goma.chromium.org

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 3f:75:6f:64:f9:5c:ef:59:08:00:00:00:00:1e:c7:35 was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:75:6f:64:f9:5c:ef:59:08:00:00:00:00:1e:c7:35
Serial Number (int): 84351121814354650496174287521673299765
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 4b:1e:1e:1a:9b:cb:57:79:4e:0b:14:17:1e:17:6b:e2:57:56:8f:64
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 62:48:7e:39:76:ac:a9:5b:fc:80:c5:54:6f:4c:1c:fe:03:ea:ba:1d
Fingerprint (sha256): 09:fb:7f:10:4b:62:34:8e:c9:9f:c7:50:0a:1f:05:4d:b8:c5:07:2e:37:98:5f:73:ad:7b:3e:05:ba:58:db:cf

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate goma.chromium.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goma.chromium.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goma.chromium.org
staging-goma.chromium.org

Other certificates including the domain name chromium.org

(limited to 100 certificates)
misc.google.com
chromedriver.chromium.org
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
git.chromium.org
misc.google.com
goma.chromium.org
misc.google.com
uberproxy-san.chromium.org
pme-sandbox.luizalabs.com
openhive.rubix.ro
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
stcshop.in
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
linux.clangd-index.chromium.org
git.chromium.org
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
nowcpv2.skylab.bzh
aleksivirkkala.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
goma.chromium.org
chromedriver.chromium.org
misc.google.com
misc.google.com
misc.google.com
misc.google.com
qscheduler-dev.chromium.org
misc.google.com
misc.google.com
uberproxy-san.chromium.org
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
misc.google.com
src.chromium.org
uberproxy-san.chromium.org
misc.google.com
analysis.chromium.org
misc.google.com
www.fiasp-udine.it
misc.google.com
misc.google.com
misc.google.com
misc.google.com
infra-repo.golo.chromium.org
misc.google.com
uberproxy-san.chromium.org
misc.google.com
misc.google.com
misc.google.com
linux.clangd-index.chromium.org
misc.google.com
src.chromium.org
staging-goma.chromium.org
misc.google.com
linux.clangd-index.chromium.org
misc.google.com
build.chromium.org
misc.google.com
stcshop.in
misc.google.com
kazutoyoakihasblog.ameliaislandselect.com
build.chromium.org
misc.google.com

Certificate

The complete raw certificate details for goma.chromium.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsboeyhtkYtEDDOs0VNrw
9fMblLnrF1jvo2l9JAhqN+cZIJ81W885AxcWVpzccjx8/x6veUONv6c3IdE46zaN
BLTP5BWdzkyYjAj6aY4bc+cV2C1mWWkwtijtI45cumgMUl7zE0QoiLrXGjzr6y1d
PLeylAa/L9EPbsa3Scj+j+IDPCr8ctWHBfUBYr4FlvXlmOQ+KfEH46DkJMDktwfq
V3ANhtvmrNYRuYEPdM0A5EBtegVte+mkoVKbECZde5AsyGHQcygavmhnUkzoNwlL
SeZznvP/tKNhx6g/0sNQnCpmbfcQ8CGGe1V6WM0xACcAFwu3rbFiEag0u0VQaGxJ
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84351121814354650496174287521673299765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 19:14:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-09 19:14:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goma.chromium.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22435959305486047768837786142266594744293816752031779033170729571418717382217364239814614411727112420095796755611405567620524154912258013900044233500312080459486422807702930901710197978287999002499983982614348231108808111307680532051408891559303959100217107645803255138327145489946370367484386901405709410588489190821495261570186934775112391399074816169506432289883790144443787138043532467093958819900331688655994025061097183600164616172877660215443786017591315891994948937295011244543215500452949084220981399223510502555887236366123544429104243240445056691416221351330174979205807944752345192523079456389033945221469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b1e1e1a9bcb57794e0b14171e176be257568f64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goma.chromium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-goma.chromium.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e5c1a17b50000040300473045022001b8c55f5e43a90d17b0777be26444c5b26ad7233b61a316ec6301798307cd44022100abf8238e5482375f892eb5ee80466d7942f8e6a08760166d6af22733c8bd8aa30077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5c1a17dd0000040300483046022100e083ba3d9c7f6c246b900afff8a5d6ddc268b0169ddeac038f7f6bebf9ad2f260221009c871784d73c91d7e49188a50017f70a10144010068bdc1ae0a2e7a2b9017fa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00244534d4108366d95cf3678989b6d6e5a772806550fb0f0b8f9c1c2225cbe0d02ec50a424f241da6094d25584d8e228298c3b73d53252249f14d21cf94eff04deeb641d436964e54627a2a55f567944ff328a2140b1f2a2310bd43baead341044a2c3a3ad3009c43dd63c8d1cab209913ee8a5d2db4e6575a958e0c4a8155f406dc7210ff9b99a7f6e1cd5d58e24f462ad31fcd2dff01be139e339c620c28ac2f3de0cc63a944ef77462310a015beda9c1be883171612442410be34d3220eddfee5ffde2c727de096438fe3326f6779500623b5ce207999f79a0db9ff897fa7e87059435ccd612495df02570ddb5abb4ee425e79d0c093e3f3540afd1385f57e