*.googleadsserving.cn

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number d5:a3:a7:a5:2c:a6:19:33:02:00:00:00:00:40:a5:77 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d5:a3:a7:a5:2c:a6:19:33:02:00:00:00:00:40:a5:77
Serial Number (int): 283975307738997023632823223022381999479
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:44:6d:91:7a:07:20:e2:7c:ae:81:e7:71:0c:7b:15:aa:3a:01:44
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 0b:12:ec:e5:63:89:7b:c0:8c:dc:d9:9d:7c:06:5d:eb:fd:86:54:a0
Fingerprint (sha256): 16:d3:55:94:c0:52:32:f7:81:c5:06:df:54:43:8b:72:d1:ad:12:98:09:28:27:02:45:14:8c:c1:33:34:6c:ec

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.googleadsserving.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.googleadsserving.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.googleadsserving.cn

Other certificates including the domain name googleadsserving.cn

(limited to 100 certificates)
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
*.googleadsserving.cn
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
*.googleadsserving.cn
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com
google.com
google.com
google.com
google.com
google.com
*.googleadsserving.cn
google.com
google.com
google.com

Certificate

The complete raw certificate details for *.googleadsserving.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hnrrbZOqsr96ixZRVNd
E7UugJfiToCsmC00n+zo00dWKkI2aEK8PJXqRiv+Jhoe1rE2fu1IxSIb0Hddw3FV
HjHwCdJiA+ll6X1p5F1PCiCohomURCRSmf3gTMfYI/B2fCbuzYAo0b0u4OWEPHZk
XJMtPtp8gTn9Ff9qx8S4lNxzXHAXRD2KwqO/mnarHwT2bxRjhwOeArHqtxS61gGR
heuVU5OiosO9BAiJDwhT4o4V2LV2cMdZtGLMa75cpckr1RMCAqeVs98q3Qglzr8d
Bc43RGVfk8iILty8aK8sc2a0g9GGDd8pRv9mzftHHSu8y0ZOA/u+naKyb6UWJz+y
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283975307738997023632823223022381999479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 16:16:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 16:16:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.googleadsserving.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26522825976681172928422670819834304717337241424089532174682422233338443117493945588809332988833410666692992378144403062693570287360960083356443754899703964413799141901549670397588606982279143298628041135279759851026818722064429974160043544677913201657282861735103307804995246548903478661340137320846388629141503362242478273535028173623116484765871288999372599317934377896645716548181653246427812274207003434450914733646058845642313823557633876325133007923547389768905850263646480543409176476603194996029010896181100376798513304990600734314121518019748121894457646136303553560049416912456633458338538567175560180511441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06446d917a0720e27cae81e7710c7b15aa3a0144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleadsserving.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c8bfb5625000004030047304502202209e181a59b8913cf04183658119c9b2e60f227d1819a3f5115a7f1b768428b022100f14a4ba327cdd7afd452fd43f238a1eb9f2952cefafaaa905446b0c12e37e012007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c8bfb562700000403004630440220251085e54a05649ce546ecd0261713c5f53c129e66b9b45c984cbbef955e8a4002202297b0351a44bfa6d69ec13697fd46a9567baf72e828bded9ad8115b4472439b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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