*.google.com.nf
- Google Inc -
Issued by Google Internet Authority G2
About this certificate
This digital certificate with serial number 36:7d:56:ef:60:67:a0:fe was issued on by Google Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Inc
Organization:
Google Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 36:7d:56:ef:60:67:a0:feSerial Number (int): 3926390036251517182
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 2d:38:bf:b5:a1:36:a1:76:c8:d7:64:65:c8:ec:8f:c9:6e:ab:86:47
AuthorityKeyId: 4a:dd:06:16:1b:bc:f6:68:b5:76:f5:81:b6:bb:62:1a:ba:5a:81:2f
Fingerprint (sha1): 5b:bb:0c:f3:23:1a:77:04:db:f1:2d:3a:1a:57:03:4a:35:b6:97:f3
Fingerprint (sha256): 0e:15:22:10:4c:ae:77:9c:9e:38:c6:b0:1a:a0:ab:1a:70:58:1b:d1:50:c6:89:89:2e:7c:40:63:a4:07:b3:d8
Issuing Certificate URL: http://pki.google.com/GIAG2.crt
Revocation information
OCSP Server: http://clients1.google.com/ocspCRL Distribution Point: http://pki.google.com/GIAG2.crl
Check the revocation status for certificate *.google.com.nf
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.google.com.nf
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.google.com.nf
google.com.nf
google.com.nf
Other certificates including the domain name google.com.nf
(limited to 100 certificates)
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
*.googleapis.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.nf
google.com
google.com
google.com
google.com
*.google.com.nf
google.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
*.google.com.nf
*.googleapis.com
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.googleapis.com
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.google.com.nf
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.googleapis.com
google.com
*.google.com.nf
google.com
*.google.com.nf
google.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
google.com
google.com
google.com
google.com
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
*.googleapis.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.nf
google.com
google.com
google.com
google.com
*.google.com.nf
google.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
*.google.com.nf
*.googleapis.com
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.googleapis.com
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
google.com
*.google.com.nf
*.google.com.nf
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.google.com.nf
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.nf
*.googleapis.com
google.com
*.google.com.nf
google.com
*.google.com.nf
google.com
google.com
*.google.com.nf
*.google.com.nf
google.com
google.com
google.com
*.google.com.nf
google.com
google.com
google.com
google.com
*.google.com.nf
*.googleapis.com
*.googleapis.com
*.google.com.nf
Certificate
The complete raw certificate details for *.google.com.nf in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIINn1W72BnoP4wDQYJKoZIhvcNAQELBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTcwOTAxMDk0MjQ5WhcNMTcxMTI0MDk0MDAw WjBpMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEYMBYGA1UEAwwPKi5n b29nbGUuY29tLm5mMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3pp s0MfTBlO6wU1DxlKqif375O4Otv6qWH96YzR4wpsDCnWKU427SccI9fPR+X77w5d /nxSRZMN6hUyO6ZuL41tlCkAi/an6m25W1lhpdlWjcUtKN6TWh/X/6NnHPN1tXqC 7cboqK6fyVgbwQvpHFG8SSgpqETtKeuydmPPY0qq23euSd5Br/Qao0ZoH5jutA6c KwJxCJZXnlEMD/KlotDiBJPW99ZigzX4LLawqDEw0x9kx4LjPCV70Kgw5Pv/Jda4 R4aSijql37vnNMXB0GFKsTvoSKyCYZhnhRJ8/4DJ2s1CDJfZoTj8fcDCpkJ5kbHR hIPC/Y7WNoEf4keJrwIDAQABo4IBWzCCAVcwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMCkGA1UdEQQiMCCCDyouZ29vZ2xlLmNvbS5uZoINZ29vZ2xlLmNv bS5uZjBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29v Z2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5n b29nbGUuY29tL29jc3AwHQYDVR0OBBYEFC04v7WhNqF2yNdkZcjsj8luq4ZHMAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSt0GFhu89mi1dvWBtrtiGrpagS8wIQYD VR0gBBowGDAMBgorBgEEAdZ5AgUBMAgGBmeBDAECAjAwBgNVHR8EKTAnMCWgI6Ah hh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3JsMA0GCSqGSIb3DQEBCwUA A4IBAQB55mPktnuNJuZaCKc89VlMJXNlZo2ollUd2x2BGDS+7xgClzhCxWqQmAv5 hG/STLzx3R8knA7+zZmLrvILs2jU3PdiM2/+Q5LNmoguUtf7PMLrf1GKWYLuLuuB GrkLYScY+J7TQiFGsKe+Nws8hrw+fhsh/osnGPCiVXmGlO+yh6VHZDPZzpS/i07Y jLjm7CkUfBhGD+8YCKw4bRT8jfunN5v+D9ScmTqLQwto2FFWjQrYxiStZkYPoJnU UeHfc/FWZ720g0T1LC9XCFKMslf7qhxz76qbajU5wM958+bsM34+Rq5466sFjn6I v1CZ5hCnZITki/EJFic6/y9qtgNo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3pps0MfTBlO6wU1DxlK qif375O4Otv6qWH96YzR4wpsDCnWKU427SccI9fPR+X77w5d/nxSRZMN6hUyO6Zu L41tlCkAi/an6m25W1lhpdlWjcUtKN6TWh/X/6NnHPN1tXqC7cboqK6fyVgbwQvp HFG8SSgpqETtKeuydmPPY0qq23euSd5Br/Qao0ZoH5jutA6cKwJxCJZXnlEMD/Kl otDiBJPW99ZigzX4LLawqDEw0x9kx4LjPCV70Kgw5Pv/Jda4R4aSijql37vnNMXB 0GFKsTvoSKyCYZhnhRJ8/4DJ2s1CDJfZoTj8fcDCpkJ5kbHRhIPC/Y7WNoEf4keJ rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3926390036251517182 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 09:42:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-24 09:40:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.com.nf' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23161973855422715271434800623642298621431810657806812385179786672821480716704506772129308976502424498898140228063793807498660548414154657602044882161364256321973626116792916437562961658612882975078108946097193263594464057729325441575732746178446611358406241834570727900868715790955837087337646003380334521371089993342576252950394905488265332265232318033898256560294818289702233778634727691896836224334173856176210565791553528908941497158172769085292490728604151471016059551167049515807339793722838962299328467535803867963121342951628180554571702957555551953659443773399537918431927301506467046762393212766875657144751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.nf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.nf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://clients1.google.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d38bfb5a136a176c8d76465c8ec8fc96eab8647 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4add06161bbcf668b576f581b6bb621aba5a812f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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