mycare.staging.awellhealth.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 71:aa:5e:55:00:ea:ba:62:0a:57:48:00:c1:7c:fa:ce was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mycare.staging.awellhealth.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:aa:5e:55:00:ea:ba:62:0a:57:48:00:c1:7c:fa:ce
Serial Number (int): 151087367270826740114950628316366568142
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8a:7d:b5:20:bc:09:ce:69:85:17:b1:08:19:77:41:52:25:14:2d:68
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 84:14:84:bc:7e:11:35:5b:6d:0d:aa:9a:c4:9f:e2:84:52:ba:cb:e2
Fingerprint (sha256): 11:e5:f9:f7:a2:ae:34:d5:73:da:4c:ee:81:5e:b2:42:ca:17:55:64:bb:24:8a:0d:0c:07:a5:2c:a3:1e:04:cf

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/oYA3sAHbMeY
CRL Distribution Point: http://crls.pki.goog/gts1d4/14ud8AuodEY.crl

Check the revocation status for certificate mycare.staging.awellhealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycare.staging.awellhealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycare.staging.awellhealth.com

Other certificates including the domain name awellhealth.com

(limited to 100 certificates)
sni203858.cloudflaressl.com
campaign.influence-plus.com
photos.bluebottle.idv.tw
sni203858.cloudflaressl.com
macaopersianasyhogar.com
awellhealth.com
www.equix.app
awellhealth.com
backoffice.prexto.mx
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
darkrainbow.app
yobi.chatbot.gallery
awellhealth.com
sni203858.cloudflaressl.com
awellhealth.com
totat.nl
sni.cloudflaressl.com
warfronttostorefront.com
sni203858.cloudflaressl.com
signup.staging.airpayapp.com.au
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
blog.pluser.net
assistenterh.minervafoods.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
newsy.madhive.com
explore.photos
app.iclapsu.com
sni203858.cloudflaressl.com
mycare.staging.awellhealth.com
sni203858.cloudflaressl.com
app.ungcash.no
geo.sunbowl.ca
hosted-pages.awellhealth.com
www.joeyyang.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
evedownunder.net
sni203858.cloudflaressl.com
plataforma.geocab.com.mx
ava.staging.awellhealth.com
mbb.rideout.dev
sni203858.cloudflaressl.com
mysterytour.dev
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
deep.overd.it
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
safeentry.grasppsc.com
sni203858.cloudflaressl.com
radiantplatform.org
sni203858.cloudflaressl.com
busyvisy.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
www.cdc-jp.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
awellhealth.com
smart.doremeo.com
aig-costco.affinity.do
www.kdmservices.in
cktholding-portal.hermes.aimgt.info
studio.awellhealth.com
dashboarddemo.insideinsight.co
ava.staging.awellhealth.com
leaderboards.perkupapp.com
sni203858.cloudflaressl.com
psitairini.com.br
newsletter.krea.digital
ava.awellhealth.com
crownstore.in
sni203858.cloudflaressl.com
pmstaging.planetbinc.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
awellhealth.com
sni203858.cloudflaressl.com
www.emojiit.com
www.subastagram.com
sni203858.cloudflaressl.com
darkrainbow.app
www.awellhealth.com
www.alls.et
sni203858.cloudflaressl.com
sni203858.cloudflaressl.com
quiz-app.joistic.com
awellhealth.com

Certificate

The complete raw certificate details for mycare.staging.awellhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32BMYiQmXEVLxjQlIOdg
lIjr8llJQ/IuUI+1GLaV9tKJbuRk1Qu8tA8Jg69l2LlDPq+uCD5LE+9RleU3OWfp
TFRiMh2Sc1DJMMLYRUpudP8ay6ho/hNZH4RmsWJyUFOrGU1ypfjqy5VCGOeEjaks
Gm8/uEFGr8wiA8hqQKQwvuasrQLL8w0PAba7dpWMCDpR6Ub25GInMR8iH6n1KWyX
+uu4BBeIFynXRBYcJMgVfjVd+ltyf0DHFDybaAm5ED+1nCh2Cok50g77hvrSXaAl
6FQwmEzIgCpEg+XBf163RcTca9UhRd4N587YSM07BEk2UlB5Jf9LTG8ILGkUaE0O
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151087367270826740114950628316366568142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 16:52:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 17:46:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycare.staging.awellhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28198628504764718515038561325021836839161128037082340499196990342612331010674727218999773088789439462888485072294669819314167858300855120369637666260259027521105448080031581306869061149180648510044947529507547761556360443192718232969969305070968398049833518075606018493032431083141029489280880863078804081354308992289504310239763304617135260493419561542424419715418386377543685156535280651716355454521910147304231901394859048096803499951481237333060858614244489878302892765522561767637383561940658097696371237034675292049203075876256110955477227847541132921911857406604266315812843752659110540722410620233196694736399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a7db520bc09ce698517b1081977415225142d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/oYA3sAHbMeY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycare.staging.awellhealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/14ud8AuodEY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dbd593e43000004030046304402203f2cfa5259a7dcbab3b27cbcb8f54cc585e29669a8d9a5d31384aed8a9d866a4022062d0ecfea5fe67c659a6e55152cc5ae8e56130165967e090febee1f5590e66e500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbd593e350000040300473045022100b2cf331e7b8711d40ed613cc0041c0748df686b915c0c3c54160d864c0ac97f202201f1bccec2a352db89567e85854f01953fb54b56841f6018f8e581fc86f76c1bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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