download-test.service.deloitte.ai

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ce:ae:a6:d4:7e:53:71:59:10:3c:72:0b:f1:1c:49:a3 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=download-test.service.deloitte.ai

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ce:ae:a6:d4:7e:53:71:59:10:3c:72:0b:f1:1c:49:a3
Serial Number (int): 274727810500538376377738720963773352355
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4a:29:cb:ce:9b:0f:3f:2b:0d:6b:29:49:64:3a:8e:bf:30:c0:53:2f
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): aa:48:29:2d:47:b5:cb:df:28:93:bf:10:18:ae:97:64:89:ae:16:67
Fingerprint (sha256): 27:ef:06:92:16:bd:13:e9:94:28:05:eb:ad:9f:80:28:88:dc:b1:76:5d:23:76:45:67:79:9d:2c:84:2e:ae:b0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/r-LqcIfcjLg
CRL Distribution Point: http://crls.pki.goog/gts1d4/5IDZUL0D88k.crl

Check the revocation status for certificate download-test.service.deloitte.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for download-test.service.deloitte.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

download-test.service.deloitte.ai

Other certificates including the domain name deloitte.ai

(limited to 100 certificates)
i-fenrirdaliandev.ra9.app
lacksautomotive.com
www.starjourney.nightspeller.net
download.service.deloitte.ai
gke-test.gnosis-gcp.api.deloitte.ai
documentation.newstime.qreate.website
www.admin.sper.com.vn
bookdroptaxi.com
soundsoflifehc.com
www.cotonoudirectinter.com
www.vistafalcon.com
cryptolottery.top
sistema.mdetroca.com.br
2cl.com.br
blackandwhiteacrobanfield.turnosweb.app
www.cesarcanvasupholstery.com
www.pensioenbijhorticoop.nl
ryh-tay.com.tw
decisionservice2-test.service.deloitte.ai
apisuite.service.deloitte.ai
links.lounge.live
www.cssinspector.com
login-test.service.deloitte.ai
www.codaptive.help
rojnew.com
aap.service.deloitte.ai
compass-test.service.deloitte.ai
intriot.io
piekut.co.uk
apisuite-test.service.deloitte.ai
sm.enquirytracker.net
web.digiqc.com
email-triage.srv.deloitte.ai
link.downatdart.me
download-test.service.deloitte.ai
billing-test.api.deloitte.ai
deloitte.ai
series.grahammacphee.com
29a8fd3c867370156ef11abce3d76f09.scientrix.api.deloitte.ai
email-triage.srv.deloitte.ai
*.api.deloitte.ai
e4c258f645c9d51fc76d8b43027ca519.scientrix.api.deloitte.ai
www.samani.ai
letzdoit.co.in
app.justrussel.com
admemer.com
customer.deloitte.ai
noreply.oiloncanvas.app
apisuite.service.deloitte.ai
dcsptest-aop.service.deloitte.ai
sso.deloitte.ai
undial.service.deloitte.ai
walkthroughs.dev
435e09bacb459472ae46da612eb397c4.modelx-gcp.api.deloitte.ai
snakee.tk
link.ovr.ai
resources.njcareers.org
billing.assetmarketplace.deloitte.ai
corona-dev.promise-pay.com
molgress.com
woodboxph.com
www.filterspaceinseoul.com
www.ithrasync.com
www.cheruiyot.com
11521047.peerly.app
app.justrussel.com
ca79d865c61741590a8e918b2d03e4a7.scientrix.api.deloitte.ai
idk.novalingvo.app
www.troopermoves.com
g-fit.co.il
cca.denniscalazans.com
go.quranmajeed.net
ucits-eligibility-classifier-test.service.deloitte.ai
hannahbuchenau.com
www.getumbrella.xyz
team.center
yso.tw
www.deloitte.ai
koppeling.nutheorie.nl
pos-staging.phongvu.vn
www.yummyfy.app
prod.punct.co.il
deep-process-analytics.service.deloitte.ai
customer.deloitte.ai
expo.kianadev.com
support.cryptomood.com
deloitte.ai
soundsoflifehc.com
app.phaver.it
chalka.kr
www.manuelrdz.com
support.cryptomood.com
lequiz.app
institute.deloitte.ai
team.center
samurai.service.deloitte.ai
deloitte.ai
gilbertorochaimoveis.com.br
compass-gcp-test.api.deloitte.ai
www.cotonoudirectinter.com

Certificate

The complete raw certificate details for download-test.service.deloitte.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZLV6pB8yjqDqqKqwnWH
Iqy2FNEk+sfIN47au6OyxyFNVUDur0Z84IGsVhJf9/VLHtNrBRQZ1Vbo7aEQ4zIk
UBQCBmmqytVsEE5iPONPxO5ZxAabjwIODL8z7t2YtTPO4r576u28NkgSAmkKBSu6
sarfyeojUgc4+bnIYUtXr8sCYPDpKnNQXW80Eg2rWkVXViIp7CrAuDSIzkLjXqfb
nYMjAo7aPWGslf+aKgJL7WDdCPkJuLqVGEFUYrmXdhJmX4W6Tz7esZOYMyX78Lpy
mpEMvz+iz6O0xB5dfYC7nK8ywvUcI4iL2O5kLOU9KG2FSgPEar2ErGH+vOaeFfkd
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274727810500538376377738720963773352355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 23:22:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 00:16:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'download-test.service.deloitte.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20901727657555615466929553966292425057188905665671526886071550452905114859224420719488896788216425939189909149460668477205883218221339463611658245217746623137992454978575556505688382534755086846514324949658366825974507296151022122073034872624472116726673415967192473189458694399927612903803772482638178492328871484799794000344087392527984585906616061991175579011401439874562116564027545406514704376806589004743666700372723530136187040786088317572987342401021557424135457499371960592547738572716873973897670734553039757287481757431079593844493419805767889791638224724907422049265738624356294682478390031425919405071843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a29cbce9b0f3f2b0d6b2949643a8ebf30c0532f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/r-LqcIfcjLg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-test.service.deloitte.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/5IDZUL0D88k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018980204c5b000004030046304402202a9e55580c1b14f6aaba140064b51c7e43c2d563b16ecc7fcd9abde3c8f51d3402202220dee86b0743d67bdb279f2a1f4711110254907d1ffb51b3fe1c0754199fde007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018980204c1f0000040300473045022100945bd8f8b3526709fda3e013eab2c9fb016e99820064a24d1d060e30f04c3505022077dceb17d01686e31fbca85325e3c0dc9986b26725c182a4f5a7d4349a846c51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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