*.google.gy

- Google LLC -

Issued by Google Internet Authority G3

About this certificate

This digital certificate with serial number 02:ea:a3:2d:50:c8:41:b2 was issued on by Google Trust Services.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 0 embedded SCTs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ea:a3:2d:50:c8:41:b2
Serial Number (int): 210159747650306482
Serial Number lenght: 58 bits, 8 octets

SubjectKeyId: aa:11:86:92:2d:a2:0f:7f:1f:67:71:e4:be:2f:1f:e0:87:d7:f3:88
AuthorityKeyId: 77:c2:b8:50:9a:67:76:76:b1:2d:c2:86:d0:83:a0:7e:a6:7e:ba:4b

Fingerprint (sha1): 3f:5a:b1:2e:cc:ae:2f:fd:a9:fe:c6:3f:21:1f:6e:2e:8f:bb:d8:0b
Fingerprint (sha256): 12:93:ea:2f:cb:eb:a6:c9:8b:4c:0a:94:12:64:f2:7c:44:5e:4c:bd:7b:47:00:3b:51:7f:06:85:b1:d3:94:75

Issuing Certificate URL: http://pki.goog/gsr2/GTSGIAG3.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/GTSGIAG3
CRL Distribution Point: http://crl.pki.goog/GTSGIAG3.crl

Check the revocation status for certificate *.google.gy

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.gy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.gy
*.google.co.gy
*.google.com.gy
google.co.gy
google.com.gy
google.gy

Other certificates including the domain name google.gy

(limited to 100 certificates)
google.com
*.google.gy
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.gy
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.gy
google.com
*.google.gy
*.google.gy
google.com
google.com
*.googleapis.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.googleapis.com
*.google.gy
google.com
google.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.gy
google.com
google.com
google.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.gy
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
google.com
google.com
google.com
*.google.gy
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
google.com
google.com
google.com
*.google.gy
google.com
*.googleapis.com
*.googleapis.com
*.google.gy
*.google.gy
*.google.gy
google.com
*.google.gy
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
google.com
google.com
*.google.gy
google.com
*.google.gy
*.google.gy

Certificate

The complete raw certificate details for *.google.gy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PVJ9LC0Bqg5YKI/7f8C
SxaGD9J1Y6DBauEo0BFhyTlwgjIDUoUjWge2Vl776SzJ/mOVYnD00kCk9lhm5Zzu
Mhtiqm576i8+hL9CGWtvSuM1/LRnys1m0MRJK0csN3Bhpzy/IqeLxmo7N3npcH/A
LgB2qXqS6a/NNFHFTdMHaMtE3lrG9pOPfdWo2WUlKg6JUPWQ8FrEr+wUgavs4Usx
FNhSvNXNgJIFKyLUce/Uv9P9W3+24xrO3WKknLEYjpVYHsWdAd0TSS8qEx+CnTHQ
JWiQsE6lrvDVCphgkAbVSE8ooM9DhjHdw8/nQ4SW9od/uoTHw8QnP0W1Z6L7qW0L
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 210159747650306482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 14:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 14:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.gy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28398336772129059046133990346943725103398329968590947972551661896009011422943506177961262780081830372903319844408606018596948377998240119319899709573920654210108598300755346011576627460918706736030814735107010248478333623612077364950958180731012666917805849602298633942080026478518012246035347015864137011006926997797811212793236955246212449066663382793958014199221769766599432783863941670604985170912519554220696140255180498358181081738184003042908231079437693056241319361894538558250958100686427039149504369820888859114467742112466577706603197630109466766070657449763843837255426106409506861366708791853014894578497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.gy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTSGIAG3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/GTSGIAG3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa1186922da20f7f1f6771e4be2f1fe087d7f388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 77c2b8509a677676b12dc286d083a07ea67eba4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTSGIAG3.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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