www.amazinggrace4u.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 97:7a:ba:38:c2:29:63:87:09:00:00:00:00:04:f2:68 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.amazinggrace4u.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:7a:ba:38:c2:29:63:87:09:00:00:00:00:04:f2:68
Serial Number (int): 201350664605317053657843261602475078248
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 80:41:15:c6:dc:c3:c7:b3:8d:d9:e4:02:6c:23:eb:54:a0:15:50:4a
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): f1:42:87:09:7a:d6:b5:77:bf:40:67:cf:9d:7b:29:44:bb:62:36:54
Fingerprint (sha256): 11:72:17:dc:83:b4:27:09:3d:19:03:10:1b:e0:f6:56:ed:f7:32:31:f6:b2:00:ca:9d:e2:07:7f:4a:7d:f1:ae

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.amazinggrace4u.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.amazinggrace4u.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.amazinggrace4u.com

Other certificates including the domain name amazinggrace4u.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.amazinggrace4u.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfDzrl5pXfnmMuPFOl1K
svREG/CAe1bG4XRXA2HG+tYR1YFlnH5tKJGkBDfCruKSTRfuK0dL1RMK2gdo9WQ7
BzZ53SN6CY9lE0UIC0gObdaDp8ZsLwLfcSKim0S5kkbVeb/L8t2+MvKdPzMrzQUf
o3QKDTITcAAd3/MLHNwubsxYrlGY8sNFhZQ9hW6kdYo3mi9saRMi5bEbB8tNHp7n
urLzONNBW5phzubuJx+tDS1qsZ+XnOjQfOt2qO5/gcyXFgpZL8A8v28sHi63pGrl
7IyI+bxGPzzoZUcZyFTsz19bgJIOzldpfIJ83HIFqrvLeCkeju+hXiZ4PtI9Mgk5
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 201350664605317053657843261602475078248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 08:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 08:13:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.amazinggrace4u.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22967950998992093851433801810282474404894866692811827859963360911904004963820760845656467130079376144407654140772011419273442610366578855723386442561764955893034917111627349474816918282674009075578053644776582125701274712333679699883037734140508613812488225488437715512311790317637307510768177140558213138652490213304970440322334301809402708774316667847812849467771022269167555055782212340024100224743160171653839858334860701884402127691018571714434437303252536264328671641100121139561752134266345157643722643231553936811710499154339849808104770006385471923815317814878590046736286045511790124063448773583261965826529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							804115c6dcc3c7b38dd9e4026c23eb54a015504a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazinggrace4u.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5b3b033b000004030046304402205182d072bbc9d151703537805db426d7b7bc8bf0ec8ee8ff6a790dd2b398e3a1022023fd8d61e9ea4f4bef2e181afafb5367e13116d0a9113cd792cd84c6682b56210076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5b3b03860000040300473045022100d409d4970616965aa9c14d97bfad32746435c8fde73b194e6ed0249cc8eaaaed02201d6faf759ae889eb89d00f439512c2df2b7fb43ef0a61b66e9e26b77ef21b60f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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