*.google.com.kh
- Google Inc -
Issued by Google Internet Authority G2
About this certificate
This digital certificate with serial number 2f:f7:ff:14:fa:82:51:07 was issued on by Google Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Google Inc
Organization:
Google Inc
State / Province:
California
Locality: Mountain View
Country: US
Locality: Mountain View
Country: US
Google Inc
Organization:
Google Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 2f:f7:ff:14:fa:82:51:07Serial Number (int): 3456511704597418247
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 69:36:75:0a:dc:db:b1:79:76:d6:bb:24:48:9f:e3:a7:65:74:95:27
AuthorityKeyId: 4a:dd:06:16:1b:bc:f6:68:b5:76:f5:81:b6:bb:62:1a:ba:5a:81:2f
Fingerprint (sha1): 23:9b:f3:fa:37:a6:be:2b:7b:53:2d:8d:4f:8a:47:30:b8:96:4e:89
Fingerprint (sha256): 0e:b9:a1:fd:b2:00:7c:77:4e:4a:dd:10:b3:10:86:20:37:1d:40:4f:42:53:99:fe:9c:0a:c8:20:fb:c4:77:91
Issuing Certificate URL: http://pki.google.com/GIAG2.crt
Revocation information
OCSP Server: http://clients1.google.com/ocspCRL Distribution Point: http://pki.google.com/GIAG2.crl
Check the revocation status for certificate *.google.com.kh
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.google.com.kh
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.google.com.kh
google.com.kh
google.com.kh
Other certificates including the domain name google.com.kh
(limited to 100 certificates)
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
*.googleapis.com
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
google.com
*.googleapis.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
*.googleapis.com
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
google.com
*.googleapis.com
Certificate
The complete raw certificate details for *.google.com.kh in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIIL/f/FPqCUQcwDQYJKoZIhvcNAQELBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTcxMDE3MTAxMTUyWhcNMTcxMjI5MDAwMDAw WjBpMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEYMBYGA1UEAwwPKi5n b29nbGUuY29tLmtoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRh MoQdCA6OMi8t1i9sG470Ld6gc1oJqeeBodeDmKr1w6PwQVA3OI9rIrjhkWbU6MBy TzwEe+FlQKUjDUBxywCvJTbVkmVTPVFSKe6zPuQxD/aCP5kg+gQV2wFhUnk0Hg33 +H1zRmwyJJuGlmjkLMT0Qes9aOGeb9I0MNSLc7/5jjWGe6snfbPz7aMkIwxplb3c 32JCo7CDXQPLkANPeWJbAnRzTHR+oBFSarjymdDM2ttucIgBnv1M95bV9w8VehJY zOPVM2gr2EjSwKvNKeiRNwxMfSHRwAT3uEJlIU22d9WO4ORjY9TnLX6Sf2VTcN99 5KsroyircpTv1QSHrQIDAQABo4IBWzCCAVcwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMCkGA1UdEQQiMCCCDyouZ29vZ2xlLmNvbS5raIINZ29vZ2xlLmNv bS5raDBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29v Z2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5n b29nbGUuY29tL29jc3AwHQYDVR0OBBYEFGk2dQrc27F5dta7JEif46dldJUnMAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSt0GFhu89mi1dvWBtrtiGrpagS8wIQYD VR0gBBowGDAMBgorBgEEAdZ5AgUBMAgGBmeBDAECAjAwBgNVHR8EKTAnMCWgI6Ah hh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3JsMA0GCSqGSIb3DQEBCwUA A4IBAQAdCRIBRijotQGG6Gwvf1amuoXcdJGTC98AigystI2tC4sL7sh+56d6UNql t7ocYPyaQbaboM2N275ilDlmNrRBkk7crlfEsANX12sawMzzaIrdWehyDhn7j6ED fWg8rp/GdasI/RzGX6chMZAVW4LahoL6Hc+sw6m3GG7P43Lx7Dzz7fqpU7z5EPte zpFJm42vYTdz+oR9TgwUpGZll1ZwWt54/L+xm2KrmfKx4x5hDI5MV0+M8AKJwhXa PSvXmA3/mjH/LxetxkkzaQpX0/l30cVlM7uN0naWFYOkRt1Io9HNCocdc044NFxp g85LgH/noRlIBTv+ki/6emSoxoCl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYRhMoQdCA6OMi8t1i9s G470Ld6gc1oJqeeBodeDmKr1w6PwQVA3OI9rIrjhkWbU6MByTzwEe+FlQKUjDUBx ywCvJTbVkmVTPVFSKe6zPuQxD/aCP5kg+gQV2wFhUnk0Hg33+H1zRmwyJJuGlmjk LMT0Qes9aOGeb9I0MNSLc7/5jjWGe6snfbPz7aMkIwxplb3c32JCo7CDXQPLkANP eWJbAnRzTHR+oBFSarjymdDM2ttucIgBnv1M95bV9w8VehJYzOPVM2gr2EjSwKvN KeiRNwxMfSHRwAT3uEJlIU22d9WO4ORjY9TnLX6Sf2VTcN995KsroyircpTv1QSH rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3456511704597418247 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-17 10:11:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-29 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.com.kh' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21904505610864535504476103149431070923375344438927151471898655051226689117206456032339585457525318654238274911952317570368960478339245379500060388473643946881028990790730970201923633597777203271354655361304911059220676705357556979969276300942634694479814646690962769303053438881649956379575341901906877453850380740632794675443532203876322018046575825579584954712286020481590012211175469591091449542161531659070297756685758852878324326951557647878126684282956922196935254753518724002110966472158598989432089346530160603498917641253366452666861061469453641078278482268542302865390792188623101409117317605189287344900013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.kh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.kh' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://clients1.google.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6936750adcdbb17976d6bb24489fe3a765749527 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4add06161bbcf668b576f581b6bb621aba5a812f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.google.com/GIAG2.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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