*.googleadsserving.cn
Issued by GTS CA 1C3
About this certificate
This digital certificate with serial number 72:41:58:2c:bd:1c:76:d7:12:a0:23:a5:26:bc:0f:6c was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.googleadsserving.cn
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 72:41:58:2c:bd:1c:76:d7:12:a0:23:a5:26:bc:0f:6cSerial Number (int): 151871279211896523267337142560152620908
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 05:82:6a:c8:29:ff:20:cd:9f:a3:7c:98:b0:33:c7:6b:11:12:fb:70
AuthorityKeyId: 8a:74:7f:af:85:cd:ee:95:cd:3d:9c:d0:e2:46:14:f3:71:35:1d:27
Fingerprint (sha1): ad:e4:ba:fe:ab:73:ea:21:8b:c3:ee:7b:38:a3:51:67:82:ff:2a:8c
Fingerprint (sha256): 0c:77:f7:d4:42:38:38:6a:2d:b0:7d:75:c1:26:5f:f1:5e:f2:a6:8e:b1:74:19:40:c4:6a:85:07:44:2a:83:d9
Issuing Certificate URL: http://pki.goog/repo/certs/gts1c3.der
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1c3CRL Distribution Point: http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
Check the revocation status for certificate *.googleadsserving.cn
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.googleadsserving.cn
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.googleadsserving.cn
Other certificates including the domain name googleadsserving.cn
(limited to 100 certificates)
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
Certificate
The complete raw certificate details for *.googleadsserving.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEljCCA36gAwIBAgIQckFYLL0cdtcSoCOlJrwPbDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yNDAxMDkwNjMyMDRaFw0yNDA0MDIw NjMyMDNaMCAxHjAcBgNVBAMMFSouZ29vZ2xlYWRzc2VydmluZy5jbjBZMBMGByqG SM49AgEGCCqGSM49AwEHA0IABLRlw/1iUBA6sj8JMtrxUaWO3Cr6/IQ/eRdB/bbK TwQPa1N4N9JY5ibZq0TWocAILqc7tbLHIgrIAZfpJGa4BSajggJvMIICazAOBgNV HQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUBYJqyCn/IM2fo3yYsDPHaxES+3AwHwYDVR0jBBgwFoAUinR/r4XN 7pXNPZzQ4kYU83E1HScwagYIKwYBBQUHAQEEXjBcMCcGCCsGAQUFBzABhhtodHRw Oi8vb2NzcC5wa2kuZ29vZy9ndHMxYzMwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2ku Z29vZy9yZXBvL2NlcnRzL2d0czFjMy5kZXIwIAYDVR0RBBkwF4IVKi5nb29nbGVh ZHNzZXJ2aW5nLmNuMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMw PAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWMzL2ZW SnhiVi1LdG1rLmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjO0iulQAAAQDAEgwRgIhANjHwTXQ 5aC0mhvbeOdHi+SQihu/MQ8L92DYFZSFT/S9AiEA5FnREjnJZPHA+dtFprxfZNS0 +4xSCAmYFWQXky0fGXgAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYztIrp3AAAEAwBHMEUCIEpDx+GWeNZVhn4s1tXhC4p8/TedianLcg6kRiku P3wjAiEA5MgoXRTxRH5PTs+Q9N7WbshJoU0o3BrGgkUlCF/9tdkwDQYJKoZIhvcN AQELBQADggEBAGdweqRM+DoGzFHd6PrPLJdjMkFtu2VnY0jTb5D7+hcsq/ufAx7C rtgg8m05vvKaxPg6fc+Md1indxioIlXvdT0/ZdLvp4pytc8LRa+xA1h2fjhBSJlj ptf8QKCk2AZiG5KO2iheWVN4mJ7qLu/0vmblBgsvKsl6EQ7rpb6xECEVTgBc+XJa EcmfbTrQGgjfc8OjQfQC9LmWQI9CLhMUzysjvfvnqYjwgBC8ch+sqg0rXOPSITQA SU6pgS78e48yaypfA43ntLAsx+0c6KtaMjgfoVUnYXbsga8fC9DCyoua9Z78Ox1l B3FweGAGntA0qAGjilhspzGNJEB6H4Oiq08= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtGXD/WJQEDqyPwky2vFRpY7cKvr8 hD95F0H9tspPBA9rU3g30ljmJtmrRNahwAgupzu1ssciCsgBl+kkZrgFJg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 151871279211896523267337142560152620908 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1C3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 06:32:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 06:32:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.googleadsserving.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004b465c3fd6250103ab23f0932daf151a58edc2afafc843f791741fdb6ca4f040f6b537837d258e626d9ab44d6a1c0082ea73bb5b2c7220ac80197e92466b80526 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05826ac829ff20cd9fa37c98b033c76b1112fb70 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a747faf85cdee95cd3d9cd0e24614f371351d27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1c3' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1c3.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleadsserving.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ced22ba540000040300483046022100d8c7c135d0e5a0b49a1bdb78e7478be4908a1bbf310f0bf760d81594854ff4bd022100e459d11239c964f1c0f9db45a6bc5f64d4b4fb8c52080998156417932d1f197800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ced22ba77000004030047304502204a43c7e19678d655867e2cd6d5e10b8a7cfd379d89a9cb720ea446292e3f7c23022100e4c8285d14f1447e4f4ecf90f4ded66ec849a14d28dc1ac6824525085ffdb5d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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