api.canary.ricohspaces.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 9c:c5:a7:c1:5b:fb:da:de:09:6a:80:5d:c5:35:a8:d4 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.canary.ricohspaces.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9c:c5:a7:c1:5b:fb:da:de:09:6a:80:5d:c5:35:a8:d4
Serial Number (int): 208385852305485022144006982882622286036
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fc:71:0c:1b:c9:34:ea:ff:ab:62:97:94:f5:55:ad:c0:8e:88:c8:60
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 25:2e:6b:5b:ed:4a:e8:40:4e:51:e0:f9:9c:af:0b:68:04:d4:7d:1b
Fingerprint (sha256): 38:33:43:17:03:09:8f:64:ff:cb:a0:12:ec:7d:b2:f3:bd:b5:b5:b6:f9:98:0b:5d:83:03:88:12:34:e9:47:7e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/k9FahZpl3_g
CRL Distribution Point: http://crls.pki.goog/gts1d4/WmJPzcF5xBA.crl

Check the revocation status for certificate api.canary.ricohspaces.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.canary.ricohspaces.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.canary.ricohspaces.app

Other certificates including the domain name ricohspaces.app

(limited to 100 certificates)
canary.outlook-addin.ricohspaces.app
watchers.ricohspaces.app
next.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
admin.ricohspaces.app
outlook-addin.ricohspaces.app
canary.ricohspaces.app
bots.ricohspaces.app
support.ricohspaces.app
www.get.ricohspaces.app
bots.ricohspaces.app
api.ricohspaces.app
canary.admin.ricohspaces.app
theserot.com
api.canary.ricohspaces.app
canary.ricohspaces.app
api.next.ricohspaces.app
test.ricohspaces.app
test.displays.ricohspaces.app
canary.outlook-addin.ricohspaces.app
test.ricohspaces.app
supplier.thegifter.co.nz
watchers.ricohspaces.app
canary.displays.ricohspaces.app
smscapa.com
components.ricohspaces.app
ricohspaces.app
get.ricohspaces.app
api.test.ricohspaces.app
outlook-addin.ricohspaces.app
api.ricohspaces.app
surveys-graph.ricohspaces.app
www.hlavac-business.com
canary.displays.ricohspaces.app
admin.ricohspaces.app
canary.ricohspaces.app
www.get.ricohspaces.app
get.ricohspaces.app
support.ricohspaces.app
smscapa.com
api.test.ricohspaces.app
watchers.ricohspaces.app
bots.canary.ricohspaces.app
admin.ricohspaces.app
behtarlife.in
canary.ricohspaces.app
semadashboardinternalstage.talktosema.org
mandolin.com
get.ricohspaces.app
next.ricohspaces.app
bots.canary.ricohspaces.app
api.next.ricohspaces.app
support.ricohspaces.app
canary.ricohspaces.app
cors.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
admin.ricohspaces.app
displays.ricohspaces.app
api.canary.ricohspaces.app
www.imgproductora.com
api.next.ricohspaces.app
test.displays.ricohspaces.app
www.imgproductora.com
get.ricohspaces.app
watchers.ricohspaces.app
*.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
test.ricohspaces.app
maps.ricohspaces.app
ricohspaces.app
api.test.ricohspaces.app
api.canary.ricohspaces.app
api.canary.ricohspaces.app
test.displays.ricohspaces.app
canary.displays.ricohspaces.app
support.ricohspaces.app
bots.ricohspaces.app
surveys.ricohspaces.app
surveys.ricohspaces.app
support.ricohspaces.app
support.ricohspaces.app
ricohspaces.app
next.ricohspaces.app
cors.ricohspaces.app
canary.ricohspaces.app
outlook-addin.ricohspaces.app
get.ricohspaces.app
canary.admin.ricohspaces.app
mobilityware.12traits.com
canary.outlook-addin.ricohspaces.app
canary.ricohspaces.app
maps.ricohspaces.app
www.get.ricohspaces.app
www.get.ricohspaces.app
api.canary.ricohspaces.app
api.next.ricohspaces.app
api.canary.ricohspaces.app

Certificate

The complete raw certificate details for api.canary.ricohspaces.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy40E+im2KIAiiX+UU2/k
KNrTfQwAiYbUsgZteXxOhGwPYE+tKT3RKhDLELI3iSYrMzLdxADkhiuxS1cgpc11
UpMAJ6msX0cVg+Yv4Z8Xr6LsoD1VkQzfr/6J9qa8iGpCefr2C6nDn4D4nNCjf6lN
i4DFdLHFGPxFi4VoITP1M4jWJYgDmjCUoSxEiSKqvcJX2tWzy6ZFF7QDpjSlgak/
x3SvaS2yzdjCIoZdFlAUP689jyJjqiVZafVNuxm9SlUlIseTkRQ/qtL15BC0Ws2g
cwM5eZLk7hV7bm52SD/VSI2XmA7QDHhytHVYK+Ni7X9IIupB1lvysJ157k3FSifU
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 208385852305485022144006982882622286036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 05:25:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 06:15:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.canary.ricohspaces.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25695915186814978892349186012728944804829374753233163730385984825838012359501555512678535129448180521653483074896996619623378912592376587724523780411916302884742656333569148701170364936319351264642840937150821782746236264537302151413160417526471101274714560152489049579952021480620666760731427059986357855295959402274190825360690195421768849216814201325579120634247438158245063300699976789046091415656172821423275855249301634940317870909520393018711718428047225395801825907513602368481366860642308496020198692727369891300632040496749610538305278238445942572638994175681035778749723712360160057931080844033660792853691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc710c1bc934eaffab629794f555adc08e88c860
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/k9FahZpl3_g'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.canary.ricohspaces.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/WmJPzcF5xBA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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