okr-jira-prod.appfire.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e3:62:7b:3f:49:e7:5e:e4:12:ca:8f:23:9e:d1:1d:d0 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=okr-jira-prod.appfire.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:62:7b:3f:49:e7:5e:e4:12:ca:8f:23:9e:d1:1d:d0
Serial Number (int): 302246099885939919501825865158902226384
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 51:d2:ce:4b:72:e3:41:55:f3:48:35:57:f1:1d:06:68:ff:18:5e:51
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d4:62:48:73:17:af:02:58:51:74:a9:93:59:b1:32:4c:a5:ba:8c:27
Fingerprint (sha256): 21:35:fb:81:5a:b7:a7:dc:87:30:d5:8d:93:4b:bd:8c:82:d1:1b:20:86:8b:7e:3f:f2:b1:56:53:dc:f6:01:d1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/QLKgUL_TBAk
CRL Distribution Point: http://crls.pki.goog/gts1d4/ahcdHe_OD7c.crl

Check the revocation status for certificate okr-jira-prod.appfire.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for okr-jira-prod.appfire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

okr-jira-prod.appfire.com

Other certificates including the domain name appfire.com

(limited to 100 certificates)
feedthree.appfire.com
*.appfire.com
testslac.t.appfire.com
birdergame.com
www.appfire.com
brand.appfire.com
services.appfire.com
support.cbont.com
promo.appfire.com
imc.admintools.appfire.com
appfire.com
training.appfire.com
okr-jira-prod.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
services.appfire.com
testdac.t.appfire.com
*.appfire.com
okr-jira-prod.appfire.com
www.bobswift.appfire.com
testdac.t.appfire.com
brand.appfire.com
training.appfire.com
appfire.com
testjac2.t.appfire.com
training.appfire.com
*.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
*.appfire.com
x.loplat.com
promo.appfire.com
www.bobswift.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
san-22-s12.tlsprovisioning.exacttarget.com
*.appfire.com
appfire.com
cms.stage.brand.appfire.com
www.feedthree.appfire.com
*.appfire.com
*.appfire.com
*.appfire.com
testdac2.t.appfire.com
store.appfire.com
akshaysoam.com
appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
san-22-s12.tlsprovisioning.exacttarget.com
promo.appfire.com
www.walkietalkie.live
appfire.com
services.appfire.com
services.appfire.com
www.bobswift.appfire.com
training.appfire.com
click.go.appfire.com
www.bobswift.appfire.com
services.appfire.com
www.bobswift.appfire.com
juridisch.facet-adviseurs.nl
services.appfire.com
services.appfire.com
services.appfire.com
qa.flex.htown.io
testdac2.t.appfire.com
www.bobswift.appfire.com
training.appfire.com
jira-google-calendar.appfire.com
appfiretestbucket.t.appfire.com
testslac.t.appfire.com
services.appfire.com
www.bobswift.appfire.com
training.appfire.com
click.gotest.appfire.com
cms.stage.brand.appfire.com
www.bobswift.appfire.com
www.bobswift.appfire.com
www.feedthree.appfire.com
wallet.xanpool.com
feedthree.appfire.com
appfire.com
help.provirtualhelpdesk.com
pankaj.appfire.com
appfire.com
jira-google-calendar.appfire.com
beheer-test.toegang.org
drwiki.appfire.com
cms.stage.brand.appfire.com
promo.appfire.com
services.appfire.com
appfire.com
www.pankaj.appfire.com
promo.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
promo.appfire.com
app.konquer.club
www.feedthree.appfire.com
cms.stage.brand.appfire.com
bobswift.appfire.com
testbamboo.t.appfire.com
appfire.com
appfire.com

Certificate

The complete raw certificate details for okr-jira-prod.appfire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv9MttAZ9YS1cbmkiDS9
pkSvlMcYgrOqge/6YW+Z9kWsenCEnkL8EbVtv+ZD0VHyPKfatfbmAgg54LbIxQnS
NhN/pLbDjSNkQKUM6PZ7RfTWz+7OT5ClezAPYMPmrzfNzqMuosf3YHs4t9X2qVIp
jQcBFs3Qk2nDMYV7C/bFm3fawNvEuCRitOJOM9+IEs3hcdptfgRd7RjMLcWscbD6
47pVNfe5pgE0c9xoARZ2NY7BZXYynK2YsFcQ0lGPhSPEuELcvpQwz9Wysm0aYJ+H
1OQ8ortll7jzCo7YZYaivCJegM0dV4tPVrGCXyB7hdmm12xbHKZGiUlxaTRT0BA/
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302246099885939919501825865158902226384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:56:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 13:50:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okr-jira-prod.appfire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22091358020755587495826100020725447190409236718997860773429547033608983351733011909469935805407654933873925168190672587529619290712069385757616886742371049882965247644607321787364633992270627773691987418435199275785752357160772683826133238128802396957316886560469725292961831950826949728170032108502398767119964651324896516053203396048834756682592092638585914498825374524189727214773035821226384794357574840510510752702714215374164616672618759289838451046683987173139116085296894203713929243283922347105210373102703050809499752434038154507368421309152940286535871982208272664575849561012511283681289460025140471414669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51d2ce4b72e34155f3483557f11d0668ff185e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/QLKgUL_TBAk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okr-jira-prod.appfire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ahcdHe_OD7c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf3a95c390000040300473045022100dd3c7766eb7b1f3fdf6922d2b08c58cb0747de5ef4bcb937c1f306ea6929244902200ca1563df8e335d746b3283dbd43f24cd5544172e635b267f2e7bd76ce9f12d40075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf3a95c4e0000040300463044022053099d98efc92f4fbfa399c3b6077bac8d60133334dacfb482856e289072bad402204c2044ac1a2ee9677a47681d358703624458c43a9d4e473749119764a5291b02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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