api.next.ricohspaces.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 8d:61:85:5e:9c:58:4d:65:09:c5:47:e4:cb:0b:f7:4b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.next.ricohspaces.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8d:61:85:5e:9c:58:4d:65:09:c5:47:e4:cb:0b:f7:4b
Serial Number (int): 187927505257261990862718670881539487563
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 79:6f:b1:aa:2a:3b:cc:0b:3e:b9:7e:39:20:7c:fc:fe:2c:ba:d8:9e
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): bd:92:08:08:dc:37:52:6f:b8:f9:60:a4:c1:94:7c:72:68:b1:7e:bb
Fingerprint (sha256): 10:27:67:46:cc:86:63:cf:64:5a:b7:05:06:d3:58:42:c9:0a:14:4f:be:bc:9d:68:20:82:26:ee:6d:ea:3a:98

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/8BmcRT90Gr0
CRL Distribution Point: http://crls.pki.goog/gts1d4/oZuavMRg6V0.crl

Check the revocation status for certificate api.next.ricohspaces.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.next.ricohspaces.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.next.ricohspaces.app

Other certificates including the domain name ricohspaces.app

(limited to 100 certificates)
canary.outlook-addin.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app

Certificate

The complete raw certificate details for api.next.ricohspaces.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp9jaIVx+GL5TTrhtowV
IepiFouSxRAQoLNM9SOGo7cbBkznKKRjZBI4fyIQsuBGjUAY41xblrjRnSAfxtNt
CNI+GAqWEufQ/nDZAiWttf9KjFPIeTr5g+YiG4Lf8YYAVJEuyRDUMEKB2U7gyAhy
XWjqZowPETpwoEN6P9DfFAF/DOSmK1dfBd57ITspcsC+htP18+ZHV9WznmFWM9Ua
PDMvzrt44VS8kgysCa5oWn/xoL+YsLEQmkxqnoKmHQiZZjiHm6jIInSbw+4wA6Rb
9Xs7121pXrINVhU2BFEI8RTBfj1wLVQa9C4+F1QCdWadfEZXw1pitxdwXCk6sogv
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187927505257261990862718670881539487563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 23:36:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 00:23:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.next.ricohspaces.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22549015590765219534855460418943827906120100364929023313348806462045727590198254587657175663380834470193897166881415374111929868133930454339459948424907937961132651318367556598229190971297466935356390327835162286889553960051966413541678060234495633040809233884623138268889901009312252982763757732299603863250321607565296824267090439293097672539206885682256013339590430374660106316231861072874691786599198824747004122778600075353102464732795191308683039927089948432052428183818701241547846321345514613112988191565748182432138224406317293451875626744237930209324392501290415364712475873302961151349579318734368769847053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							796fb1aa2a3bcc0b3eb97e39207cfcfe2cbad89e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/8BmcRT90Gr0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.next.ricohspaces.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/oZuavMRg6V0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001875924fc2700000403004730450220789b278727ef5f742fd34933a4aa8519f4e0cfed6c70e74b00f7311bc22291d3022100ee55bc88c5000fe0abbce4c3b91f356ddd5a216ee9f5d3edda341fd0fe0b2fcf007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001875924fc100000040300463044022039190f6109f1d8337e7f16d063490f5b5ced98548006959920e5078beb84b92e0220028a75d01a48c500f03a2cd564d817c064057787bcdbfac0cba98939a9c6699d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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