ess-staging.uberinternal.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 78:eb:36:48:30:7d:0b:55:0a:00:00:00:00:b9:f3:78 was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ess-staging.uberinternal.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:eb:36:48:30:7d:0b:55:0a:00:00:00:00:b9:f3:78
Serial Number (int): 160728650225498337171998239475170407288
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e5:2d:2c:19:c6:ad:02:e6:9e:c8:79:cb:d8:a4:07:47:43:53:fb:83
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 14:38:28:ad:0a:8c:21:f8:cb:eb:31:99:fe:98:86:12:ca:f4:81:65
Fingerprint (sha256): 0d:a6:4d:e1:09:5f:cd:4d:71:95:b1:78:ad:32:9e:d8:f7:8c:42:1f:fc:da:b2:d6:16:b8:4b:00:8c:b2:08:88

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crls.pki.goog/gts1d2/cUaisCdHoe8.crl

Check the revocation status for certificate ess-staging.uberinternal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess-staging.uberinternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess-staging.uberinternal.com
ess-staging-a.uberinternal.com

Other certificates including the domain name uberinternal.com

(limited to 100 certificates)
uberhub.uberinternal.com
chatbot-uchat-integration.uberinternal.com
productops.uberinternal.com
blogadmin.uberinternal.com
metal-api-dev.uberinternal.com
productops.uberinternal.com
ubergram-api.uberinternal.com
uberhubtest.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
jmighty.uberinternal.com
*.devpod-us-va.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
uberhubtraining.uberinternal.com
devpod-eu.uberinternal.com
uview-api-staging.uberinternal.com
chef.uberinternal.com
bizconductguide.uberinternal.com
jetbrains-staging.uberinternal.com
creativeproduction.uberinternal.com
*.prod.awscorp.uberinternal.com
spiffe.uberinternal.com
bizconductguide.uberinternal.com
itelogs.uberinternal.com
lzc.uberinternal.com
corpss-test.uberinternal.com
*.vscode.devpod-nld.uberinternal.com
ktb.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
spiffe.uberinternal.com
uberhubdev.uberinternal.com
devpod-pln.uberinternal.com
ess-staging.uberinternal.com
scout.uberinternal.com
bizconductguide.uberinternal.com
uberhub.uberinternal.com
devpod-ind.uberinternal.com
creativeproduction.uberinternal.com
u4b.uberinternal.com
productops.uberinternal.com
devpod-nld.uberinternal.com
*.uberinternal.com
devpod-ind.uberinternal.com
uchat-staging.uberinternal.com
devpod-pln.uberinternal.com
lzc.uberinternal.com
u4b.uberinternal.com
jiraext.uberinternal.com
metal-api-dev.uberinternal.com
*.vscode.devpod-us-or.uberinternal.com
ess.uberinternal.com
cess.uberinternal.com
u4b.uberinternal.com
teqtivity-staging.uberinternal.com
munki.awscorp.uberinternal.com
jiraext.uberinternal.com
bizconductguide.uberinternal.com
devpod-bra.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
emearex.uberinternal.com
uberhubtest.uberinternal.com
arize-api.uberinternal.com
prod1.insightvm.uberinternal.com
scout.uberinternal.com
lzc-staging.uberinternal.com
opusimageserver-client.uberinternal.com
devpod-bra.uberinternal.com
uberhubtraining.uberinternal.com
newsroomadmin.uberinternal.com
bizconductguide.uberinternal.com
backup.uberinternal.com
lzc.uberinternal.com
stash-cdn.uberinternal.com
usearch-backend-dev.uberinternal.com
lambdai-test.uberinternal.com
photo.uber.com
ess.uberinternal.com
arize-api.uberinternal.com
vpn-emea-net1.uberinternal.com
uberhub.uberinternal.com
jira-staging.uberinternal.com
arize.uberinternal.com
ess-staging.uberinternal.com
uberhubtraining.uberinternal.com
*.devpod-ind.uberinternal.com
admindevices.uberinternal.com
*.staging.awscorp.uberinternal.com
devices.uberinternal.com
newsroomadmin.uberinternal.com
coeshift-staging.uberinternal.com
*.awscorp.uberinternal.com
ktb-staging.uberinternal.com
vpn-east.uberinternal.com
vpn.awscorp.uberinternal.com
blogadmin.uberinternal.com

Certificate

The complete raw certificate details for ess-staging.uberinternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u/E3+DA3PWSLKgHxrOY
rP7V7flh6KTOs8hJfs0UQ0E0u+ZWo1QXyid1WMBIBucSs+aROIyNV120yHyyx4Mp
gThVhOtZjSQLcLdqXgsedwb7764cehhOUsmPTZ/c0MM6BjyHgaN1++FTjDLpvMv5
/dwfQQlri3cOZ1vc2v3u4kiFoa2rDXXa27Ns1gf5iH017WHwc4zgDg/HlBkJhHGY
3+fI1vI5tBkQRmSOlfNcmBNjPoug6xIufkYD4xM6l9IxrnO4ELeceDYpAkekrmNx
9QBBe+m7+9DsbndA3MAxHDwPoKqnhUAuXGISSsFAqwPBPoQD2vQ8bm/N1+w0bzW/
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160728650225498337171998239475170407288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-27 03:34:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 03:34:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ess-staging.uberinternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29153044663023941242563818900352612434134188171429611474814463782721240871982196594646999588951851510071548379891563076645941324167081876035767374746428292852086065677894370180819303151694139336787444332403361068379177139174581731319346381340480275618190165211330732719810154557388887335043462200015153574088861135454010527584759768524660420756415920699772030738016054090421381753022821238972311528674641566386174430248147216329027190659319572975433387431771565054914726479405461197868763857174121716267950436934499753662139392381933351101916031742180498545532815029619223299017991952988108689783128176909486577270689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e52d2c19c6ad02e69ec879cbd8a407474353fb83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess-staging.uberinternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess-staging-a.uberinternal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d2/cUaisCdHoe8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017871f600de0000040300473045022100d22674fdc5a4cd917b535c258e24abaea7816b82983ba052df91ceb96ec8ca11022016223e2457c32181544186c80fb9957a07c343f87e2c030e0464f52902a836a50075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017871f600d300000403004630440220140aae38c0886500aff91b344f47a61ce2c64c714245a157b480fcf844968fc202204ba3eff29aca3219422a36c9ec90a4c222f638d523082f883a46191cb59c8cd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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