*.g-mms.com

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 55:f5:36:05:74:db:23:f5:02:00:00:00:00:5c:67:58 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:f5:36:05:74:db:23:f5:02:00:00:00:00:5c:67:58
Serial Number (int): 114257588054483477423533098289617200984
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f0:ec:59:fa:a7:c5:6a:40:a9:df:88:e4:45:36:f0:f4:6d:a7:3c:4f
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 97:b4:7e:ad:66:1b:c3:0c:93:f1:1a:ba:cc:c5:ae:4f:e9:4e:d6:46
Fingerprint (sha256): 2f:50:fe:24:87:49:57:f5:48:ec:93:de:89:89:01:74:fc:08:95:93:dd:20:6b:07:8f:58:2a:33:69:e1:d2:ee

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.g-mms.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.g-mms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.g-mms.com

Other certificates including the domain name g-mms.com

(limited to 100 certificates)
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com
*.g-mms.com

Certificate

The complete raw certificate details for *.g-mms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOl3QGtevvioK7VDOtLm
oGLHHu/dBnJzxzt8Xw4ghR6XP8IHRo28hwx99XpwEJ/izJf7wIYiEQ+rv3s7QsAy
hNi/EuG7lyorU8a+fB7ywW8TEyCMyTX8siIqPUdYu1rcMF43CbU0MIauwVWqjC9i
m/yWX/6he3pX+545elgewP9K5TQHEUh3f8Qx/x8Ypyd+zfx3dM52IUKYwfdANRlP
A0uuw3MebDom5qTAwJLy2hHsP7mJhvJ94clpJdia/xCQDch97b3NQr2e+gMe2BYq
KwKXs5c7RYENg/KKDoIu6RAXHcTHm3YL7lVn2FEl7W6Hoa1CUWEKhNykEAARfK3V
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114257588054483477423533098289617200984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 09:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 09:45:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.g-mms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18293442205079843419748757200372925345382306142453568095586228361965541990769153301447477680653406974901612347192782571497069922924662276500044306928166451954236283868264125613937929507344470133338207657646431930381447472200216072514724264055112461037143416329092794982948781186989846220399490529039531256652254802733251760161566751736814090332691117164158595058427605062065954793967736730511397184562354595407990917557717396776820894025863019834115336171786443169209006130603160407823041399416356807420776353363247376570447585545240628099896838232408746994174450515130081546597870596035146787803452985033516271916429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0ec59faa7c56a40a9df88e44536f0f46da73c4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-mms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a0001450000004030048304602210081aff5e756b2f1dfa10e084e8078430cd071de55a71d78891170f602aa177ac6022100a966375284480823dc1df518716c7f6ee4af28f352175c08803804936f1f75320076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a00014880000040300473045022100ff0f2f85d41a29dbfee84ecf7c74c3e0a38301cdb893e13c332770c0b4c143010220515f1406f270d9010e6aa95b11f83fc16ec4b5afebe529bdefc1c1880888c799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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