ashva.app

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 3c:1f:0b:30:4a:d0:fa:a9:11:95:47:1d:3d:d0:4c:09 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ashva.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:1f:0b:30:4a:d0:fa:a9:11:95:47:1d:3d:d0:4c:09
Serial Number (int): 79914867882321503891422577796181937161
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 04:1c:c9:fe:4c:bc:8f:44:a5:39:ff:d3:ab:fd:23:d9:44:6e:ab:23
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 08:51:40:dd:88:12:cf:5a:8b:ad:01:f0:60:b8:b7:5c:fa:98:6e:ca
Fingerprint (sha256): 27:88:78:f6:11:72:7b:66:43:98:c5:a9:fb:32:d3:ea:df:c7:4e:be:07:41:27:0a:0a:c5:ca:81:67:36:2e:bd

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/EwmV5wiWh4k
CRL Distribution Point: http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl

Check the revocation status for certificate ashva.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ashva.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashva.app
*.ashva.app

Other certificates including the domain name ashva.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for ashva.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6oNRvwdcTJjhgG0KZ3c
Pl5OUUAgoVZAXgrZReXwto+7bhwddijTyjHoOuVvV3c3bguOpDBZoj656jNthjaA
EsDCquqeEvlCEbL/Q6JR+ZfV9bC2hG57Rkii75T1D32tgBQ680ON+SNKYVIEM211
BwdU26eUg2UaCkyTAa4LjWBFiYBS/cjGOTIW+rmzIqUHk9Dcukb51+KANHcpU6iI
iLzZINevVtTry+x4qvOdQL8mWFHoVFNzuDYJ9xXtALI2QlJxKjtw2+SR3VWh30Us
LxmAOQcEzZiiJA7txl3fByqa46cQOXgjGxSWPJ2XYJso6b3oDGGIm92svrj+3Evz
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79914867882321503891422577796181937161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 08:15:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 08:15:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashva.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22175559068736908107382138153807299959179230590063756133234425907544264225901509976551436010284454703947355530349000539979546057866877334127425460828185552974649657912644116510960156547106802522086242407526172895271101035071171144167377740699186049525466920401739385577418163971190556137341943426753993624131335726613245047410692078120982309912974368873654884259421658307440251832608249516177705870107798084798589704753257100314178589129571951176456304722696107617229229855390446501388024245356229341661023835723010301028270751946816521401522951431569088108224178853161836463411455266905229298476821714472980378809179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							041cc9fe4cbc8f44a539ffd3abfd23d9446eab23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/EwmV5wiWh4k'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashva.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashva.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b096bd3be0000040300483046022100aca33d6f348846368140c763af2fdc8392ca5a8ccf7f28b726b067cb6a1aaa88022100ff7a5398b63080b88a9f556083b28125c502161fecfeb8334193b83f083b8cd200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b096bd3b60000040300473045022027f582da713cf0d03cd84240e4aa2a7f6b05d54b4db7d2ed8aad18ca8076bade022100ce1051cca8e4fde82c1e6c5d2faf4cd1c38d721ba74fd4130bb12947f27fd834
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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