gitkrakenstatus.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 66:61:6b:c6:e9:45:8b:9a:0e:83:5f:27:2c:4b:0d:c5 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gitkrakenstatus.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:61:6b:c6:e9:45:8b:9a:0e:83:5f:27:2c:4b:0d:c5
Serial Number (int): 136087094342537148289942284988335197637
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1d:89:cd:8c:ce:16:81:0c:82:c3:87:76:2b:0d:8e:70:94:a5:f5:d7
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 7a:d0:6d:5d:68:51:4c:a9:c8:b7:ea:20:2c:fc:42:ad:68:08:cf:a6
Fingerprint (sha256): 2c:ae:8e:1a:8c:e8:92:23:bb:c4:be:f1:c8:56:48:61:01:91:e8:f0:30:8d:3c:2a:a5:8e:04:d0:87:53:eb:8a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/lun6TJ9v4R4
CRL Distribution Point: http://crls.pki.goog/gts1p5/eexkC2PJxaw.crl

Check the revocation status for certificate gitkrakenstatus.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitkrakenstatus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitkrakenstatus.com

Other certificates including the domain name gitkrakenstatus.com

(limited to 100 certificates)
canada.status.coconutsoftware.com
gij.gitkrakenstatus.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
cicd.gitkrakenstatus.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
canada.status.coconutsoftware.com
cicd.gitkrakenstatus.com
foundry-usz-1.status.palantir.com
dalestatus.mambu.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
162-internal.networkstatus.co.nz
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
dalestatus.mambu.com
162-internal.networkstatus.co.nz
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
cicd.gitkrakenstatus.com
gij.gitkrakenstatus.com
gitkrakenstatus.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
dalestatus.mambu.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
162-internal.networkstatus.co.nz
dalestatus.mambu.com
foundry-usz-1.status.palantir.com
gij.gitkrakenstatus.com
canada.status.coconutsoftware.com
gitkrakenstatus.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
dalestatus.mambu.com
162-internal.networkstatus.co.nz
dalestatus.mambu.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
foundry-usz-1.status.palantir.com
gij.gitkrakenstatus.com
dalestatus.mambu.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
canada.status.coconutsoftware.com
162-internal.networkstatus.co.nz
dalestatus.mambu.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
foundry-usz-1.status.palantir.com

Certificate

The complete raw certificate details for gitkrakenstatus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgyZjFRTPRTpGyGDAcv/
5C0KpOD+T/G/ZjMwM2kOgeJG3kHoZpHHomy7b8Ni5Ep3ldvWFmiNn8Vl5VJyRptZ
9Vp0qu+uQqQIMj9MxY5+sV6GWK84rZo59PS/pOw6OOX8oLmKxnMzLab1pbypfpL1
A7Aozic7iP6+SBlDSi/KkDSjpEkfF6LFTmVlB3gw1FoVDry5hkXLReSYaTpDlTOS
fzaUnbFRE17H2DUoSa1sH8ghRmIotksYwxpafVX4bSZw9Oo2U8MuCuqjP8vzF8u3
6zCMUquMIcWww5RpE4nvMMeSv6SsFipe7HZRndah1lEMLzty6xZWQOQKhoCeZXEe
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136087094342537148289942284988335197637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 01:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 01:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitkrakenstatus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24496444355134723230340206059458064903727576456123609370101609570597520501175615462962614811190607281858840833192743347219811967853175774354349245593458386849605257760231833376876757308430740499359754547690318513799100855133240960627098851947817367081942895263656243199491429796375772747213133538609045613812071456549218220851566407171446890424953054454171981890258415429418687805223273019078573788482941177548286464343192567782503281815471884126779384249229850410908953337696810327310640577518788076216102130031469426785914326351836284880304491140155336457079156915371256198803006739983404097917160785335171431866111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d89cd8cce16810c82c387762b0d8e7094a5f5d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/lun6TJ9v4R4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitkrakenstatus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/eexkC2PJxaw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca462ead0000040300473045022100ec109cd006ffba671f13d5f765faf8882ac3d91b7a0df094d043ffec165ea6ae0220379f35e0cf8b34c6ba74804969bd096fb4809fdd3cd8b2daa5daddd8b0c0bc5f007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aca462e79000004030047304502210088b236fee5a345a0bdeef62f7a0ef1ecdc0583f271370ee6672163c11862ecef02205857aec94ab8fbf74ca3186ad50a089032b2b06a1d1936ec27c36247ff8b3ce3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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