c4cs1-mng.cleafy.cloud

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 46:61:ae:d7:11:65:07:38:10:d2:57:df:9c:8c:25:54 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=c4cs1-mng.cleafy.cloud

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:61:ae:d7:11:65:07:38:10:d2:57:df:9c:8c:25:54
Serial Number (int): 93553158678931346106259421595081385300
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:f8:ff:e3:f7:4a:27:bc:f6:f1:fb:5e:d4:e6:15:fb:86:3e:51:16
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 83:1c:a9:e2:2e:60:40:a8:d2:87:c1:19:d3:f2:2c:44:09:cb:f2:4e
Fingerprint (sha256): 0c:18:bd:57:3d:58:67:54:65:81:13:2f:e2:0f:0b:5a:4b:8a:33:b5:00:a6:9e:5e:db:f2:e6:59:e0:3c:2a:29

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/v4lCRYt2Gio
CRL Distribution Point: http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl

Check the revocation status for certificate c4cs1-mng.cleafy.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c4cs1-mng.cleafy.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c4cs1-mng.cleafy.cloud

Other certificates including the domain name cleafy.cloud

(limited to 100 certificates)
0b22bb10.status.cleafy.cloud
3130e863.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
3130e863.status.cleafy.cloud
12a10fad.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
6bd21a3c.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
au.status.clio.com
0b22bb10.status.cleafy.cloud
23930d45.status.cleafy.cloud
12a10fad.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
c4cs1-mng.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
0b22bb10.status.cleafy.cloud
au.status.clio.com
12a10fad.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
6bd21a3c.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
23930d45.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
4ff0e958.status.cleafy.cloud
23930d45.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
au.status.clio.com
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud

Certificate

The complete raw certificate details for c4cs1-mng.cleafy.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNLQEu9NKBUDbu/xCT+5
thQ98szGh5SYFA3WVw4p+jdc9B55r5DGCrjY5qg3BK8UU8kV6m3t1SlgQbmFRs1z
dxjRySPDOHydZFG3o3AnC80CMh7VMVHn3gLTqQ63is7u66i3eFxymmOFtkBDZ1tX
c6NQzgbmOv2Tdj2HwqTBdIFzSj+6XN3LsPJ3xKUlNz/IdnD09K7t2Xmp0TiSxViK
SYeCj1MQgaEK26N9BwT0UtTcpQ6xstPnsxdVRmqFqkoh0tYPWb4t97mtX1bY61Xr
YKGc6RbV82RGaqn3YunIT8DgzUxBm9if04PeyZ53/iGgevYM0QSFJQ6Dll1UsCbO
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93553158678931346106259421595081385300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 12:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 13:49:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c4cs1-mng.cleafy.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23331803774452599335557809848108033609029487392790421998640770397520586668080855692872088510434396602491155871641246115263252530767463694047518459979246572039454964043010802038498990247877419552997160575095625561798125992364064055859772250956372384179556442230985944595017106023142143568184807048192361643925929521343507048855916803904001720365160980546013828935724012529419454977611715000134918789811135061008670510434563743769201748943759124653376168758913630754972009406424927711219244082504764909572922528079221431045706598489639462585450979691772632615232398368639461214376331030769296079974926884411286122581521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0f8ffe3f74a27bcf6f1fb5ed4e615fb863e5116
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/v4lCRYt2Gio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4cs1-mng.cleafy.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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