partner-assets.mailchimp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number bb:db:bd:9c:50:d0:a1:7c:12:73:95:af:0a:ad:5b:0a was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=partner-assets.mailchimp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bb:db:bd:9c:50:d0:a1:7c:12:73:95:af:0a:ad:5b:0a
Serial Number (int): 249706593983817857820523916005093497610
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:d9:db:37:81:02:bb:e0:42:aa:2b:98:d1:c0:1c:4d:32:41:94:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 23:66:59:67:00:70:3f:2b:8d:c9:37:79:fb:b1:b7:6b:c5:fa:ea:2d
Fingerprint (sha256): 0a:3c:47:9d:e3:ca:3d:cf:d3:6c:d8:95:8b:53:93:16:20:18:8e:df:28:fc:a1:2a:de:19:3d:c2:d6:c3:91:e7

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/fV0FngdDCEI
CRL Distribution Point: http://crls.pki.goog/gts1d4/o75iqDjrGU8.crl

Check the revocation status for certificate partner-assets.mailchimp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partner-assets.mailchimp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partner-assets.mailchimp.com

Other certificates including the domain name mailchimp.com

(limited to 100 certificates)
images.e.mailchimp.com
mixpanel-be.mailchimp.com
templates.mailchimp.com
patreon.mailchimp.com
beacon.mailchimp.com
square.mailchimp.com
live.events.arbinger.com
googlemybusiness.mailchimp.com
sawa-webcomponents.mailchimp.com
tasks-api.linkedin.mailchimp.com
gallery.mailchimp.com
delivery.mailchimp.com
*.admin.mailchimp.com
gtm-shared.mailchimp.com
offers.mailchimp.com
*.admin.mailchimp.com
raven.stage.mailchimp.com
delivery.mailchimp.com
*.api.mailchimp.com
elevate.medallion.co
beacon.mailchimp.com
sawa-usercontent.mailchimp.com
beacon-shared.mailchimp.com
delivery.mailchimp.com
ls.mailchimp.com
offers.mailchimp.com
templates.mailchimp.com
marketingsuccess.mailchimp.com
admin01.mailchimp.com
live.xentral.com
shopware.mailchimp.com
oktascim2.mailchimp.com
demofest.consensus.io
gtm-preview.mailchimp.com
tasks-api.linkedin.mailchimp.com
tasks-api.linkedin.mailchimp.com
sawa-prod-usercontent.mailchimp.com
designsystem.mailchimp.com
gallery.mailchimp.com
templates.mailchimp.com
rhesus.prod.mailchimp.com
wildcardsan.us15.list-manage.com
oktascim2.mailchimp.com
tasks-api.linkedin.mailchimp.com
*.admin.mailchimp.com
*.partner-api.mailchimp.com
delivery.mailchimp.com
googlemybusiness.mailchimp.com
demofest.consensus.io
avarice-dev.mailchimp.com
cdn-images.mailchimp.com
partner-assets.mailchimp.com
go.e.mailchimp.com
gallery.mailchimp.com
go.e.mailchimp.com
sawa-prod-usercontent.mailchimp.com
*.admin.mailchimp.com
cdn-images.mailchimp.com
*.mailchimp.com
globalevents.braze.com
partner-assets.mailchimp.com
tasks-api.linkedin.mailchimp.com
data.guides.mailchimp.com
rhesus.stage.mailchimp.com
wildcardsan.us15.list-manage.com
partner-assets.mailchimp.com
mcmta03.atl01.delivery.mailchimp.com
*.mailchimp.com
*.admin.mailchimp.com
templates.mailchimp.com
eventbrite.mailchimp.com
partner-assets.mailchimp.com
googlemybusiness.mailchimp.com
mailchimp.com
*.admin.mailchimp.com
sawa-usercontent.mailchimp.com
wildcardsan2.mailchimp.com
*.delivery.mailchimp.com
oktascim2.mailchimp.com
*.partner-api.mailchimp.com
mixpanel-be.mailchimp.com
intuit-op-scim2.mailchimp.com
sawa-usercontent.mailchimp.com
attend.intercomevents.com
events.nasuni.com
downloads.mailchimp.com
postcards.mailchimp.com
raven.stage.mailchimp.com
delivery.mailchimp.com
magpie.prod.mailchimp.com
*.mailchimp.com
go.e.couriermedia.com
mcmta01.suw01.delivery.mailchimp.com
data.guides.mailchimp.com
*.api.mailchimp.com
status.mailchimp.com
mcmta02.sea02.delivery.mailchimp.com
admin.rsg-mailchimp-us21-prod.pando.run
irlondemand.radar.com
events.nasuni.com

Certificate

The complete raw certificate details for partner-assets.mailchimp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOLFDO3wzqBBo/s01lcr
ppnur5e7IDHrloEvystxmH6HCQ4vHUglTwZfrp8lThGUKLcKiy79/wQoKt+XXE+d
JaHuh7wXdKl4x1TU4P85EVf+mK0Ml9fxZCQZrkNmRJOa4pWSUpHNLoAZZ5/aeSWQ
UIhtDwzJAZjHZc/yyyYjLPuZpK8w2zrXzWC8rT/vVDY4hcYHpq5XrVjv3cyrcELQ
blhs/23Y9Erp7on9wlePkjH2aZ4hq4FBAn2Hf/mkcsn17JUoRpGWmce0KbmYUfXm
2PcHoujZN7jEU2MnK4e6pk2sH8dtSRKLFP1RYBqjgGPHxaLkCoOw8iN25YNPtitE
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249706593983817857820523916005093497610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 09:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 10:34:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partner-assets.mailchimp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25359485314103247009241685222378380406367889518347950779373506989280881520502566587861307288418015474368117559084708581836627405014356931886917578344949679184874687224007472764949341708566745416174869975400507433545444318193522614493045451495646376392692655880165575490990248283408793567993881948473684044938470809763889731589630857416434983620797282693129522926289922205623601261690014646534358207289474318305853007097890712709838965167635957617959199253227781731816183185576655698919181533730126928337546231909571134203828938173526243452648413105792018132102865659163731137247447814303781623931845936859907288155329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81d9db378102bbe042aa2b98d1c01c4d324194fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/fV0FngdDCEI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-assets.mailchimp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/o75iqDjrGU8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018885fdc453000004030047304502200530aa6a50dc170badfc63b3fbc64273f1a11e09209086ef0e20eb867feb1740022100e3c9397e4560d81680adfaefc52ef2afdfbd89e41079f506dd702c59bba94e56007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018885fdc446000004030047304502203829687d9c6e81a4e96cfa11a8e3b14004b2b5627e9a18d26cd65c24812a5d49022100c0d8e787ac6203143cdcc5b4eb8e52b69026647854e7735301719ebefcff585c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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