www.2bali.id

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 18:ef:d1:de:ce:b8:c4:83:09:00:00:00:00:06:0a:06 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.2bali.id

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:ef:d1:de:ce:b8:c4:83:09:00:00:00:00:06:0a:06
Serial Number (int): 33146687524264328493720519189893351942
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: a3:af:3b:34:cd:50:e6:18:1e:a9:a0:31:5e:e7:de:1e:f8:5d:87:6d
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 37:3c:5d:e3:25:c2:08:3f:4f:dc:60:29:2c:89:88:e1:db:27:56:a3
Fingerprint (sha256): 22:9b:a4:34:61:9b:eb:57:a1:da:44:f5:ea:7a:ea:e0:a2:f5:0f:17:3a:fd:67:df:c7:92:37:0a:d6:55:cf:f8

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.2bali.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.2bali.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.2bali.id

Other certificates including the domain name 2bali.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.2bali.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueUyu6aYpzn4D6tGdqRo
j2i58S2MH92fJXOn8o4VzRbxwauaAdLryqmcTWt2JlYRFDAvjs3FtVoRAwxWgF9p
Q4R0tt8JTkZmClD1geQCMj8Q6rYLJqGhtpGWD1IQpwTEqOSjxii5ZT5Xck1AIUAa
UTZpkpm8PN3WeTMZg+ZgHyMdMs3mIRNJH0y4l837vFQELgzIT17CgbpZo8/LdWpl
nFLBXnFiFP9ZtVZSNhQYt9Sg4MwNhtfFIqYT7cevsTKr9zRz67q7GQY9Bp/vxicd
XVg/tszHe7azIKRKR3yOkOzs+vmCVQBkz0Erd0DBJgdFtdps23z6Xyofia1Rurt/
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33146687524264328493720519189893351942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 07:24:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 07:24:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.2bali.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23467108251600795457424847453604230197703234379441775310353740112836063464889307119621545484251484585644725150629121929802871216443985666514380822056966436210209936480495148034492070019013042422467102801060710702810497316906103860669247883532033264890424462392522896387574182737928930558259175492730945391144752612856357643287665272688506526674486042124528238446131909884270423067046283446324154726772572778404041549940855029513662330269215031292342552800965329639458471397448897058371471768997722368763311223707196700117201024201620191487715256890921524928266507682370317212475962351954466257477694309578376618934027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3af3b34cd50e6181ea9a0315ee7de1ef85d876d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2bali.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f8967ef620000040300473045022100e5eb26138263db89fbf73aa8908418b12d89112baafbfa3edf115f284a6504bb022054a046b65d67a6437930ed5464f320f90a32a729c749fd5e783ef6ee256cc1c80077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f8967ef7a0000040300483046022100b35b038378a283feae581ed6fd22191ef0177a9ceeab6c666e410818f5efff5c0221009db67bb6d8a3d2b86ebd24460d22dff60bc0b70fca4f8ae587798c33e7059005
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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