gemsotec.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number aa:78:9e:b8:8c:88:fb:4d:13:98:e5:47:06:18:9b:1f was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gemsotec.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): aa:78:9e:b8:8c:88:fb:4d:13:98:e5:47:06:18:9b:1f
Serial Number (int): 226595054148652659319890484407156906783
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b9:9c:17:6f:0a:ae:21:a5:a9:f0:55:90:3b:01:a1:c5:83:1e:be:91
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): b0:2c:aa:5e:06:94:44:9d:67:5c:46:7e:0a:08:0e:51:a0:20:b3:2b
Fingerprint (sha256): 45:00:83:d9:35:b4:25:ae:e2:8f:f1:df:a0:d1:d7:3b:b8:cc:38:db:97:b8:0a:58:36:2a:c5:1d:e3:11:b9:46

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/pcvJsvDe6oY
CRL Distribution Point: http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl

Check the revocation status for certificate gemsotec.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemsotec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gemsotec.com
*.gemsotec.com

Other certificates including the domain name gemsotec.com

(limited to 100 certificates)
gemsotec.com
www.mbxr.io
justosiris.com
thebazaar.ml
korona-dezinfekce.cz
skytrackr.com
dev.restamiga.com
www.dev-app.askgenie.io
gemsotec.com
keeptweaking.com
c2-systems.com
yofardev.fr
www.moonlocker.org
kdwyer.dev
livestreamja.com
narita.link
school-dev.handtoy.com
www.gemsotec.com
castlevania.tonycasale.net
nextjsauthdeve.breins.dev
www.postmeta.com
emvento.com
www.prodmmd.com
gemsotec.com
www.sbstnjmnz.com
apoet.co
nordahl.vetspire.com
gemsotec.com
jamesstuddart.co.uk
wealdstone.scouthub.app
*.gemsotec.com
www.davidladleydo.com
gemsotec.com
www.nexusedu.app
www.navramlogistics.com
inventaire-outils.cafedemarie.fr
www.zennetaler.be
guitarnoob.net
hi.notionlayer.com
www.muffut.com
mereaux.org
imedis.io
wastewater.nicd.ac.za
mobile.signally.app
gemsotec.com
encuesta.fundaciondelamujer.com
gemsotec.com
www.schoolswillrockyou.co.uk
wizheard.com
gemsotec.com
gemsotec.com
gemsotec.com
www.lossalvadores.cl
www.housle.house
gemsotec.com
link.hkilter.com
dashboard.foodly.tech
app.oxxio.nl
henesysstudio.com
link.hkilter.com
nordahl.vetspire.com
www.funcionalflow.com
femshare.com
andradev.com.br
teamsports.me
chargefinder.com
kristiedawnbabcock.org
gemsotec.com
jamesstuddart.co.uk
gemsotec.com
gemsotec.com
app.overhq.com
gemsotec.com
orsaydemain.corehab.fr
proresume.in
ismailhsici.com
www.thebothies.com
gemsotec.com
dev.beta.admin.klikkie.com
www.kylecompiles.com
gemsotec.com
georgeshawtoilethire.com
www.pokemonplanner.com
gemsotec.com
fbdnlinks.d405house.com
www.physicalexam.online
demo.intercept.rest
gemsotec.com
wl.ueue.com.au
gemsotec.com
www.unilab.health
anotherclass.net
tog.systemdesign.no
assetstratagem.com
listen.no
gemsotec.com
chargefinder.com
mothr.yachtmoney.io
imedis.io
ismailhsici.com

Certificate

The complete raw certificate details for gemsotec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RNtZeFuK2aO9ChRjuS
kQ9khoqAZSdjcFrucm+dLVXoeBuf+uAIk0QnrSG9dzX9DOsqzhm4V0bHX9mNonZB
5f+DPZ8Xtjz08kpNxD1sC+6PPm58stCwl4DJdf+v7l62jjcKrx01qaLIVQUnbLwN
74JdBkbYYdGbUMLA5ViPmga1OTUkIZEk5u44/HlkVDvq7nKG7HN8vkC7Chx0LULQ
7ZnauHBzeKwY95BkrDoaci1oxKcGZ7jvMG53B0cKp5v8ii7qK1ISNeOAQbn6qnQF
WtcOFLWKHl/1oG+T4m4ZmvltfacidhP17fISWdZr5QKd+01QjHxQp81OpA3DPlDM
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226595054148652659319890484407156906783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 08:31:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 08:31:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemsotec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17107412483546438223580252552369046430758284316683612643296243201169382808815585744455476846787197164164348366669906048248334069930285358590043688471834972227937638073115652387068053656851231012490201025066013058513225053526538693613204848270143780834430138267754647254978564268036998994523194136757976173356310247838535219547873007133985085377228859833181101217270124558153777155485482666611893643220491613413254885079475900800977166439300526244907589752800273085029077167876814912443613093601039266896459737803623188230474322356304841429173949274552854656629659741130446585374594938444903101362993537627617728973919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b99c176f0aae21a5a9f055903b01a1c5831ebe91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/pcvJsvDe6oY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemsotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemsotec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f2e58197300000403004730450220414d84f2d9e30e9a07d8eacec8980e8e1bd7a0aaad0bb9185f0884b33b99f1c10221008eb9c6c4472f9a7f31a9eb8ca64463876f8a1da9f1c308c4036d4e7aa13e687600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2e5819990000040300483046022100c289e2dc99922ba66bb9ab13bea8e161e2b220344ea57eac0505d99e2d4dddfd022100f1858b1f39cb1e12e9c6dce790e74550ee6a99057af009f1efcdf3fbd79a359f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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