mavenoid.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ec:c2:b2:6d:14:90:c4:ef:13:de:9d:1e:b4:55:ac:f0 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mavenoid.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ec:c2:b2:6d:14:90:c4:ef:13:de:9d:1e:b4:55:ac:f0
Serial Number (int): 314708731506939782125867281350498036976
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 96:4d:fe:6d:2f:63:e3:1e:e5:e6:7b:7e:a4:d7:4a:80:ac:ba:cf:e5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 73:3c:9f:43:64:ee:a5:44:f1:96:dd:b0:6d:13:78:0f:b9:6a:eb:3c
Fingerprint (sha256): 1f:ec:fa:74:87:4f:b5:19:1e:d0:38:22:bd:79:f5:df:89:92:54:dc:1f:39:43:a6:30:94:3c:44:94:72:fa:dd

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/CC9fzDzvzfM
CRL Distribution Point: http://crls.pki.goog/gts1p5/67pKTmta1-c.crl

Check the revocation status for certificate mavenoid.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mavenoid.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mavenoid.com
*.mavenoid.com

Other certificates including the domain name mavenoid.com

(limited to 100 certificates)
login.mavenoid.com
app.mavenoid.com
cdn.voxedigital.com
blog.mavenoid.com
www.csaposs.com
open.mavenoid.com
ristretto.group
sni.cloudflaressl.com
app.mavenoid.com
blog.mavenoid.com
app.mavenoid.com
mavenoid.com
mavenoid.com
xorcare.ru
api.mavenoid.com
api.mavenoid.com
bsh.mavenoid.com
mavenoid.com
mavenoid.com
defa.mavenoid.com
chairside.app
delonghi-troubleshooting.mavenoid.com
ant-gravity.com
mavenoid.com
app.mavenoid.com
www.datalchemy.ai
api-open.mavenoid.com
mavenoid.com
app.mavenoid.com
mavenoid.com
alfalaval.mavenoid.com
open.mavenoid.com
api.mavenoid.com
swappie.mavenoid.com
app.mavenoid.com
chairside.app
*.mavenoid.com
nekotaro.app
www.botos.io
mavenoid.com
api.mavenoid.com
login.mavenoid.com
api-open.mavenoid.com
login.mavenoid.com
mavenoid.com
bestinterior.studio
mavenoid.com
blog.mavenoid.com
api.mavenoid.com
try.mavenoid.com
app.mavenoid.com
app.mavenoid.com
www.mavenoid.com
api-open.mavenoid.com
konecranes.mavenoid.com
support-kokoon.mavenoid.com
mavenoid.com
app.mavenoid.com
bsh.mavenoid.com
bestinterior.studio
mavenoid.com
markem-imaje.mavenoid.com
mavenoid.com
blog.mavenoid.com
try.mavenoid.com
mavenoid.com
blog.mavenoid.com
app.mavenoid.com
blog.mavenoid.com
delonghi-troubleshooting.mavenoid.com
app.mavenoid.com
app.mavenoid.com
blog.mavenoid.com
app.mavenoid.com
go.mavenoid.com
api.mavenoid.com
www.mavenoid.com
aprocanna.org
defa.mavenoid.com
blog.mavenoid.com
try.mavenoid.com
mavenoid.com
www.botos.io
open.mavenoid.com
api-open.mavenoid.com
app.mavenoid.com
app.mavenoid.com
blog.mavenoid.com
www.csaposs.com
try.mavenoid.com
api-open.mavenoid.com
app-demo.mavenoid.com
blog.mavenoid.com
markem-imaje.mavenoid.com
open.mavenoid.com
www.datalchemy.ai
api.mavenoid.com
app.mavenoid.com
mavenoid.com
blog.mavenoid.com

Certificate

The complete raw certificate details for mavenoid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iug6l+ou+Fw6JZX4V4/
Gn+SUaGYUygYk+FrAn8m9VS7DqCkcyyo/QRKJu7pWkyBjVqpIQoCTqREScyOeY6G
BExji5DH8HrvCl68D5CRK5OXR7Vd3JzTowUu2HvImdMHUUjushUbRMZV45a4CU02
wTi642BcUAV/yQWXereQ6pX/n73/KQ3TrK2u/Bm8YLZ5dmFICis/lHB4M4NBe9Xh
1ZIF7RCHh6+7MajEdpszcEjkHf7HIjklGKHybv9MT9iyndzaKs/2FxAdYiZhbxMb
KWN3752J8pPvXH5mzUEKXRizUfUGXqdKOI0VYcd3Upybc/TagXi18aD4nMIhlYMy
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314708731506939782125867281350498036976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 11:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 11:05:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mavenoid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26531558095665040530583079778823819252942373104597998095960990606981626032129727732713549446612501850917196343243546091557937433000068156648006894385701972540743934068838459325693564958545747017214717767164905143476077958898887469907305660629554878187990565751791600658950683828050856273925468814706355701960909361002962308348928735013035599764288282471241437705417399608458383816425187506518311006363676851221318712142160726759028813877136341662076559492907415898557087230914095568863030328026544106261336718391698063510428758609277595788579087727810427554672111798771791913322873599066266641692653368599582880248459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							964dfe6d2f63e31ee5e67b7ea4d74a80acbacfe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/CC9fzDzvzfM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mavenoid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/67pKTmta1-c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018852cc60530000040300483046022100ec3056a733b6e35363050fbe8977ae3ba99e825af81f22b1aa3d0e3e3b3a3890022100f0dae9bf6aa08d8e072ba9e22b593b17187b7cd45ffb99732a7575f9e3614679007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018852cc60410000040300483046022100a5fa3ae248ac7595c8e3b139f3b7d0804e98ba576f8ac9f75d0a32157efebbf6022100982d170be05fa4507c871b602846f3a045054b30b14fc122d574cbeda5724c59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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