blog.shamanland.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 29:8c:c6:9c:db:61:39:f9:0a:00:00:00:00:05:d4:da was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.shamanland.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:8c:c6:9c:db:61:39:f9:0a:00:00:00:00:05:d4:da
Serial Number (int): 55229297731966058637257528050704569562
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 20:69:f9:ec:5a:00:4b:27:4b:d5:c0:98:67:28:25:4e:51:a2:fb:59
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 24:c8:ce:a9:cd:49:33:5e:03:7a:22:ec:1a:47:e7:cd:8c:b5:6a:a5
Fingerprint (sha256): 24:e0:97:23:c1:07:5e:17:e8:7f:df:47:04:0c:ae:26:c1:dc:dc:a5:07:a4:d0:c9:a0:40:94:dd:00:c3:b9:fc

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate blog.shamanland.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.shamanland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.shamanland.com

Other certificates including the domain name shamanland.com

(limited to 100 certificates)
firebaseapp.com
www.moesalih.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
exroad.xyz
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.morkle.noiseseduction.com
firebaseapp.com
firebaseapp.com
sennder.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.delf.com.br
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
events.rinno.la
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
blog.shamanland.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.ecard.gq
www.dnieln7.xyz
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
galacticpigeon.com
firebaseapp.com
blog.shamanland.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
auth.loresome.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
admin.testshopping.a-sta.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.yourlocalcousin.co
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
tags.shamanland.com
r.myles.hk
firebaseapp.com
chalogive.org

Certificate

The complete raw certificate details for blog.shamanland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIQKYzGnNthOfkKAAAAAAXU2jANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMw
EQYDVQQDEwpHVFMgQ0EgMUQyMB4XDTE5MTIxODAwMzgyNloXDTIwMDMxNzAwMzgy
NlowHjEcMBoGA1UEAxMTYmxvZy5zaGFtYW5sYW5kLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKdu2XOlny1AAr+nN8C90O8TGzwc90TXiOYtbOTj
XKvYLtCr0G1PRMVXml3uM6Hrbg/Gk/l561NSmGqAoQtXqOlhOCgwopbi54RZ6Uyt
gubrrDG6lAZcJ3N15i8gcPYIUP9isdMG+6EEaBCwjF4q9yR+al1mCdBe5mxNiwoQ
ZJuJC435TYX4doup269dY3cm7lOBzd55ATLHBWfDwLkxjNdayZq4ChzXd3Zf+Pu5
Jezlgp0WnpYjh7maNYao+uNpb3FsOu657VzAr6pqF8v6hdkC29ZpTVLuygssboeF
JzkU3E931e0YGn4jt6Z623Rab8VzMvzOL8OjYGywnG6YFBECAwEAAaOCAlgwggJU
MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBQgafnsWgBLJ0vVwJhnKCVOUaL7WTAfBgNVHSMEGDAWgBSx
3TJd6Lc3ctLOXM4m/kd54gEI6TBkBggrBgEFBQcBAQRYMFYwJwYIKwYBBQUHMAGG
G2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0czFkMjArBggrBgEFBQcwAoYfaHR0cDov
L3BraS5nb29nL2dzcjIvR1RTMUQyLmNydDAeBgNVHREEFzAVghNibG9nLnNoYW1h
bmxhbmQuY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwLwYD
VR0fBCgwJjAkoCKgIIYeaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxRDIuY3JsMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFvFqgB+AAABAMARjBEAiAcxgKlkn/L66miqTaFyyvHKW1NpdVG
niH3uqoaAbpltQIgUlBg4NKI8yDIy0x4ffblKNebXWkjrExjzs3QexGfk2wAdgBe
p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW8WqAIWAAAEAwBHMEUC
IFgQb2UxCxqA5NCr7i5QeMxkhKVmzoiVJAOlQNqgcSsiAiEA/PZgWoXCgaa7JDAw
JpCjJPqZ+g7cEyqLozCp0mCGkl0wDQYJKoZIhvcNAQELBQADggEBAAy5yOuuou68
HSimQAkWPpMJJmMqo8P9N7LqXS73pIMOhHr2cKI8J/0ubBaVqhUuHZBiDsZNDK7L
Nrzp5EAMzzUej18JqNY+UdZv6vCZut7xtcRoqgbdZ122cmdLGxhZUM+1pt0evjZ2
4n9dY89D9ZQjFSSlbt4MZcj/OcbutuDKQTxtR3NZNKwGeNYYo8DsyWBK7yMTo1/u
vMaC0A6IAESti3LimzN2WujTbT5nI/oYY8k2YaeHK+INF9W4Glw05YP0iWvF8or4
utQ6JxjjWEYFluMW4XVAjJY5/PGkgtDv06SdZp8nF/E3CM1Ds7bqj2683uA47K66
1T6pCMtRNOw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp27Zc6WfLUACv6c3wL3Q
7xMbPBz3RNeI5i1s5ONcq9gu0KvQbU9ExVeaXe4zoetuD8aT+XnrU1KYaoChC1eo
6WE4KDCiluLnhFnpTK2C5uusMbqUBlwnc3XmLyBw9ghQ/2Kx0wb7oQRoELCMXir3
JH5qXWYJ0F7mbE2LChBkm4kLjflNhfh2i6nbr11jdybuU4HN3nkBMscFZ8PAuTGM
11rJmrgKHNd3dl/4+7kl7OWCnRaeliOHuZo1hqj642lvcWw67rntXMCvqmoXy/qF
2QLb1mlNUu7KCyxuh4UnORTcT3fV7RgafiO3pnrbdFpvxXMy/M4vw6NgbLCcbpgU
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55229297731966058637257528050704569562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 00:38:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:38:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.shamanland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21136458816045402551014987706549643496462276067380312420870683872037699246489992421023031598123492464715471112507500988432555231194550016594602677548629206031548675027778023156196701573465334394608137339513334826669330917833571596809696821580535449327951897449249447743736691384741787624856438645380676970554782699080134044883558764313961916409984272948767582848376194092335137798856297449579567855937238722028520225561137200695276659873626149822498450419432626700191381605205316242184254721399399961809683457910306837627758546520086051869607192891487185972051386448773547190642948183906633782334193428131251341497361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2069f9ec5a004b274bd5c0986728254e51a2fb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.shamanland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f16a801f8000004030046304402201cc602a5927fcbeba9a2a93685cb2bc7296d4da5d5469e21f7baaa1a01ba65b50220525060e0d288f320c8cb4c787df6e528d79b5d6923ac4c63cecdd07b119f936c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f16a802160000040300473045022058106f65310b1a80e4d0abee2e5078cc6484a566ce88952403a540daa0712b22022100fcf6605a85c281a6bb2430302690a324fa99fa0edc132a8ba330a9d26086925d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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