goerli.explorer.zksync.io

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d5:5d:ab:84:e8:1a:b5:12:0e:b6:2e:83:d2:7e:28:e1 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goerli.explorer.zksync.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): d5:5d:ab:84:e8:1a:b5:12:0e:b6:2e:83:d2:7e:28:e1
Serial Number (int): 283611925532023305647796212267348797665
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ae:8b:1c:26:78:8b:19:f1:ab:1f:fd:e7:21:56:2b:98:ae:f3:43:8d
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 36:f4:c1:8e:4c:66:4f:1c:61:e4:c3:28:17:91:bc:c1:e1:00:a7:1d
Fingerprint (sha256): 1f:d1:08:fb:f3:71:e2:5d:91:1a:5f:5d:74:33:ba:93:7e:3a:b8:a8:2c:04:e4:17:9a:01:03:d6:8a:76:23:5e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Lz3iMJMpHiQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/le_7YNi7t64.crl

Check the revocation status for certificate goerli.explorer.zksync.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goerli.explorer.zksync.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goerli.explorer.zksync.io

Other certificates including the domain name zksync.io

(limited to 100 certificates)
rinkeby-beta-api.zksync.io
www.vipmarket.in
www.holtmon.dev
beta.bulletjournal.app
zksync2-mainnet.zksync.io
zksync2-mainnet-explorer.zksync.io
snm-tech.com
link.psu.care
jeroboam-ficheinteractive.etoh.app
quadrakaryasantosa.co.id
api.zksync.io
www.wardrombaut.xyz
bridgesroyalecommunications.com
api.zksync.io
block-explorer-api.mainnet.zksync.io
portal.zksync.io
api.zksync.io
www.glam.fit
nhyrob.com
api.zksync.io
appointment.garethpaul.com
api.zksync.io
link.zksync.io
hyperpolybook.app
torappo.jp
zksync2-mainnet.zksync.io
application.decision21.org
goerli-api.zksync.io
rinkeby-beta-api.zksync.io
markusraulf.de
goerli.portal.zksync.io
ropsten-api.zksync.io
beta.iamvery.ooo
lite.zksync.io
goerli-api.zksync.io
www.icarusai.net
theretardapearmy.com
console.redoos.com
v2.zksync.io
www.medie-darius.com
skmseller.smartkidsmarket.com
sepolia.explorer.zksync.io
link-dev.flextechdev.com
www.howmanybabieshasmattiedelivered.com
rinkeby-api.zksync.io
auth.falamed.com
zksync.io
rinkeby-api.zksync.io
www.imagarena.com
www.rentalsub.com
alldone.app
wishlist.kotary.com.au
graph.mainnet.era.zksync.io
www.uleague.co
ppwlocker.com
southcrypto.io
agent.ihflmicroatm.com
zksync2-mainnet-explorer.zksync.io
zksync2-mainnet.zksync.io
api.zksync.io
nfcschool.com
rinkeby-beta-api.zksync.io
zksync2-mainnet.zksync.io
rinkeby-events.zksync.io
dlinks.cravedelivery.com
zksync2-mainnet-explorer.zksync.io
mirabella-enroute.com
lite.zksync.io
www.mountainpinesplumbing.com
www.betty.social
lite.zksync.io
wa.conan.conflabs.com
download.vocepede.online
www.app.smartimob.io
dtwofood.piticommerce.com
www.jodios.com
out-of-gas.zksync.io
www.uat.allez.app
mirabella-enroute.com
goodbiteapp.com
mssworldwide.com
goerli.explorer.zksync.io
zksync2-mainnet.zksync.io
jeroboam-ficheinteractive.etoh.app
beta.bulletjournal.app
ropsten-beta-api.zksync.io
bridge.zksync.io
venturiautomation.com
connection.bizzare-tech.com
api.zksync.io
app.doitcare.com
oyanow.eddress.co
rinkeby-beta-api.zksync.io
www.lizzrobbins.com
bridge.zksync.io
zksync2-mainnet-graph.zksync.io
nhyrob.com
www.nexusedu.app
remax-energy.com.ar
kakeruc.com

Certificate

The complete raw certificate details for goerli.explorer.zksync.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7zCxp79D7EhCt1n0tGw
YndttR1XAe6TfpFal9Dm4Au+erFWT/2uwAVmYXEAuSVQZeFnHcjUFQZvo6vG1v3R
zwZP5pJpEBpS/KpTff8+IHkRxdiKMqaXQBEYQXAczbJKP3Esp2Wy04Vfzqg+DmkF
vZ6Q2GVAuzX4koeyd9v6HDJpg/miK54WmEXXSMxTKIx5xMnuDxEgQ/hZP14lTVfp
rsCeSG8p56rfLEGsj8O8Beth3IfLGSQhSmn6tI/ZEuDU89rWzpRRWBa19UfahSM6
QIUrd05IQdXZUm7NeoJ2L6vAYU3XC+MRvxVlOHs12lLtJNXneOQq01AvUCI1CR7t
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283611925532023305647796212267348797665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 09:27:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 10:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goerli.explorer.zksync.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24709550909364395103459312415595466821654557284875881010105264299965202483745422976292942159848588396334569126416066480644705462409331405591385265407682662028173001815471286491121125618427892417863294750363527748986121949403812886451336462612024284062412855644859143745798840647572232651614576145925054223629756773145698495336978709050152730876024997257522716695944164199418564130240677617528665875856727268779027445454838382543353706702168533895382617507097816022881067092310395919218318773040649439928932113825105935937231754681360263529291261295769218495542551142909895108123985105520703826161834280778462413123039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae8b1c26788b19f1ab1ffde721562b98aef3438d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Lz3iMJMpHiQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goerli.explorer.zksync.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/le_7YNi7t64.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e993370f60000040300483046022100991904f5ad55939a91f7877838bb8f2d395434a1b605164ebb8f39cb1e7643fd022100e0cc316251722d1b707b5beadc65b5ff817aa6c1dfa46ea26864b0f94574a880007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e993370d800000403004630440220374b0aaf79dac7bdc2efd662adcf690a726070c1ac302a6b77d1c2e228a0608502200e65fae6198adaba783bec059e604720c44dd5aae8f0c7c402b5ec036b375898
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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