canary.displays.ricohspaces.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7e:3a:ab:6b:21:09:58:c7:10:ff:e7:7d:c4:63:d8:d7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canary.displays.ricohspaces.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:3a:ab:6b:21:09:58:c7:10:ff:e7:7d:c4:63:d8:d7
Serial Number (int): 167787357466374338347119510150080354519
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 91:1a:5e:a1:b2:48:de:aa:2e:fe:0e:75:38:65:d7:96:80:75:6b:d7
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c4:f9:62:39:df:46:e4:c8:f0:9d:d2:ad:b9:f7:f5:6c:8d:80:6d:a6
Fingerprint (sha256): 29:c8:72:01:13:bf:53:23:77:e5:e6:c8:2e:f8:61:3f:7c:76:35:76:49:f0:0b:0f:7e:5e:f1:3e:a2:17:21:af

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/VplBbLkL1ho
CRL Distribution Point: http://crls.pki.goog/gts1d4/8sMM3cbDapY.crl

Check the revocation status for certificate canary.displays.ricohspaces.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canary.displays.ricohspaces.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canary.displays.ricohspaces.app

Other certificates including the domain name ricohspaces.app

(limited to 100 certificates)
canary.outlook-addin.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app

Certificate

The complete raw certificate details for canary.displays.ricohspaces.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuv3yROs8nXL8X2kHaVF
++hy2MET1njf7s4ucFUqAkUQo0+99gVIdHmFumXtymq1ZOx+2gNZmzxw4sHRC/6g
eI5PuSciWYp+7FjjhX9ysIlupI9OsFUwmqvbDCTju0Q2oeGKO+63NMQWuuyukIUh
RgOUNYdLmLIYxQ1n6TQc20oedLIVnFtqnhzw84BiB5r1x5gstm8Rm5XAH3QXfUnO
+EfIvZbN7z8cDzhQxkRTQlHk4FZsU2sKXpg/ERwMi6DM1wqAAVwy6ioOVrBKE69A
tle7THvdOti9We/WwzGww0rLzrnHQz5GswNgjeiX0SdLJZM8AiVcE89fXyf3n+tY
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167787357466374338347119510150080354519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 07:00:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 07:46:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canary.displays.ricohspaces.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20062012298815405442260102243453928948807634569310138883521972666168170225501813759954285214848837367500484791654425913503962004735914388706625415337313649003950054184229953997812925705962218683075315597057420139549269013792846865852007865587987746067622597486418691055479732589563642103987606307496563611197703499151123795949709880558935769198930153025469299961435143186379625158019441460200475151857957243370852661733770288128358544643481571842232526955242902028020937956725265705895440014332487296273137252525164210232442062174666248509727275911981471534938875521498131656931924836612166625793291379100907182184543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							911a5ea1b248deaa2efe0e753865d79680756bd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/VplBbLkL1ho'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.displays.ricohspaces.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/8sMM3cbDapY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001877ec7bd450000040300473045022100a2aa9edc129733c6516a1be7ed2b2d63973e2f14ff0b5b216407ce72689e35540220760defacf0b1653ea085ef0107ace319d6d966f2e58885ac705e17669c524a80007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001877ec7bd3300000403004630440220061e484d361f77fb78b54c55b34c00a2b58d9049ade6c70e1685f536787f8780022036503c03e197c84d08016a3ea5317c89fc9bda11001bc7189f70fee323fbda51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0082f6e03f101eff6062404a1cbb2030db92f906b6d0b41687f627ead639a0e1c58769dfd37bdd4d7c3be7d877f57c7fbe574d1b40e5c93c9baa26a953abe0871d862d75b03570fb53c9633b3b6f6fac7d1888572910d52432b7d4f29747164fe6a9ff3512c7fe2f5379cd12d30cc577cb81db348f294ba075411fc1acbf5ce27372da80f54f343f26fc7c0cecfa24f311dedac23fe0a2c6e923e71ec6a3cef7f6335ebbd5b1c0d461eeb5765d58d932137066e760f41b4a0d6d5985ff5a0373b470c6aeb953c93837edd7aa399a397813931660506de84d84c0b621db7ca37a57cb142bdadaf1696b9ba89d4c473f6009e143a6c04b6b9d03a8f5a57756c74f5f