www.austinbratcher.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 23:ab:c1:98:28:ab:ce:3f:0a:00:00:00:00:0d:88:5e was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.austinbratcher.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:ab:c1:98:28:ab:ce:3f:0a:00:00:00:00:0d:88:5e
Serial Number (int): 47414789175602818695051926089149286494
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 81:0f:2a:b5:bc:e3:4b:ce:fc:71:1e:4c:69:de:b3:46:d9:01:72:89
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): eb:ce:ed:d0:c9:f0:f5:ff:07:e0:7f:07:62:20:35:37:da:f9:2b:dd
Fingerprint (sha256): 39:a8:f9:5b:49:92:52:55:03:90:a3:0d:c0:0e:d2:be:3d:be:5f:60:fa:3e:c0:da:1f:cf:74:90:26:70:e5:fe

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.austinbratcher.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.austinbratcher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.austinbratcher.com

Other certificates including the domain name austinbratcher.com

(limited to 100 certificates)
buzera.pl
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
eliashbf.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
austinbratcher.com
firebaseapp.com
austinbratcher.com
austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
theenvious.band
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
worshipjs.austinbratcher.com
firebaseapp.com
worshipjs.austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
austinbratcher.com
firebaseapp.com
firebaseapp.com
prefeituras.nfe.io
austinbratcher.com
austinbratcher.com
www.comicandmeme.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
staging.doozzoo.com
www.austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
client.augur.net
firebaseapp.com
firebaseapp.com
www.austinbratcher.com
firebaseapp.com
www.austinbratcher.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for www.austinbratcher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncWtVISDo80ZAAfk0TjU
Jdj/y2Hkqi4pc6lUV3mSXRMuq6XZDR6c4O5Gw2GTn4VVZgACOgeaio8R4hGgdcsJ
zCvyXvhd6Pwfds9zeGvvfpyKVZaQAk0WlbU/6K2q2MUAOw9s4hpqpaFtSdsIkAPd
BUXTd5eaAVnJTpCq5ZdB5GOBeP+rwTb7KcgCTrTZHDnJjAUG0UAOntFQ5quKHRgz
xK0YlL5769tKZVVl45CcHrOptLo7gHzFhrFpWs4JNAod+oplFCqFRhpZ8etabp9I
KAO8KKboWN5FSQLEpYcfq2C9qQWMBqIXJTEgYM9jadzyVjeyZUFS/4wmI2mZu1SO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47414789175602818695051926089149286494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 15:57:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 15:57:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.austinbratcher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19916892076387602119789970932147693448895796415517712021321327598609486179749873983655589422444905598167168065229673960414267566434962214057940012202335473686850276484879251494526519872296545749466052648649072459326229197603371239668167258482289424601704114575748295218865690385177770753966397413031733947320990533539726826116875747425463022006269168451847040440749215867833274256269724987370165419192675823173520112826405672841614408637128005798748479820161788744205578465144735623250073679073046353521889904145328689100281213444415730838305243408206218029841582575973758873259699086251657608312224695525051462880969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							810f2ab5bce34bcefc711e4c69deb346d9017289
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austinbratcher.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016faf498ae70000040300473045022100851e82b2fc8e5182e811b1bb365470df24b371749eaac6195ecf9840cc76802d02203e51cc2f0517d9399c72f93db333a54828b4a4bc008bb346990e1588184466ed0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016faf498b070000040300483046022100becf0115ffbcc2c068f78ff91478e9598b9e8b48bfcdb77388dc0cc6891a51dc022100db743873f3f2a5e0ff572d9fc8adc26dc467194685aff341ef641502925cae28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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