avastlanding.gendigital.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ea:bf:56:c9:5d:79:90:55:0d:2e:08:ed:22:77:4c:0b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avastlanding.gendigital.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ea:bf:56:c9:5d:79:90:55:0d:2e:08:ed:22:77:4c:0b
Serial Number (int): 312032839954666113274583440072193297419
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 35:9a:58:8f:18:87:36:16:43:09:45:c2:71:58:90:e2:9d:a5:55:1c
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 19:ff:f4:a2:1d:6b:1f:55:ee:59:33:ba:7f:45:09:54:15:59:9c:92
Fingerprint (sha256): 32:c5:e0:30:f1:ed:83:3e:ed:2b:5e:3d:63:8d:5e:80:22:8f:93:71:b6:9a:80:66:d2:92:5e:43:56:8c:bb:84

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/0RwHs0iE_ug
CRL Distribution Point: http://crls.pki.goog/gts1p5/Vav6cYDNKUw.crl

Check the revocation status for certificate avastlanding.gendigital.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avastlanding.gendigital.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avastlanding.gendigital.com

Other certificates including the domain name gendigital.com

(limited to 100 certificates)
biz.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com

Certificate

The complete raw certificate details for avastlanding.gendigital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WCQ3DItVSYSbxbCvHpc
v4ywvoztzjZR1FCawYvIfrUqDMxzVMk6fVn3sBQ49Tb6viTqVzt3yxoG9kS9bOUa
3s+T1KhHxgJUNKBvkEmfq6CEH0HnwHsdrILBhGf2JtGgGl10IBUam2SFl3vElMkM
iMpJdP2mk1EmIzOsGgQvvZW7274h41XkoXV0DAjKFnVzZ/tWlBGtxYyfKNlPfwM8
NJxeoLXWmjFcRwGN7cBnzsOFditCCI+79JYZDSLrmcSJ/XLed6/a4RfxBoA+ZUrS
orw4Df3dU0Ywg0Rb0wFaHO0qtNiyJ3LA+hEbrEbfh+L9LyHdpUSTUvNOUDCIqklx
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312032839954666113274583440072193297419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 12:46:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 12:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avastlanding.gendigital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28956190237518220137384127067160931796958583533527499477526683445330704576395651801248498692350268444175978874244698904642606858419479511139024404211099892272535808061428011053469852411215279363562666507595824498594806217482018746938680037649719338949443121299083165993882794159752783990983332278470327474007277221913276992752635396674815246371875774944786231615580694509523650953257093015466986013755528331154888336765048482092491507847158756751216889873467820103007893424142920696474899787485470396063231813133903626730501684837772691752364480354211089861644910762970450294531319965139194507944716240182075130999217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							359a588f18873616430945c2715890e29da5551c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/0RwHs0iE_ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastlanding.gendigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Vav6cYDNKUw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189f44c47c500000403004830460221009969d14301713b0f5a75196607ac4bef1706569fab83bfd602c3791785121176022100df99ff4767035631613a2e48a1d4eeffd6531a987a077c7a584168b573aa0278007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189f44c46e4000004030047304502201b8bfe2eded6dcc90f5cd181573202c891088a482d07947c4fdb82e4138b8cc1022100c55952354051a44bec3be464746624dd3fc0b0a41fee6741b7f84334b73f4a1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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