hsti-10.log.staging.iota-app.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number af:c8:73:07:59:d1:1c:c7:10:32:c0:5d:3b:6d:de:d1 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hsti-10.log.staging.iota-app.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): af:c8:73:07:59:d1:1c:c7:10:32:c0:5d:3b:6d:de:d1
Serial Number (int): 233655691693565768094551418295999651537
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 05:c0:c0:b5:06:76:ac:b7:ab:78:9a:ec:94:b3:db:95:c4:ff:a8:c6
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 00:f8:ea:8f:e6:02:cb:41:e4:ad:35:47:43:b7:73:b6:2b:cf:91:0b
Fingerprint (sha256): 1c:c6:c8:d5:61:84:98:00:77:07:77:2e:59:3a:fc:15:0a:58:bf:16:2d:5b:f1:6c:50:43:8e:a1:a6:ee:b3:33

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/tua26HfDjx0
CRL Distribution Point: http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl

Check the revocation status for certificate hsti-10.log.staging.iota-app.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hsti-10.log.staging.iota-app.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hsti-10.log.staging.iota-app.com

Other certificates including the domain name iota-app.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hsti-10.log.staging.iota-app.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRA+cyGpb1hgp5LCC+OG
AvEbrD/8tCQ8oPU/eo+KobIF8hk7R75lQjaGgNv2sMgvN62Kv3Rm3gaF17+3+/fd
JysHv7xXqozhjp3WhaZXq43sjxBNOwFmHpoOlQ6+8qpO4v1+ry64iRcm101/TQXx
Pe2NCJCghij3I3s7zXRFqyNgE/zsii/CVW28lFMr5TetaRTi/Yi0G0N2oSr2+O9/
hh+kUHmu2dn8hwD9XpJ+fEEJIcGgaXk2qapmbQygYvqSl2RX/TSBxb92+AjvtY/0
N7JmnIB+CRGz7fBJsXpMio3pajNSCLEjbD73JTtR3f7ia2pA8ZP66US4s+jrJX7q
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233655691693565768094551418295999651537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 10:43:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 11:30:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hsti-10.log.staging.iota-app.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23867049826046984000328849287216724118423200060556622816652914143524203703319288521157380681598572026817099414173136231686224625820426407234291464096602534361955530044075936886919077065010346341936259443816561592236371718538179753812474033035105787277771180733569426194035606918078951290419527126931375939188321249115643696300093649749838984144915592663892300503543753549170575080406263974835207669833950155496250914342499731201172928908775728338169147744550881773741649692803545174018378776529800582539436417850013943815307886286839737533793864548566621924517491030471404589494901497847078515559585995548350287374857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05c0c0b50676acb7ab789aec94b3db95c4ffa8c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/tua26HfDjx0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsti-10.log.staging.iota-app.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018de539ba0000000403004830460221008a4ba2e1c1cdc18ae8dae6d90d0e9c7aad7075baf9c929432010eb2062413e26022100bb030b5a379f9e04841cd22bd44d40fe7ec9c3dba976142e9cf7b9e2cb017a2a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de539ba22000004030047304502210091300347939808ee24d28e925b0827c87d9b7a80ee1181e9371a18e2202630fa022041bc77100c2368615d94872b5c9fbfaa4635e23e6973f326aff030012d3065fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ac770f1815e517b49367c491b2ed7b153f31290630a4fdb0ba1aaf766c822664466e942008e3eb6d83c4fa6f2b1e33f9c9f1499180c34d07040abcde4891e0f86bed3dbadc98c803beb9fc8e3d07fa9efc8f4af8378eba1778880dff2f018d3701a0c1553fd76d74d7ee67a81bcc6c78ec01434265d1bc74293d2df950ae3448e1704eaa0c2ee8e915ff7e14996f86222dc2452f037520c6213392ce0f012dc061ddbffa9753cddde69e697259f2472b7d295eccf638a8f7d4e566f0d5f2a05d51d495e393f1a5157dc3767c6dc67ada576ad7e872ce45202000b7852e941306a8722ea9372133c37613f036f7e1fc6392240d9b5b770d76fc8e7ff0e19d505