analytics.unplug.studio

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d4:d6:d7:84:61:3d:38:01:09:fa:9b:fe:89:ae:02:a7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=analytics.unplug.studio

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d4:d6:d7:84:61:3d:38:01:09:fa:9b:fe:89:ae:02:a7
Serial Number (int): 282911857840404910059502141428569342631
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0a:0c:13:3d:68:c6:7d:cb:c0:02:52:77:08:4e:ac:88:1e:61:97:74
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8c:71:34:6a:59:6b:66:cd:7d:9d:da:ae:19:00:79:2f:50:a9:83:0e
Fingerprint (sha256): 0e:8c:be:b5:41:88:fa:6e:16:14:92:4d:66:c3:cc:bd:82:4e:6b:35:9a:49:73:bd:cb:b3:1f:32:df:b3:53:5c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/1t5OCVst56M
CRL Distribution Point: http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl

Check the revocation status for certificate analytics.unplug.studio

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.unplug.studio

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.unplug.studio

Other certificates including the domain name unplug.studio

(limited to 100 certificates)
sds.unplug.studio
social.mgi.vn
unplug.studio
connect.unplug.studio
connect.diverseadministrativesolutions.com
connect.ccvgroup.vn
unplug.studio
unplug.studio
reporting.prosnet.com.au
analytics.unplug.studio
sd2-fh.stconsulting.com.au
bdl.unplug.studio
social.mgi.vn
6154.softpme.cl
connect.digerati-experts.com
bdl.unplug.studio
ned.smallbiztrends.com
6154.softpme.cl
portal.imassoftware.com
sds.unplug.studio
portal.riacomptech.com
www.psynergyrecruiter.com
connect.fuvana.com
mad.dupletech.com
connect.kestio.com
4631.softpme.cl
testdoamin.creatortesting.com
mbms.missionpharmacal.com
connect.enroutech.com
6154.softpme.cl
connect.3ve.com
connect.chenzconsulting.com
www.oyp.cloud
6154.softpme.cl
6154.softpme.cl
connect.sandrotalamini.it
intranet.verticalidentity.com
connect.ghbsonline.com
reporting.prosnet.com.au
calpac2.unplug.studio
reporting.prosnet.com.au
connect.miningleaders.com.au
connect.sinfopac.com
6154.softpme.cl
marketplace.unplug.studio
mrteatroallascala.mrowhistle.com
brandconnect.qiigo.com
network.chenzconsulting.com
connect.adelholding.com
portal.energyadvance.com.au
the.watchmkr.cloud
bridge.exeterpremedia.com
www.shadowtrack.net
app.serprojobs.com
stspro.sts-certified.com
intranet.korebg.co
6154.softpme.cl
member.romobros.net
app.artchiv.ist
unplug.studio
sds.unplug.studio
unplug.studio
unplug.studio
sb1383.recyclist.co
connect.reademption.com
6154.softpme.cl
connect.mortgageshots.com
jacobsenideas.coherenz.io
6154.softpme.cl
bdl.unplug.studio
reporting.prosnet.com.au
christhospital.briotix.works
connect.especialneeds.com
portal.riacomptech.com
connect.decisionforward.com
gkdatalink.geokimika.com
rsgdata.reprospecialty.us
www.oyp.cloud
sns.lifemusic.co.jp
6154.softpme.cl
6154.softpme.cl
www.logistica911.cloud
portal.riacomptech.com
social.mgi.vn
portal.cccdigital.io
unplug.studio
cpanel.disclosurebot.ca
connect.alveoo.fr
unplug.studio
connect.klein.consulting
unplug.studio
connect.mbford.com
support.ftitechnology.in
unplug.studio
social.mgi.vn
connect.mortgageshots.com
connect.worcbox.com
clm.zlogic.us
bdl.unplug.studio
6154.softpme.cl

Certificate

The complete raw certificate details for analytics.unplug.studio in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJfOrNVjUg4ru+zAkd0T
jyBQ+c3wb/17ExFcZjSSdjkmM6CuRxnN5zBEFheVm2l2JkCfVAUWRT3r+ov4GEFN
oxb1xVUY24HKNdKytzPMeZSQLiJxRxh8OFYHg2SMBcgFiu2tBCI6u1R1egzgBpGH
rAJOTQz+BrcKnhXGfIO19Z1xFTlD+V6zBiPaXqmTvUZmk5ad/krciF+Bj1EHC2lv
+sHS9pXjK3dF51YJ2MVORemULy/I/UDtPj52kPZo2dOGd7XtJKqydkXbaf6G1hwW
84MWViIVhWWfhh2UwCu/6C4YDa8/GjTwdV9WqPvFl0OSy8Tk8iVudNEl5ip1dLz8
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282911857840404910059502141428569342631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 06:32:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 07:19:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.unplug.studio'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16233362017512640898043326870462718362756247610057316594271141653513697344417845520468477644970745650285069059731534133797780884362052390974439438976301449625569459285769485328721654014307215139558771882977173258589501261876711287747390535001767306623722680814767495926976807480164634811957505770499368334687782396945741335418723379656482420040931149460087247413377675705127754749371358672978411138872881617274510195576486226164203759626100026661091237702443103155823689095723156501203897256403157597785935545235925013435368663233105997902698064422491566781649378094405489688766440554921679520437990792368347984755829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a0c133d68c67dcbc0025277084eac881e619774
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/1t5OCVst56M'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.unplug.studio'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cd889ce7c0000040300473045022001a1ee36c75d7bac21fb7b9f2f49e5db5a38e0115cdef77bb76eac1e5baf27010221009db68f5aba3cfdcf966f0ed14960df2b74ec0cfbb8e27fdac27b046615028033007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cd889ce380000040300483046022100cb3c38353ccf05bc6429635f18c7d36e4ed73bc7e87f89803ed75a23eeac89ab0221008f7feeaee21c7697d5f2e02b29c8f4f4b25ccc24c462ba06288ddff555ed1b6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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