dsmglass.co.tz

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 5f:79:ab:48:84:24:74:f0:11:b4:c3:67:23:a8:e1:92 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dsmglass.co.tz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:79:ab:48:84:24:74:f0:11:b4:c3:67:23:a8:e1:92
Serial Number (int): 126908401556815742380518788230900408722
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 42:87:36:ec:05:f8:d8:76:98:b5:69:2f:8f:9f:7f:ff:a4:ac:8f:82
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): c7:2f:5a:c6:55:be:8c:bd:52:c8:ab:b1:c6:16:07:fe:f1:1a:04:81
Fingerprint (sha256): 24:ae:d6:fa:55:50:f0:91:7b:15:6e:39:03:3c:28:75:ad:3a:03:9f:23:5b:b9:b8:d6:9e:2b:4e:a8:7f:30:6b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/-SrAByM9RYs
CRL Distribution Point: http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl

Check the revocation status for certificate dsmglass.co.tz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsmglass.co.tz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsmglass.co.tz
*.dsmglass.co.tz

Other certificates including the domain name dsmglass.co.tz

(limited to 100 certificates)
www.byznysakce.cz
www.byznysakce.cz
events.tmmarketinganddesign.com
events.idayit.com
www.byznysakce.cz
event.csmolive.com
www.byznysakce.cz
events.waterfordtechnologies.com
events.advisorcorp.com.au
www.dekrachtvanzuid.mkblimburg.nl
events.tago.io
eventos.roancom.es
www.byznysakce.cz
www.dodvoledpdi.com
events.advisorcorp.com.au
www.oms.dsmglass.co.tz
events.dsmglass.co.tz
events.getindur.com
events.emerald-associates.com
events.oxygen-forensic.com
www.byznysakce.cz
events.amigoz.pro
www.byznysakce.cz
www.realestateleaders.co
www.byznysakce.cz
events.globalangels.org
www.byznysakce.cz
events.qtemfg.com
www.byznysakce.cz
events.alnafitha.com
events.advisorcorp.com.au
event.messorties.fr
www.realestateleaders.co
www.byznysakce.cz
events.dsmglass.co.tz
events.dsmglass.co.tz
events.advisorcorp.com.au
dsmglass.co.tz
www.byznysakce.cz
www.byznysakce.cz
events.alnafitha.com
events.inceptlabs.com.au
events.dsmglass.co.tz
events.dsmglass.co.tz
www.grupo-olam.com
events.alnafitha.com
www.byznysakce.cz
events.dsmglass.co.tz
www.gabcon2019.com
events.getindur.com
www.byznysakce.cz
events.inceptlabs.com.au
events.dsmglass.co.tz
events.dsmglass.co.tz
www.byznysakce.cz
www.byznysakce.cz
www.byznysakce.cz
www.africanmasterclass.com
events.emerald-associates.com
events.dsmglass.co.tz
www.dekrachtvanzuid.mkblimburg.nl
www.byznysakce.cz
events.dsmglass.co.tz
events.tech2.dk
www.byznysakce.cz
www.byznysakce.cz
www.byznysakce.cz
www.theixevent.com
www.byznysakce.cz
dsmglass.co.tz
www.byznysakce.cz
events.aqua.co.nz
www.byznysakce.cz
www.byznysakce.cz
dsmglass.co.tz
www.byznysakce.cz
events.inceptlabs.com.au
eventos.roancom.es
events.dsmglass.co.tz
www.byznysakce.cz
www.byznysakce.cz
www.byznysakce.cz
event.tgju.services
events.dsmglass.co.tz
events.dsmglass.co.tz
events.genius-web.co.jp
www.byznysakce.cz
events.inceptlabs.com.au
www.byznysakce.cz
events.oxygen-forensic.com
events.julieannelindsey.com
backstage.prosolic.nl
events.dsmglass.co.tz
www.byznysakce.cz
www.byznysakce.cz
events.advisorcorp.com.au
events.dsmglass.co.tz
events.dsmglass.co.tz
events.alnafitha.com
www.buralistes-occitanie.fr

Certificate

The complete raw certificate details for dsmglass.co.tz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oJ9tJRVJ3hQ8JljEN9T
/6wqCXDHYHxhd0nUxwA6v3kGFAeNxNwPT0ofdUqHkvoSd5bpJuybJXVRqC9pEUDk
G3QUUcbbjyZiLYX9gyr78M92X/NCJiyDwgo2nBPdFYnom4uNgNGKsmybn86nPyaq
tLKXX3j/mGDtoquR4ovB/MUa8P/ASZ9oqEtVGNR6A+jyRppRbAHJ2XXwU/6zE9LL
a3riy/Xf/tL8iZ30bnXU7Ls6Z/wFOIqkylEvZdB/F0TnUZGwSX3IfWE51Q4gW3I2
McndUm3o+B5d3e1Xxjm+syNbwGFCvfVutiIX+0xSXn6J+4B7U0kEjeoa3vQ0ulPN
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126908401556815742380518788230900408722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 17:57:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 17:57:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsmglass.co.tz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31623923769963510600452653660297708506310911850431609892530384591234439064948151670880352460201726162137575924438683171478085636023832132356954688942002879549783800971305315901335983120465217779459575708342405588620044738885225765155373126491368747772354556745572738644182903609609502725175116860596083364675839097932408906765262675720918455631767522078556243599697441185208352094022948966400087958948756889137424945559795738307979285205018002366905859758165948903780322354200559911201521042623633899932064387335848094153418712185031572485451381228203239174446340694861963414731860444108337619870332669044683818913049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							428736ec05f8d87698b5692f8f9f7fffa4ac8f82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/-SrAByM9RYs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsmglass.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsmglass.co.tz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd97eacb2000004030048304602210089753f7f0425cb14f3164ed85650ab8d602623847f64d00246e56d96c6456456022100d4dc5ce373d627563e51f4d8c35a90862f007947809b702b18d9d2b6d689985f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd97eaca10000040300473045022100840fa178fd5c54a4b25882c912db2440518f7e129615f1dcf1f96c760c0bb6cf02200162c9f2e6dfddddd8c4b22f31327c34092574f26a80676b0592862b33c49b52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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