*.google.co.tz

- Google LLC -

Issued by Google Internet Authority G3

About this certificate

This digital certificate with serial number 04:54:45:c2:02:e6:b7:6b was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 0 embedded SCTs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:45:c2:02:e6:b7:6b
Serial Number (int): 311950973770053483
Serial Number lenght: 59 bits, 8 octets

SubjectKeyId: df:f3:ab:05:94:80:84:e1:6b:08:ba:ed:21:ea:e7:b4:f7:16:01:5c
AuthorityKeyId: 77:c2:b8:50:9a:67:76:76:b1:2d:c2:86:d0:83:a0:7e:a6:7e:ba:4b

Fingerprint (sha1): 82:29:e9:0f:c2:4f:03:9f:22:aa:fe:19:c9:f3:63:69:07:d2:79:1d
Fingerprint (sha256): 0d:2a:78:22:25:4a:be:e9:4b:5c:fc:86:50:d8:ef:e3:11:83:be:fc:72:5a:19:63:06:59:25:c1:3f:0d:a5:a8

Issuing Certificate URL: http://pki.goog/gsr2/GTSGIAG3.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/GTSGIAG3
CRL Distribution Point: http://crl.pki.goog/GTSGIAG3.crl

Check the revocation status for certificate *.google.co.tz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.co.tz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.co.tz
google.co.tz

Other certificates including the domain name google.co.tz

(limited to 100 certificates)
google.com
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.co.tz
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.google.co.tz
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
*.googleapis.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
google.com
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
*.google.co.tz
google.com
*.google.co.tz
*.google.co.tz
google.com
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.google.co.tz
google.com
*.google.co.tz

Certificate

The complete raw certificate details for *.google.co.tz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqiqAlIEGo9AhdGCQn55
6Jhc0l4edzbbLeC3Wjs8GghqlD8z7GWA3cZX7b07g0Lmqr11cU7WzKP4o1pn5kmD
NvPbDMI6BG6iYcTqHo87aTuJfDELeq7hmfJHA/GG4acXh/F0af7Of8zmylhsN+9W
S3SofmJRSeNFJ5Y9Z6RI8L55HbfYiSYi6h/ea58VM3N2uz0Pm0dtrUZUnTmWl+q/
C/JD5W9PiW6jziwmDpaquy9qdobkClNFjyjMydQ/7p2yHwVBH9kxlKuHMZsumaY3
H+rIJTYIVoBYAwWfzk/rJb6UBP+xjN7zs/cLfoGdeIJDnDWrTDH7IOz9WfxwajmS
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311950973770053483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 08:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 08:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.co.tz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21543683210746751912963650789931305806529400348853754937762250581414927335112838936682225340371592038248130798744085742397822824254380323496730597751640644152987417044204782279668499658660720422703514292119469248301708242698434204810730349727183814154855208425405445416936005122224558180168464287990075858413047864153126069641147872105810507689624645275083966472001749501687996438742515296426441277671419272005436512867452836781178779392135799566580475299095403010262945504708531239715168949534030153100607372723199626692986036533751406284977087918109013925641123908327343213122255828779294038033258330338986852717247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.tz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTSGIAG3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/GTSGIAG3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dff3ab05948084e16b08baed21eae7b4f716015c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 77c2b8509a677676b12dc286d083a07ea67eba4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTSGIAG3.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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