selfhostedlife.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d7:10:d3:84:04:3a:31:16:0d:ec:bd:8a:d1:75:f0:c6 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=selfhostedlife.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d7:10:d3:84:04:3a:31:16:0d:ec:bd:8a:d1:75:f0:c6
Serial Number (int): 285871385891345581841339465341536170182
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3e:3f:07:e4:f3:1a:62:c8:78:d5:b6:e8:f0:af:de:06:2a:85:0f:85
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): c2:0d:09:9c:6d:e0:2d:38:58:34:38:84:4c:bd:60:23:7e:57:14:60
Fingerprint (sha256): 0b:4a:20:a5:6f:a2:65:68:b5:6b:df:21:68:a1:0d:da:34:22:c7:7c:00:eb:1a:f6:c3:9e:50:d3:1a:99:b0:9e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/1mhYf-w1TG0
CRL Distribution Point: http://crls.pki.goog/gts1p5/47ReEvXT1d0.crl

Check the revocation status for certificate selfhostedlife.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selfhostedlife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selfhostedlife.com
*.selfhostedlife.com

Other certificates including the domain name selfhostedlife.com

(limited to 100 certificates)
*.selfhostedlife.com
sni.cloudflaressl.com
sni.cloudflaressl.com
selfhostedlife.com
selfhostedlife.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.selfhostedlife.com
selfhostedlife.com
selfhostedlife.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
selfhostedlife.com

Certificate

The complete raw certificate details for selfhostedlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIRANcQ04QEOjEWDey9itF18MYwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwNzAyMDgwMjA0WhcNMjMwOTMw
MDgwMjAzWjAdMRswGQYDVQQDExJzZWxmaG9zdGVkbGlmZS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiLcNfY/o660R42smHaa1s80Hu/x0Fhqv
iVaXmTTO684/xOHi3pMV9dKk0QvVzpFeZ+Zojm7lbl6oHeKDQHbXi79A1oqDnqw0
ovx1n1btnd8v2r596/ob+EaZVcaMzuG+rMcgw9MTcUppFi7UpFJVWAkPlT5FArje
4f2e1HfSy5hYSlTwHeU6pddF6pDrjM56Rn+5qF/7htn0HT9I5vN9bhze4KZq4wl6
YRXR7SDsPXX9rj6AyYwrjUZL85BjPYn40/V5tT431mvgVixTU1OgSGo3OpLxCwkZ
ZFrqnRJsMkoMBwTjAP/md53DvZi4qnJ3/EXQ6GMVZFl4MGzkbzMpAgMBAAGjggKO
MIICijAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUPj8H5PMaYsh41bbo8K/eBiqFD4UwHwYDVR0jBBgw
FoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS8xbWhZZi13MVRHMDAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRl
cjAzBgNVHREELDAqghJzZWxmaG9zdGVkbGlmZS5jb22CFCouc2VsZmhvc3RlZGxp
ZmUuY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0f
BDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1LzQ3UmVFdlhU
MWQwLmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe
6YQWcDIThU070ivBOlejUutSAAABiRXWeoMAAAQDAEYwRAIgVspEFnyN4CB5HZug
qyQ6NWKTcZReSjVFGHSpPHEkTnMCIADD6MMeGJy4bcmZtMn4wME3lwUMitvLkGjZ
en7hGoe+AHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGJFdZ6
RQAABAMARzBFAiB6LPIS/vI8pEj2dTgAuImETdG3kn/TEFQbqFiNxd6WQQIhAImH
zAUuNxpBbojTwdqlL10umXg6t8JsPcRV5kygMnzwMA0GCSqGSIb3DQEBCwUAA4IB
AQBazZ9XnKF3MN1fReQJDaJ1r6jaB9n+YOPH7HVgB1pI04gOvPeWgmZeMUkqgMPE
4X8b9+9KtTliVfHYHdewhc9N3aAYlmLbxuerp9FgfEY+N2w8CACEkBx/il6Qmf3K
ILbz10KnwE2dWnjtlwCoyiqA2XecRWq0e2Bnq/jpN4ntSnaXyVPwYRAbP767R3Ri
3EuJpNCKcwcmNgGaSohCtjTXaOnPqHn28J8EfaAY6rrWjFihbylYZL0RWWZ59g1L
0RtivPWjm16uas8ZAxwXAyQAx2Iyl+tBzjiC71youq+XZFmfA5e81Oqk8VdW5P/I
FTz/kSG6YNDeZmmKr99MI+qu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoi3DX2P6OutEeNrJh2m
tbPNB7v8dBYar4lWl5k0zuvOP8Th4t6TFfXSpNEL1c6RXmfmaI5u5W5eqB3ig0B2
14u/QNaKg56sNKL8dZ9W7Z3fL9q+fev6G/hGmVXGjM7hvqzHIMPTE3FKaRYu1KRS
VVgJD5U+RQK43uH9ntR30suYWEpU8B3lOqXXReqQ64zOekZ/uahf+4bZ9B0/SObz
fW4c3uCmauMJemEV0e0g7D11/a4+gMmMK41GS/OQYz2J+NP1ebU+N9Zr4FYsU1NT
oEhqNzqS8QsJGWRa6p0SbDJKDAcE4wD/5nedw72YuKpyd/xF0OhjFWRZeDBs5G8z
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285871385891345581841339465341536170182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 08:02:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 08:02:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfhostedlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21527928547841863092057108451413918593854972755912828072602954958816958628196575877809175934147925405031517983419497298580314130041121176582111754189594078694154218375636842137519138289215288086812318731775897133454133976412974416451222324786702478622709140364989812415259030925359346748309405795717778632555539378136967377030991016083722809272095133725153047408589792014208533738604508759771483785293485836099151764443773907472852467153116332741385391755604712578585906688681473090152344784775067688738169959720649129475437759900623491480934399468587607293436335451224738870480891094763500115119680312765980599071529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e3f07e4f31a62c878d5b6e8f0afde062a850f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/1mhYf-w1TG0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfhostedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfhostedlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/47ReEvXT1d0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018915d67a830000040300463044022056ca44167c8de020791d9ba0ab243a35629371945e4a35451874a93c71244e73022000c3e8c31e189cb86dc999b4c9f8c0c13797050c8adbcb9068d97a7ee11a87be007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018915d67a45000004030047304502207a2cf212fef23ca448f6753800b889844dd1b7927fd310541ba8588dc5de96410221008987cc052e371a416e88d3c1daa52f5d2e99783ab7c26c3dc455e64ca0327cf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005acd9f579ca17730dd5f45e4090da275afa8da07d9fe60e3c7ec7560075a48d3880ebcf79682665e31492a80c3c4e17f1bf7ef4ab5396255f1d81dd7b085cf4ddda0189662dbc6e7aba7d1607c463e376c3c080084901c7f8a5e9099fdca20b6f3d742a7c04d9d5a78ed9700a8ca2a80d9779c456ab47b6067abf8e93789ed4a7697c953f061101b3fbebb477462dc4b89a4d08a73072636019a4a8842b634d768e9cfa879f6f09f047da018eabad68c58a16f295864bd11596679f60d4bd11b62bcf5a39b5eae6acf19031c17032400c7623297eb41ce3882ef5ca8baaf9764599f0397bcd4eaa4f15756e4ffc8153cff9121ba60d0de66698aafdf4c23eaae