*.googleadsserving.cn

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number d4:9c:4a:c7:c7:6e:a4:4a:02:00:00:00:00:5c:67:8c was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d4:9c:4a:c7:c7:6e:a4:4a:02:00:00:00:00:5c:67:8c
Serial Number (int): 282607850142769883355784052568485554060
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c4:63:63:d9:c1:90:c4:3c:e7:aa:d5:90:c8:48:c9:c1:ef:42:de:9b
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): f5:7b:0a:09:bb:f2:07:dd:09:69:e7:90:67:8f:de:44:16:b3:d1:1d
Fingerprint (sha256): 07:dc:f5:d5:c2:06:89:46:72:b9:e4:c2:48:9c:30:74:13:f9:b3:4f:06:82:fd:47:03:c6:94:e9:46:9b:83:f0

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.googleadsserving.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.googleadsserving.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.googleadsserving.cn

Other certificates including the domain name googleadsserving.cn

(limited to 100 certificates)
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com

Certificate

The complete raw certificate details for *.googleadsserving.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhb9kVWtVo+WS6bbOiGK
93QOZKhZnb+pxT76KjU6POfNsbPrB6fNwdG4Anpqzwaebm4qR5iRlnKWV0D1Jc70
RZ8kImyXoTMumfnW5LVQkuQtLlbYiDaBScwzo+Sh8+b+mMf3FYf8Vhm7oeLRBn1n
iiE4g4MDVjuGibBT4eSJMvAzByB8orIYlt0kafzIFOM30KEC6twNhFPVnvYAe51d
yPKIAfaMM0S+tbSfHNj6IRuiV8FugSqOGjgkWh0So8iStH8aCsqimiVG2GJ2RZ8q
9GvWB+snGZib/j69x2OZ1vjkqQHLet8vGVfoDYCtIkhL5YaJXeVAh2wIwO2KfhiJ
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282607850142769883355784052568485554060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 09:46:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 09:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.googleadsserving.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25511474640679320708828938701627651506143586377476262949816360863187591900075205182852558968433814186792006345503834952554667614747765510117729456090868358061619948185011139620016451796744398987795602120352059136821728904447038674118380727618078148766779349365236297062853853522678266939021650197647025726287880660981286397185417315185150783923488560558397226769766657181230189264061304781383052010427389367842493385526744283592012519567701696235297132792838279240786715128470104025722457303239266213047100680826285390338791024397678145216964157270339155819891553899884658607918347650776277162353514840782864482077057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c46363d9c190c43ce7aad590c848c9c1ef42de9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleadsserving.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a001020c000004030046304402206e4533272099872490832d19a4cef17dc502c7635f1faf4adc72367f1e20158c022075ce88cd61bdc675f01c58f0f55b79c310adf846f4186a60681fffb1f30370a10075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a001023a000004030046304402207c840e14b812150466e605ad2aa2e8a4f042ad95c883bc025d0cf7a6d3264702022027be1e094ac07550aef376302766f2a11afb8e67fa512bd842d54dbf7a333497
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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