gadgetworld2u.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 1b:84:9f:38:29:79:fe:ae:0e:88:7a:7e:03:1e:2d:64 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gadgetworld2u.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:84:9f:38:29:79:fe:ae:0e:88:7a:7e:03:1e:2d:64Serial Number (int): 36577768424259775348484986252644199780
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 15:d0:9c:06:f6:24:0d:47:7a:2a:09:50:bf:90:fc:fd:e4:01:61:e2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 69:95:d0:c6:54:74:d4:4e:4a:9a:71:65:4e:f9:6e:85:4a:3f:f2:a4
Fingerprint (sha256): 27:fa:f7:8b:4d:1a:74:04:17:bc:2e:ef:f1:fc:01:65:89:b9:a1:0d:15:c2:30:fe:23:06:4e:a7:e5:00:4d:ae
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/q6hwgrftpn8CRL Distribution Point: http://crls.pki.goog/gts1p5/khbomtjPark.crl
Check the revocation status for certificate gadgetworld2u.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gadgetworld2u.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gadgetworld2u.com
*.gadgetworld2u.com
*.gadgetworld2u.com
Other certificates including the domain name gadgetworld2u.com
(limited to 100 certificates)
gadgetworld2u.com
gadgetworld2u.com
ladyshop.com.my
gadgetworld2u.com
gadgetworld2u.com
fanacouture.com
debabyhouse.com
besthelmet.com.my
mail.ladyshop.com.my
simplenhappy.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
flyejuice.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
ladyshop.com.my
sni.cloudflaressl.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
mommycolony.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
mummyonline.com.my
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
guuphill.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
ladyshop.com.my
gadgetworld2u.com
gadgetworld2u.com
fanacouture.com
debabyhouse.com
besthelmet.com.my
mail.ladyshop.com.my
simplenhappy.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
flyejuice.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
ladyshop.com.my
sni.cloudflaressl.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
mommycolony.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
mummyonline.com.my
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
gadgetworld2u.com
guuphill.com
gadgetworld2u.com
gadgetworld2u.com
Certificate
The complete raw certificate details for gadgetworld2u.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIQG4SfOCl5/q4OiHp+Ax4tZDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAyMDEwMTQ4MDFaFw0yNDA1MDEw MTQ4MDBaMBwxGjAYBgNVBAMTEWdhZGdldHdvcmxkMnUuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q1Dy6TXkY6O95EUvugWodJB8JoRb1LREphh xCokk21RT+1N8H6m/Eg43VA8e4ZMm9Aanf4CYbYV7R33hMNTcA1isNnCir8Ktib2 a6j9FOPMEKAvAutl1Uq7J6Y7ub0HnMbdDm/ucYcB0Ljqn3By/4RzENI24QpIecwZ fFFPxtBRv1Bw7DU6X7xGo14iyqQ5c2NfW541+kaotNyEyFToXR2S1PYEaOdv5CVE tuf2jbTQrk/Yo3wpHRXCqyoyCRwMDmiTzbiVEueToUOsffL029pBhJ4ObZsvR++o fHep7NmQVEbYp//ZCGXGmA5fHg7+efo7BTeh/LHKYjG2sLX+6QIDAQABo4ICjzCC AoswDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFBXQnAb2JA1HeioJUL+Q/P3kAWHiMB8GA1UdIwQYMBaA FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvcTZod2dyZnRwbjgwMQYI KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw MQYDVR0RBCowKIIRZ2FkZ2V0d29ybGQydS5jb22CEyouZ2FkZ2V0d29ybGQydS5j b20wIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAz MDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUva2hib210alBhcmsu Y3JsMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGNYpDvlgAABAMASDBGAiEA91dz9vvzq8IazZ4YrTYF JY8dq8iS+S6NY4Yo9SGU1bACIQDPsnahpbGs3g0d7sivqo+bTyPgq9YSzms00jvl UpY/0QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjWKQ74QA AAQDAEgwRgIhAIk4H9VELiWxhNAiKWQ28kMwxZjR5bLZSzDC5XfFOq/6AiEAq+P5 +JedG9gHoFceFdJfp53xXmSmrbijzlqKJeDPB04wDQYJKoZIhvcNAQELBQADggEB ABRdjUkyZOMUQ/lOnY/qk0bCwA0QoeP46E1lvqYA2oMIUTM6YpKdMTfnet/bTCfh cuKdD4j0gO999YNAMX51GbPc2cVGSuoPwGQuFA09HE/xUyC21CtfGxNzeaeiaMhf H3DhGrse+JZHDXs3lyMIp+tjpqFOfDDOS7VtcKqTltnmiXVggwpGa7V3epdL1FZh 2wsuuU9x5eOF1gh5zOZfFjEh0ou6K3hGa/pRsDXx8x8to/Un2XoqMNytS8Lzru4v HOtEt0Nyf6vDL+ah93+uxcUsYaaKEB6xDCesxTiG3IpDGpTQbDnT+hFr2jlzqP+7 iT/IkL2kaJLtb5Sbwa9P6s0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q1Dy6TXkY6O95EUvugW odJB8JoRb1LREphhxCokk21RT+1N8H6m/Eg43VA8e4ZMm9Aanf4CYbYV7R33hMNT cA1isNnCir8Ktib2a6j9FOPMEKAvAutl1Uq7J6Y7ub0HnMbdDm/ucYcB0Ljqn3By /4RzENI24QpIecwZfFFPxtBRv1Bw7DU6X7xGo14iyqQ5c2NfW541+kaotNyEyFTo XR2S1PYEaOdv5CVEtuf2jbTQrk/Yo3wpHRXCqyoyCRwMDmiTzbiVEueToUOsffL0 29pBhJ4ObZsvR++ofHep7NmQVEbYp//ZCGXGmA5fHg7+efo7BTeh/LHKYjG2sLX+ 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36577768424259775348484986252644199780 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 01:48:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 01:48:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gadgetworld2u.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30130156652071585958837033378991840581609431144650756680854141858807665454333399814500674236630966622386918728726047366035345426228456238402513938298026584408394139585714621495438187247508978788005782763242408429378709601172488088379479256445641500549613677553936731252017533144862904485728885493112969940823310887450924252405104794813034320481099502947538270564793760313791568761817590261594681659819962412310630902530076820335666010997270306560972291291750584832015327286365372074919292434177810361255864214683692530260601153269520314831555562784682913427046129884501175399503451303349586797832981235243923663093481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 15d09c06f6240d477a2a0950bf90fcfde40161e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/q6hwgrftpn8' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgetworld2u.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadgetworld2u.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/khbomtjPark.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6290ef960000040300483046022100f75773f6fbf3abc21acd9e18ad3605258f1dabc892f92e8d638628f52194d5b0022100cfb276a1a5b1acde0d1deec8afaa8f9b4f23e0abd612ce6b34d23be552963fd10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6290ef84000004030048304602210089381fd5442e25b184d022296436f24330c598d1e5b2d94b30c2e577c53aaffa022100abe3f9f8979d1bd807a0571e15d25fa79df15e64a6adb8a3ce5a8a25e0cf074e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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