intactpublicentities.ca
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 56:49:3f:76:9f:05:22:9a:11:36:78:29:bd:9b:43:fe was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=intactpublicentities.ca
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 56:49:3f:76:9f:05:22:9a:11:36:78:29:bd:9b:43:feSerial Number (int): 114693932498118338818229932991539004414
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 1a:83:99:46:df:ef:2a:df:9b:63:c2:c0:7d:f4:34:c9:f2:c9:0a:3e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 49:bf:6e:92:b3:df:f7:90:38:49:fb:67:8c:36:3f:d7:6c:b6:b7:bc
Fingerprint (sha256): 4c:27:32:6a:47:99:16:ff:4f:b2:99:a9:05:fd:b3:b8:89:5a:01:e2:6b:ed:de:36:6e:5f:e9:a6:43:07:34:99
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/_CSlMvlMopcCRL Distribution Point: http://crls.pki.goog/gts1p5/hnGpBwv3XAU.crl
Check the revocation status for certificate intactpublicentities.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for intactpublicentities.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
intactpublicentities.ca
Other certificates including the domain name intactpublicentities.ca
(limited to 100 certificates)
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
sni.cloudflaressl.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
intactpublicentities.ca
helpdesk.warren-wilson.edu
intactpublicentities.ca
intactpublicentities.ca
sni.cloudflaressl.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
itservicedesk.intactpublicentities.ca
sni.cloudflaressl.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
intactpublicentities.ca
helpdesk.warren-wilson.edu
intactpublicentities.ca
intactpublicentities.ca
sni.cloudflaressl.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
Certificate
The complete raw certificate details for intactpublicentities.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQVkk/dp8FIpoRNngpvZtD/jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzExMDYwMTU3MzRaFw0yNDAyMDQw MTU3MzNaMCIxIDAeBgNVBAMTF2ludGFjdHB1YmxpY2VudGl0aWVzLmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcC72t0feSDf8s+snIAGilFyOSSU CkO66sZwAXVaF1vSViGAnXGwHxkWTqCubmaohAFxGgrjZNhxDhacpFSJFP29s4Ui 3380MSvj2FShhIEVBBRpTesy4lKR4sVY9xY/92AyLJ9zhVlRXhDK8xeP+4RdoQsJ Z3d0wjUaXVPFiOKLoQ4Ido0qIEc/Ij9q3Rail3oWiwIBXKoUps90raGvd/v81B5n r5CFivEbjfGLTkr44Ca5H8jeq4kjn5supqfp0Do4//WwiKWRxxUjZjhJjnXA089r y72maYXkEW/9BXEoB37ekhMuIYlsANrlOFbOTo8y73ASoRJbaDSw5eS8fQIDAQAB o4ICfjCCAnowDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBqDmUbf7yrfm2PCwH30NMnyyQo+MB8GA1Ud IwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1Bggr BgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvX0NTbE12bE1v cGMwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFw NS5kZXIwIgYDVR0RBBswGYIXaW50YWN0cHVibGljZW50aXRpZXMuY2EwIQYDVR0g BBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6Athito dHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvaG5HcEJ3djNYQVUuY3JsMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGLopBpnwAABAMARzBFAiBcIGCtZP4uSlNOpYTiWukNVycrK8UnzBtp QHFbHQXsmwIhAM0TaZYD8XMuVhUIxPRHMhkPdq1vZ9CYX+k7EXMRRTvJAHYAdv+I Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLopBprgAABAMARzBFAiBG tHN9iMDOvj8fmbUjUUMUrE46qGJmUf84uEWUnsKjwQIhALdo7A7cNYfh7JhOA6F0 u8tH9Dah8RvWZ7SS7G06EqntMA0GCSqGSIb3DQEBCwUAA4IBAQB8kDSzDdkEFvKg qDN+ogkNBn7uBcUVP0eCjum+kxeSL9jatdJsC+S4qPIPjeNRTaa1Q7YoQsBCulh9 YTlJGjrfnppqyS7qDz2J1fjVezdgWyFFCE1g5iXspyjROfZAP8Xa2EX7+ErcaQLf Ivb+dZcTFhq59841UoKMkmslGOTVxuAmCxUT0W33NK1T7ikCFWDY1trArQFg00x7 ctPVUnJOqwy/ayQucwhHCiedw1Oeteq6T2YVPTkZIiVhrfDpn/IyQF7I9Wd9M161 YD0ctCO3hgLjXn+9Zq3/eB8JHFQq0sPxRMtn7TK7A81E4bT/RTebY52OTu1wrJCb zPyk70Fe -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcC72t0feSDf8s+snIAG ilFyOSSUCkO66sZwAXVaF1vSViGAnXGwHxkWTqCubmaohAFxGgrjZNhxDhacpFSJ FP29s4Ui3380MSvj2FShhIEVBBRpTesy4lKR4sVY9xY/92AyLJ9zhVlRXhDK8xeP +4RdoQsJZ3d0wjUaXVPFiOKLoQ4Ido0qIEc/Ij9q3Rail3oWiwIBXKoUps90raGv d/v81B5nr5CFivEbjfGLTkr44Ca5H8jeq4kjn5supqfp0Do4//WwiKWRxxUjZjhJ jnXA089ry72maYXkEW/9BXEoB37ekhMuIYlsANrlOFbOTo8y73ASoRJbaDSw5eS8 fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 114693932498118338818229932991539004414 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 01:57:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 01:57:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intactpublicentities.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20924360902506111970893202381110628203638693113047049542237562804856465813819100881647972939677091425116384603970653791103556661935864272490113276036421232889844790543284239418077179233926363374417465283808271447913078633565652837256919266549813052118488164537190622237078262611353906188981851647842620243553377021923977719017393788482077756381247555307282600431582975825207030890217408846299998073634446196455281297916180961553775527601881595325413291956685335301502517004035947945089300600310207442542422004729146590795230883557481480448039589183377755839694350883348951978042136956927320866496072999522831052356733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a839946dfef2adf9b63c2c07df434c9f2c90a3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/_CSlMvlMopc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intactpublicentities.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/hnGpBwv3XAU.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba290699f000004030047304502205c2060ad64fe2e4a534ea584e25ae90d57272b2bc527cc1b6940715b1d05ec9b022100cd13699603f1732e561508c4f44732190f76ad6f67d0985fe93b117311453bc900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ba29069ae0000040300473045022046b4737d88c0cebe3f1f99b523514314ac4e3aa8626651ff38b845949ec2a3c1022100b768ec0edc3587e1ec984e03a174bbcb47f436a1f11bd667b492ec6d3a12a9ed . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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