idantours.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 96:d1:27:bc:bd:dc:ac:5e:0d:55:9b:c9:a9:65:f5:dc was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=idantours.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 96:d1:27:bc:bd:dc:ac:5e:0d:55:9b:c9:a9:65:f5:dcSerial Number (int): 200470195378799699525315212604961322460
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 75:e7:aa:99:d4:5f:07:af:41:2a:76:cb:25:8d:0f:87:de:f6:c5:13
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 43:cb:33:ed:ae:97:22:c4:69:9c:18:f5:b9:94:d5:fa:80:1f:17:3f
Fingerprint (sha256): 20:c1:35:28:1c:4c:b2:1d:ff:88:dc:c0:4a:e8:fa:21:73:84:3a:11:63:ac:ed:30:b9:9d:f1:f4:6d:d1:27:db
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/JMGmp7R9kAECRL Distribution Point: http://crls.pki.goog/gts1p5/N872v9Ue4Zc.crl
Check the revocation status for certificate idantours.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for idantours.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
idantours.com
*.idantours.com
*.idantours.com
Other certificates including the domain name idantours.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for idantours.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIRAJbRJ7y93KxeDVWbyall9dwwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMzA2MjM1MTA2WhcNMjQwNjA0 MjM1MTA1WjAYMRYwFAYDVQQDEw1pZGFudG91cnMuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAkek+8LU6BTC1bU6o/K6uC5Cay8qq8q9gP+lv/vjl uuHR25WOOYuqp5/Hp7h2MjcyZYmWt8H6DxE/RbdeuyF32KnWrHs3NLwVpGOdZa43 aHPzf0Milz3XyTh+nEoz+gbbb6MpoYvs/L8qSYlbP89C9Dr72M7uSreUG449ucpD 6ucyCPnByTGhWIyD+Y+M7yGhjXHYlwlLew4bxFKeuGrtnxI4/7fIjLcWRskReM5k tnjHtHLCaGCFdgbxCue9q7zme66pcMVDQaho3lnZtxDwerAbHEeyF93M5RtdAJls GfxMhyFL4R4TU56AQKDUzbQH3nmNt+5O5IYUnhD/RU7plQIDAQABo4IChDCCAoAw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFHXnqpnUXwevQSp2yyWND4fe9sUTMB8GA1UdIwQYMBaAFNX8 ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvSk1HbXA3UjlrQUUwMQYIKwYB BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwKQYD VR0RBCIwIIINaWRhbnRvdXJzLmNvbYIPKi5pZGFudG91cnMuY29tMCEGA1UdIAQa MBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0 cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L044NzJ2OVVlNFpjLmNybDCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM Wjp0AAABjhZkeqkAAAQDAEYwRAIgZckhERpHyLmBhnYLtv9TSt0quk0aP95o83pa elN4R0ACIH8mm++PHYcWWKruCiJgvWoCKGui8DcTbcf0g6SAvJKYAHYA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGOFmR6sAAABAMARzBFAiBMbPgU lG5QHFGJZm/S7ipdVSkn6Ag7HPWkVkJ5fKavqwIhALPOKks1zbBOPQYmPp/+7Yy0 Tk8wlD5b4c4mEnrFHgIQMA0GCSqGSIb3DQEBCwUAA4IBAQB1hM94p213+AeCzcb2 YChhIdTzTqURMujbr5dFYR7DZreH8EQmZOcmRnGBUzWWP+erKRB30HX7Ebow2uRw 0etY2QPYdzbUAen6jG/fUh0UHiLSnYvO9XWP/Jfiz80OWOfhoagCDjwF+OJfmZB7 6SYpnx91Sb3Vnfe7f6BpLDFV8rdEHGg29yhQUJD8j1lNPhtst8Z79ul/pqgI2Nio NyRz6VKZAB9GHMKnBK17YnNVtACJJqtW3z1+1Qio8HOoPXGhxgLx5urrWyKGdvNj JToNGuKmwIH49vg3IqH4LVTID71pK7DjqpE01SRKbGoUBCvUgdVQfsrqEX9PaZlg B1/Y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkek+8LU6BTC1bU6o/K6u C5Cay8qq8q9gP+lv/vjluuHR25WOOYuqp5/Hp7h2MjcyZYmWt8H6DxE/RbdeuyF3 2KnWrHs3NLwVpGOdZa43aHPzf0Milz3XyTh+nEoz+gbbb6MpoYvs/L8qSYlbP89C 9Dr72M7uSreUG449ucpD6ucyCPnByTGhWIyD+Y+M7yGhjXHYlwlLew4bxFKeuGrt nxI4/7fIjLcWRskReM5ktnjHtHLCaGCFdgbxCue9q7zme66pcMVDQaho3lnZtxDw erAbHEeyF93M5RtdAJlsGfxMhyFL4R4TU56AQKDUzbQH3nmNt+5O5IYUnhD/RU7p lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 200470195378799699525315212604961322460 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 23:51:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:51:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idantours.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18419572040620201536474743875660086932321905763248869706079516732460480313156101187183214919946979922735384864276166997194967734257479186042011861815673909568368754760518368314087428963362758512470963256148248398116672225583010014975607540855937654017179169324219201363129425719102294948706674398579277704969754646497880034844712624782403204117700621962072186584458345753767982794522965828017039586372752847749206920140834445953158760766288479265129433019861332408235066622978016690418063859435595290906574665037639403062384338516420481016934797684943445818107709998205317399903181859879679678792801607278020040518037 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 75e7aa99d45f07af412a76cb258d0f87def6c513 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/JMGmp7R9kAE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idantours.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idantours.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/N872v9Ue4Zc.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e16647aa90000040300463044022065c921111a47c8b98186760bb6ff534add2aba4d1a3fde68f37a5a7a5378474002207f269bef8f1d871658aaee0a2260bd6a02286ba2f037136dc7f483a480bc9298007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e16647ab0000004030047304502204c6cf814946e501c5189666fd2ee2a5d552927e8083b1cf5a45642797ca6afab022100b3ce2a4b35cdb04e3d06263e9ffeed8cb44e4f30943e5be1ce26127ac51e0210 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007584cf78a76d77f80782cdc6f660286121d4f34ea51132e8dbaf9745611ec366b787f0442664e7264671815335963fe7ab291077d075fb11ba30dae470d1eb58d903d87736d401e9fa8c6fdf521d141e22d29d8bcef5758ffc97e2cfcd0e58e7e1a1a8020e3c05f8e25f99907be926299f1f7549bdd59df7bb7fa0692c3155f2b7441c6836f728505090fc8f594d3e1b6cb7c67bf6e97fa6a808d8d8a8372473e95299001f461cc2a704ad7b627355b4008926ab56df3d7ed508a8f073a83d71a1c602f1e6eaeb5b228676f363253a0d1ae2a6c081f8f6f83722a1f82d54c80fbd692bb0e3aa9134d5244a6c6a14042bd481d5507ecaea117f4f699960075fd8