sawa-usercontent.mailchimp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 8b:34:96:11:6a:e2:0f:73:12:b8:21:ec:e6:b7:0f:3c was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sawa-usercontent.mailchimp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 8b:34:96:11:6a:e2:0f:73:12:b8:21:ec:e6:b7:0f:3c
Serial Number (int): 185035734592145129097887258755378646844
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:a9:74:2a:9e:5a:cd:20:3d:3b:fe:2f:02:bf:28:bc:ce:68:ac:04
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9f:f3:53:5b:cb:9f:67:47:ba:57:53:45:58:76:d3:d2:30:14:6f:14
Fingerprint (sha256): 0f:b4:d1:30:4c:e0:5b:a1:7d:91:f4:f6:1f:3b:4f:d1:c4:36:00:bc:f5:d2:1a:2c:ee:84:fa:02:8c:a6:e8:6f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/0InbIhoO1Ho
CRL Distribution Point: http://crls.pki.goog/gts1d4/dRsonNL9RPg.crl

Check the revocation status for certificate sawa-usercontent.mailchimp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sawa-usercontent.mailchimp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sawa-usercontent.mailchimp.com

Other certificates including the domain name mailchimp.com

(limited to 100 certificates)
images.e.mailchimp.com
mixpanel-be.mailchimp.com
templates.mailchimp.com
patreon.mailchimp.com
beacon.mailchimp.com
square.mailchimp.com
live.events.arbinger.com
googlemybusiness.mailchimp.com
sawa-webcomponents.mailchimp.com
tasks-api.linkedin.mailchimp.com
gallery.mailchimp.com
delivery.mailchimp.com
*.admin.mailchimp.com
gtm-shared.mailchimp.com
offers.mailchimp.com
*.admin.mailchimp.com
raven.stage.mailchimp.com
delivery.mailchimp.com
*.api.mailchimp.com
elevate.medallion.co
beacon.mailchimp.com
sawa-usercontent.mailchimp.com
beacon-shared.mailchimp.com
delivery.mailchimp.com
ls.mailchimp.com
offers.mailchimp.com
templates.mailchimp.com
marketingsuccess.mailchimp.com
admin01.mailchimp.com
live.xentral.com
shopware.mailchimp.com
oktascim2.mailchimp.com
demofest.consensus.io
gtm-preview.mailchimp.com
tasks-api.linkedin.mailchimp.com
tasks-api.linkedin.mailchimp.com
sawa-prod-usercontent.mailchimp.com
designsystem.mailchimp.com
gallery.mailchimp.com
templates.mailchimp.com
rhesus.prod.mailchimp.com
wildcardsan.us15.list-manage.com
oktascim2.mailchimp.com
tasks-api.linkedin.mailchimp.com
*.admin.mailchimp.com
*.partner-api.mailchimp.com
delivery.mailchimp.com
googlemybusiness.mailchimp.com
demofest.consensus.io
avarice-dev.mailchimp.com
cdn-images.mailchimp.com
partner-assets.mailchimp.com
go.e.mailchimp.com
gallery.mailchimp.com
go.e.mailchimp.com
sawa-prod-usercontent.mailchimp.com
*.admin.mailchimp.com
cdn-images.mailchimp.com
*.mailchimp.com
globalevents.braze.com
partner-assets.mailchimp.com
tasks-api.linkedin.mailchimp.com
data.guides.mailchimp.com
rhesus.stage.mailchimp.com
wildcardsan.us15.list-manage.com
partner-assets.mailchimp.com
mcmta03.atl01.delivery.mailchimp.com
*.mailchimp.com
*.admin.mailchimp.com
templates.mailchimp.com
eventbrite.mailchimp.com
partner-assets.mailchimp.com
googlemybusiness.mailchimp.com
mailchimp.com
*.admin.mailchimp.com
sawa-usercontent.mailchimp.com
wildcardsan2.mailchimp.com
*.delivery.mailchimp.com
oktascim2.mailchimp.com
*.partner-api.mailchimp.com
mixpanel-be.mailchimp.com
intuit-op-scim2.mailchimp.com
sawa-usercontent.mailchimp.com
attend.intercomevents.com
events.nasuni.com
downloads.mailchimp.com
postcards.mailchimp.com
raven.stage.mailchimp.com
delivery.mailchimp.com
magpie.prod.mailchimp.com
*.mailchimp.com
go.e.couriermedia.com
mcmta01.suw01.delivery.mailchimp.com
data.guides.mailchimp.com
*.api.mailchimp.com
status.mailchimp.com
mcmta02.sea02.delivery.mailchimp.com
admin.rsg-mailchimp-us21-prod.pando.run
irlondemand.radar.com
events.nasuni.com

Certificate

The complete raw certificate details for sawa-usercontent.mailchimp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9u8/I2FkOTQZdbGWe7k
l7r1KWSZKYfmoIDzJCSF4S4miw3YicEz444oajlbz0riyB/WN53nYm5OSYeRCa7u
0oJDsYzR4iEFKPQczbBdqSXj4r4kF3e7Kb6m75kEycwGOyX1fp6xdXlHvi8g8FnY
Kq/5YxLUV1Ikw8xI5fp6HBK78AabN/Zu8mTP1jKV8jaibY/LGZ/wVu9XMX1afBrG
ko25ULsbfqNE51Ym2vq9KHuAWa33MhulNxBiAQuXLBJxMXHEjkVNkakGC22xw8OJ
17rxKLBMNYCRMOg4QcN00bj8YwrJrxCF9h7QZogETYk4AThtSyebITT2MMjpb3RB
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185035734592145129097887258755378646844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 08:14:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 09:07:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sawa-usercontent.mailchimp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21190153888398372257734668416029434423041223428442292434678653143247309530341475304264640646297901485820346838661928639070509623482460956447078528899047500717046435015865991169344604708315557325498976138054510628457328607388574251723960781233937016332707431030767705356540099459765709529473783279752763163290563764430988321463723899495103966603798910392475051819560000082013413961377786711559837434874912368628221180892885306192907944628099494007749575664189907182721718891527705446494717643666216930762051242518944589218856084687401978010521089386381628457752378351373506668304936527471672632079442923675608719573441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eba9742a9e5acd203d3bfe2f02bf28bcce68ac04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/0InbIhoO1Ho'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawa-usercontent.mailchimp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/dRsonNL9RPg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f3dbc0e05000004030047304502207fafafec19d2fa5b35b01674c8b2645898418cfb3169794407431f0404546c39022100d40fa3b20bb2a30e83b4b80023764953a8d7b6b4b6d932ea5d9288d441536e1300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f3dbc0d680000040300483046022100a77db475b4845a9c6b125d28da9bbaa9fde0d3bb0001538a4d2dca1e9316adf30221009b06355596988217132c461a9919616d8c1f22163ad4c0ea639fd73a48a99f87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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