com
google.com
google.com
captive.googleapis.com
*.google.co.id
google.com
google.com
google.com
google.com
google.com
captive.googleapis.com
*.googleapis.com
*.google.co.id
*.google.co.id
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.co.id
*.google.co.id
*.google.co.id
google.com
*.google.co.id
*.googleapis.com
*.google.co.id
*.google.co.id
captive.googleapis.com
*.google.co.id
*.google.co.id
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
google.com
*.googleapis.com
google.com
*.googleapis.com
*.google.co.id
*.googleapis.com
*.googleapis.com
*.google.co.id
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.co.id
google.com
*.googleapis.com
google.com
google.com
captive.googleapis.com
*.google.co.id
*.google.co.id
captive.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
google.com
*.google.co.id
google.com

Certificate

The complete raw certificate details for *.google.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywzc7J9YGXEEICjiv+Td
U8xqQYLqbS6k47xCMnXv+QRe3MCvimwAFolUkxxzy+66dAzquStQ8tUVtzUYmlXQ
Am1ecC07wBj3vgbI3fOyTLSjPgi1khgnsWlpalOppPOlbpWhEY1h11br1ujrw74j
HEm96dH95iJPf+W4VULcOVaInlZTNNfjlsjV4ML64ov5wFfH5dgyjgbbMLrUQo+7
tM3853wic0W1ASbQS2zSjPudKZRm4P/SJguiuJ+Iw6z5jezNfWtWfNqa92tpKTZA
719SxiivGyEHgUFLlLbIwYlBgmDxxXD1twGH8YR6/fw1OJN7znnhca9G7mSuAuZf
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170690625538011807744667115971344970732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 19:40:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 19:40:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25632718882701289674068300472199903048167064556936517560580624686647443123662535425142336767830960059657902910530073174143644862115646661390206198566184198240514615136789532419239650041812452604432387627559094726533696490937764793585611386946728708162233454787403366813986755057140648926072575360583456609725659779467869513485558438272495139533696381916995518139797979587247770427211364304109113003353073276812759510773065844361299687267933224326133395270690251548935041361974921554600157433499755743342199757612726848035198991620024393685378236183904210487108009861596778185310462410923744072252277515070836809555937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f4d1e4a668bd0a8f874bae3a4a1ef55e61300e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016adc20130a0000040300473045022014b8defc400001135bc43598f5d99a1c6714448854bbfbeaa9530ee4b745cbef0221008e720c570ff446b6cf238fa7517a335f532ad394540a6d963c8652a1dc77568f007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016adc2013290000040300483046022100ff7bb9250e9e59555fe30d5e717f499ccaebdbfd77494847acab4d0f12939c07022100c0564fb57060fa7d3850fc65898e4549f574eea40929033329abe66cb2f165ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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