captive.googleapis.com

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 5d:b4:fc:c1:5a:d6:e6:2c:05:00:00:00:00:87:bc:d5 was issued on by Google Trust Services.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:b4:fc:c1:5a:d6:e6:2c:05:00:00:00:00:87:bc:d5
Serial Number (int): 124557943528902378592780210267073526997
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b9:39:e0:2d:39:fe:a0:8c:40:f5:d4:79:01:18:67:b7:70:a1:94:40
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 3a:22:3c:1c:3b:11:00:70:bf:3c:c7:31:67:ac:f8:78:5e:67:59:e9
Fingerprint (sha256): 32:25:f8:d2:8f:6b:ee:3e:8d:91:d9:67:92:ce:39:de:b3:3e:23:c2:c0:d6:7d:24:cf:32:df:bb:22:03:cd:ef

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1core
CRL Distribution Point: http://crl.pki.goog/GTS1O1core.crl

Check the revocation status for certificate captive.googleapis.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for captive.googleapis.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

captive.googleapis.com
captive.adservice.google.co.id
captive.adservice.google.co.in
captive.adservice.google.co.jp
captive.adservice.google.co.th
captive.adservice.google.co.za
captive.adservice.google.com
captive.adservice.google.com.br
captive.adservice.google.com.mx
captive.adservice.google.com.ng
captive.adservice.google.com.ph
captive.adservice.google.com.vn
captive.csi.gstatic.com
captive.googleads.g.doubleclick.net
captive.pagead2.googlesyndication.com
captive.pubads.g.doubleclick.net
captive.redirector.gvt1.com
captive.securepubads.g.doubleclick.net
captive.tpc.googlesyndication.com

Other certificates including the domain name captive.googleapis.com

(limited to 100 certificates)
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com
captive.googleapis.com

Certificate

The complete raw certificate details for captive.googleapis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVKOXakLviaDqXm4+Lm96adFex+fU
A96Enn7Bz3GyRN7Jy3j7mO568RIBdZRrt6/eHGmxiW3uMfPIZXx0M2wR5Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124557943528902378592780210267073526997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 10:22:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 10:22:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'captive.googleapis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000454a3976a42ef89a0ea5e6e3e2e6f7a69d15ec7e7d403de849e7ec1cf71b244dec9cb78fb98ee7af1120175946bb7afde1c69b1896dee31f3c8657c74336c11e5
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b939e02d39fea08c40f5d479011867b770a19440
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1core'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.googleapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.adservice.google.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.csi.gstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.googleads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.pagead2.googlesyndication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.pubads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.redirector.gvt1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.securepubads.g.doubleclick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive.tpc.googlesyndication.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1core.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178caf83c160000040300483046022100ef917248b02e8d00b24dd878639d5515281f5cf5138f243dfebeb8f7e3b6b788022100f1684089a15a8a9489f411fc1be53fc6c0f3de95955fa1b9dacacdac1e4a4bda0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000178caf83c200000040300483046022100d2882d14ec3444e840d83ebbb5b20f72109a948e8003b1241a5e2db8d820e43702210088bd0587eec4d1b5101f982d643f60e8138f405250198ef761a9721483301f6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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