research.g2.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 3e:be:b9:ea:5c:cf:c0:fa:13:71:fc:69:33:18:ad:c6 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=research.g2.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:be:b9:ea:5c:cf:c0:fa:13:71:fc:69:33:18:ad:c6
Serial Number (int): 83402442955676885122016141619666398662
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b3:f4:64:d9:92:8e:4e:a9:99:4f:c2:c0:9c:39:99:f6:5d:f3:67:45
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 79:d8:d4:7d:01:d2:90:01:87:2a:4d:6d:96:16:66:41:b6:fc:67:c4
Fingerprint (sha256): 2f:8a:fe:b1:47:46:49:d7:3c:5f:cf:ec:fe:a6:a9:0e:3c:89:74:5f:68:07:60:0f:61:d6:52:15:c0:bf:ab:45

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/k52LyiqtzTQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/guSKsunZUzc.crl

Check the revocation status for certificate research.g2.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for research.g2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

research.g2.com

Other certificates including the domain name g2.com

(limited to 100 certificates)
swag.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
research.g2.com
eng.g2.com
s5-sni.cloudinary.com
ssl906984.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sell.g2.com
s5-sni.cloudinary.com
groove.ehlinks.com
s5-sni.cloudinary.com
connect.g2.com
track.g2.com
groove.simondata.com
s5-sni.cloudinary.com
looker.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
learn.g2.com
sell.g2.com
s5-sni.cloudinary.com
eng.g2.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
groove.g2.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.robinpowered.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.swivl.com
groove.lyric.com
track.g2.com
culture.g2.com
groove.kiva.org
s5-sni.cloudinary.com
trust.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
*.g2.com
s5-sni.cloudinary.com
engineering.g2.com
sell.g2.com
groove.ehlinks.com
track-sales.g2.com
s5-sni.cloudinary.com
g2.com
news.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
refer.g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
track.g2.com
s5-sni.cloudinary.com
groove.jebbit.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
news.g2.com
s5-sni.cloudinary.com
groove.adpearance.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
track.g2.com
research.g2.com
users.g2.com
learn.g2.com
careers.g2.com
ssl906983.cloudflaressl.com
groove.cloudleaf.io
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
g2.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
s5-sni.cloudinary.com
sni.cloudflaressl.com
news.g2.com
track-sales.g2.com

Certificate

The complete raw certificate details for research.g2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwWBd+U5x8FhjCSJjReO
udCeSym0lvx6JSe6IxTlQrq+39AMOEwZGUYW6eBeN+8ITnV2i5541hibmewohc5S
KEXM5eZGuHB5m2uFpyVydMMmCZuscrbqb/WmsmqiYe7Zvl8QJmSPJu0Yf4zoyRwJ
TxJ9HEoqbxcaliwVcjxKPIUDQx7mO6Z3VMfd4AMcyTaIX/sOmP0/76dBR1Ylv5+P
ewB0Rs/Q8Crbt0coAvHbgJFF4WpF0xwmSlFxRsDD2KcPvxFUAD3G6Ov14RNHKZhj
FqfwcXaN6Bo8LhWYa27ElhhQ6sbhfrQoXMhgoHVRreNKx8qzj28Qd7CH7Fh3HrCM
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83402442955676885122016141619666398662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 02:43:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 02:43:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research.g2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18054792589613070177051164252035923000243815403779618436282770561635694750453086120302117512018392518950688119108597088669899819379103250208836617794022123459390370496515038622714409320529749443169866295142011702049639371934654613061210084044594070392197962147778835566904353366489524259654369559497298408152139938841120864777146295596954337578178988180723902423330008776434417901826139071185311009353653893626085662676625008680393325787947768895499155825020086904189781538259110442639935747190801207948516188912483919748742036718255697878456464238164538169310577875741893061312657206193035138094218370206321301556411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3f464d9928e4ea9994fc2c09c3999f65df36745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/k52LyiqtzTQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.g2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/guSKsunZUzc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001872b76b5b400000403004730450220477ea2329ee8346c66939a73fc6b1ab3294684708f12f833fe82726021dd31c5022100fd34e706ba26ee35281413a15cdd98af221023a21a1c93601e15036acf5d7826007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001872b76b5960000040300483046022100f316f37151e36e62697d3d851190bc90de74e0653c82bfe1fd5984f68beb16a602210086f05b9073797046ea7ca3c382261aa1f7279a40dbbf6913143ff76da3aacb2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059f97be7d91bd95b2e8c923ea8de2618f3270663e74da603fd713c0d838b7b10b610ea0b356e16347b6f2f0caa15088d633d2a1331d4d94b0966e2a2a2a7200a695b4b8e05939a85378ca74ca0ce6262529a5ffcee253c41be20e9150012d9cc1fa098d93aa7bfd8072a75df262cf831645a1b9ca8e3a30c434bcf0afddd0e16d43031ba8fa4ed08e2940afa94f103f06dbecb2423f4cc0de4933b4755a9618420a517a5159caf9bc0a3928cda272f7a0102f2c773376bdb53580fce22008235810d912904af1cf13df04e2f0f77de0968fbbe8ce471d73d3413019081b6b85b5ab4c5d8f2e13bba0d8c4094fecf2ea12390a3c0f86d47f3d14dabaccdb37a44