intactpublicentities.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number fd:88:f8:9c:65:bc:b4:8f:13:6c:44:e5:d1:df:38:32 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intactpublicentities.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fd:88:f8:9c:65:bc:b4:8f:13:6c:44:e5:d1:df:38:32
Serial Number (int): 337005877735005626952939427903592937522
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:07:68:f8:16:04:5a:5d:12:9e:f8:76:98:d1:10:30:80:7f:1a:a4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 46:55:26:46:78:7a:b9:d5:0b:bf:3d:fc:07:d8:1f:25:14:7c:a5:75
Fingerprint (sha256): 43:69:ab:fd:07:98:ed:f2:89:17:67:06:33:a3:16:98:b9:96:bb:16:84:62:b8:a9:69:14:19:d9:43:18:e5:f0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/5RnIZxc228o
CRL Distribution Point: http://crls.pki.goog/gts1p5/V2yfc5CRMiw.crl

Check the revocation status for certificate intactpublicentities.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intactpublicentities.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intactpublicentities.ca

Other certificates including the domain name intactpublicentities.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for intactpublicentities.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zTkdeUIiW0DQv/q3w+F
0Wo9QktdzwpEkfwtEJcpFtadmdEbbJY6Op3my0ovWty00NKyED5gOJEVYIMAI5mu
SEyiSK+jgLOaKNFQDtBhicCPScJ9MVo6hZQX8SULdoxFvXhJOIL/PPbkLS5iJUnm
ijp/ceS/XHWX9bL24nJz15nCmf5hjHHEQqWh2dl3HR076oEUFNPPYMasRqylEUHW
fhdFyy7Sf28thqO+KnDENLW1lRStvafwXVfYohuJyBQBplyd8t6yAmy8go0fPw6s
R03IvkUE8g+afamolzIC/j1RIYpSo85WSla7Q9aDn1zk/UwAs5+gCfE9hfmZ3tp+
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337005877735005626952939427903592937522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 02:10:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 02:10:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intactpublicentities.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27167317794040262240797127254593658363328472794654300833422237521727803935888133112636956229016838633135686298957487113427112635067451232573101750591767106482283824382427462878065380484868365059890583716039964123196798642251248146550342366107966244190535234100055326373324041060031315918100854578908053615115956835922000521570171580444924712122023911939347549842764563352156763049264828902875056258261919073219610658014866497228592289287842571304890502275538378940527002786205993345366217472282040049450736542234545258265303418936015682969102042551811678505111689304256235186373826842429893937815566216030589560717039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							200768f816045a5d129ef87698d11030807f1aa4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/5RnIZxc228o'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intactpublicentities.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/V2yfc5CRMiw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018942edd22c00000403004630440220348d113943a9fea5e8bf9c2b7920070ba8af6cb98b250905a846ef523bfda24e022013c7a1cc607e95d2d022a4f29aaa40885824e55e89d549ad70163897249d78ec0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018942edd26d0000040300473045022003b556ac21ae555d5a7490f6597195c54b8c45f8e9226350cc30950912058fd80221008e5de60b6ff692aa3ed053a65c7520007005d5874f5e0c6a56734e67bf590f8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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