*.google.co.tz

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 35:42:d4:88:ee:06:5c:4d:02:00:00:00:00:41:e6:07 was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:42:d4:88:ee:06:5c:4d:02:00:00:00:00:41:e6:07
Serial Number (int): 70796086088795037752122223494458107399
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 03:44:78:75:a1:be:fb:27:6d:c5:89:7c:ec:dc:0f:3f:ba:1b:1c:09
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 28:90:8a:14:bc:6b:98:f0:fe:c8:b1:fd:65:e4:fd:3d:50:f5:a5:1b
Fingerprint (sha256): 0a:b1:21:cb:b4:b2:2f:23:9f:8d:f7:93:cb:f8:b0:4f:3e:2a:fe:a4:73:5e:c1:da:c6:e1:77:f8:a8:ff:12:5f

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.google.co.tz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.co.tz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.co.tz
google.co.tz

Other certificates including the domain name google.co.tz

(limited to 100 certificates)
google.com
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.co.tz
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.google.co.tz
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
google.com
*.google.co.tz

Certificate

The complete raw certificate details for *.google.co.tz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T2V3yIB6Ja4N1gtknVJ
Vam08afZhPhYee3OfhoDLUVlMgMhYcx3V48qMRkJKiS2N+Oyzuzg29vZF/fMOSm0
bOTBjWkaqs/OyV5vXFJPkpHg8aASNpEySoHU/wZ8Utvplv8cct42aNs75BdxjivC
GExIXWthxJBjHDkminuq1BZp4oV9YGMvbZyZTSgk7OwYuK/7ybxOyUyZlC1dkDgx
6xeyW7ZeF5hOGnVMKHF6K8U1U9OUP6v+JwgiMsdJoUzXBi41eWHbe7oufSJcuPKI
RQ/jaEuh5Jj51cNXyguo+dl7+IQVAyKSY+sNoa/scWQkqdXGqndVW9Rv5lyRNQGr
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70796086088795037752122223494458107399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 10:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 10:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.co.tz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29948847187305854202411947270868169069139965763998424088579240588966788532859701108157628580207653860531278896118238984676123194815375735531696482621367865252630144518669535042678874236929314844171331452867153884776670845028593790262668962913575100956054464343097762128373459702898530881946211827906927991626000208990956545292261420937799971899478928311843417631692662908252485343376583851608208452193888879817481929174332603007263887256479792072665268552107612178190940728343985810553588858599719604507793648298007749465961590811009808208524671257602743090324041741103224742105635112150272233871458858889141972741043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03447875a1befb276dc5897cecdc0f3fba1b1c09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.tz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cbe37267a0000040300473045022100f40425958f8f6c05eb4c3daefee412ed4a6b01334318bb4473b6de425106682e0220400c3f754d97e4a36d540f78acfcd62e24583bf6b5d308dceea7829bf0c1d0a2007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cbe37269c000004030046304402200a077e127f32e62e42e6268e3995878a0b10d73c5da21a2af5fa6260f3e016d7022056cac3a59d447b7536c61ce74a5066c965b51843098fe8708fe0fbf4979d6add
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e7a62ece3a1b247856e1f81fef38bfb6b7f366230b474079e90cf58c441b19d4e6ac5e8d4a8e8f7bfdd1570416efd0f2888e27383ef02ef73ca902706f1f582e43ed2dc451024dc685d33de6f53a276c2754b12f41aa52ebe579da2d75960820bf0d9ac4134acef8eba732c30c673f6bd90c63f562cfd7c9c0c21ebbf5fe0df84ea0a8cdff0ce1d356966ff4b7debf9e05372dbb0a2bd534bf96f107adb77efc32d211d2221725a757b2ff977ff41e4eaf8d80f48202b61dedefe8e1d48d939dea5b51ede1987b71d6e1302a24e0fe1e330275cc36dd20f5628a03a3a60372dc5c9f66a3e375f3d2c2525ec8b197cb2025e5c0f0476d31f323a53e40214ea39