danielrwoodward.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 4a:11:19:3a:d9:6c:da:a8:13:84:58:1c:26:16:45:3e was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=danielrwoodward.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:11:19:3a:d9:6c:da:a8:13:84:58:1c:26:16:45:3e
Serial Number (int): 98451652457442227479761795696748283198
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4b:19:0d:d4:ec:4a:37:32:f6:bd:bf:6e:f0:62:2a:a3:32:24:74:48
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 7a:bf:cd:b0:e8:a3:4b:9d:9e:23:14:dd:06:f3:46:33:14:95:9f:46
Fingerprint (sha256): 44:31:18:1a:be:7c:70:ec:96:e7:ce:27:b5:63:93:72:09:cd:01:40:02:a2:c6:7a:8f:de:90:c0:97:e6:05:c3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/swwbgIAFEYo
CRL Distribution Point: http://crls.pki.goog/gts1p5/XKyfgl3pkrg.crl

Check the revocation status for certificate danielrwoodward.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for danielrwoodward.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

danielrwoodward.com
*.danielrwoodward.com

Other certificates including the domain name danielrwoodward.com

(limited to 100 certificates)
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni24407.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni24407.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
phpmyadmin.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
www.danielrwoodward.com
sni46284.cloudflaressl.com
danielrwoodward.com
phpmyadmin.danielrwoodward.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni24407.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com
sni46284.cloudflaressl.com

Certificate

The complete raw certificate details for danielrwoodward.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPCgTT35IQnkM2PVML+a
LOYoooiezBY2cSJAxo8CDmuha6AV5dSVhAdCE53V7MDg02CHjTKjSj2YbI5GbeKK
M1jo//Pml9AUuFx0gmgNdstkRh+M8R2d/ImaSk0DV+LXWmlX2Ilf36EpE88Vt3FQ
uYYiO3XHLH7plGeNXLPWOG6NdtAg0UQ3caHvntURVfHIgB4IlCozxi07vP09os3M
R8wY3ZGnDnR9xAxpTnnu3ZmPAYEvi6U0CRlqFjUYiMWNRyL997XplTYPIOkrhpDB
c/UDVqswF7llaJgyCmhsZiXTHfKlSJa6OjfzWGpwDfVkeM/+ZvdVv3B3+K94SKSe
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98451652457442227479761795696748283198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 11:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 11:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'danielrwoodward.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19306879545932826240538356024830114790985012866564548186591909232578057457904328758450339729109749537705626499377281214867967728921162540256442417900127719133052980728067301519225382101638801611111360584344876056966089226740897300677093765419898393889245319688654186208421706165149785043911989070595813011901643791136507074936967093722516071055590435014110513243691396266852263575268891051681234295815665742258779981139638672863307645259357020916143571671717157130025188282621325816796683470020976286521664658372798250936322021791985009795392187928492593170742294778939205411312570333751835606967393334478312535531091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b190dd4ec4a3732f6bdbf6ef0622aa332247448
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/swwbgIAFEYo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielrwoodward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielrwoodward.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/XKyfgl3pkrg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c728e255e0000040300473045022009e54c0124850f372cc84692a3b2cd3a0d268ef92f2519c287fcf5ffa2a0fc1a022100fbe4d8c944f19ba56c4e97e181300e6b583c14ac4aef61ac2d3dbfaf63afa10300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c728e255400000403004630440220381fce741f8a3cdc6b5472ae98927405f1618e3ac749971c79289b0d2630133c02203795cdf8cae724a920d6099fc8bcc3ef5cf8433b6bcb7be5f0bc51bbdaabd457
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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