curipod.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number db:b2:39:45:c5:19:20:4d:12:7a:56:e0:be:16:2d:86 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curipod.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): db:b2:39:45:c5:19:20:4d:12:7a:56:e0:be:16:2d:86
Serial Number (int): 292026321542805319731019195431387540870
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 42:b8:81:84:13:5f:ec:c0:82:bd:3b:88:b2:1e:8c:73:c4:06:05:a5
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): e3:db:b4:89:7e:35:20:10:3c:85:1e:96:4c:8e:fd:9a:90:d6:e9:93
Fingerprint (sha256): 52:93:6d:af:62:0b:5c:ab:7f:66:aa:82:e4:c2:ad:91:c3:d9:22:71:4e:93:8c:20:e9:f6:42:d8:c5:ce:11:b5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/0tQEqA4D1tg
CRL Distribution Point: http://crls.pki.goog/gts1d4/x2O7RTp0MTA.crl

Check the revocation status for certificate curipod.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curipod.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curipod.com

Other certificates including the domain name curipod.com

(limited to 100 certificates)
rxradio.com.co
id-dev.curipod.com
www.paypakit.com
www.standuppie.com
covid.asanchez.dev
jdaqbank.com
www.gestexcel.com
fairyzz.com
ao-mobile-ut-analytics.amtrustfinancial.com
link.tenzor.rs
mykullchu.com
admin-v2.ndali.app
auth.dev-ats.persol.one
omukuba.me
ekiatsu.mieruka.online
admin.mobileidlab.com.au
playground.plugfox.dev
api-live.curipod.com
auth.tracksy.ai
www.activities-central.com
defensewatches.com
2022.devfest.gdgvalencia.es
investment-accounting.resre.bm
curipod.com
connect.awheels.kitloongholdings.com
carrascopolo.queliga.com
ddstore.estore.business
my.classroomapparel.com
hsb-dev.moonland.world
seutecnics.com
www.reiche.dev
www.plade.io
www.beatthebeans.com
krajna.dev
app.ungcash.no
indianalegislativedirectory.com
app-dev.curipod.com
93staples.com
www.lootlot.com
curipod.com
reading.email
app-dev.curipod.com
feemagie.com
mozica.jp
admin.noctua.test.gotoloop.dev
referral.extolapp.com
harimaupining.org
romiapp.com
www.monaco-xi.com
www.denzeegames.io
curipod.com
aryavratorganic.com
chiquerentals.com
www.fyno.co
yodev.yolinks.app
www.gestexcel.com
curipod.com
www.voteevanduncan.ca
www.energyinstalacoeseletricas.com.br
www.hellomexico.mx
kahkecioglu.com
mjolnirmedia.no
www.karmka.com
reporter.xenterglobal.com
curipod.com
cordovaonsen.net
webplayer-fac.wexer.com
manage.realpartyinfo.com
www.jected.com
app.cattlemanagementsystem.com
app.maimmoth.com
dorsha.com
next.beta.katapultpro.com
www.qetzlabs.com
rem.co
qgen.io
analogmoment.com
wiefel.dev
pulsecare.medgrocer.com
centralcorona.com.br
www.payaftersalarysystem.com
www.shambhala-transition.org
www.amplireach.com
uat.castart.live
www.shreeandshubh.com
teamsff.org
unlocked-app.com
emennu.com
www.smokekiss.in
vi-ola.com
ayat.ai
app.staging.incaseof.law
curipod.com
pink-videochat.com
www.jected.com
api.mlfairy.com
rxradio.com.co
fasadteknik.byggkollen.se
indianalegislativedirectory.com
admin-v2.ndali.app

Certificate

The complete raw certificate details for curipod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA0dob0qGtBfs8aUW7Yi
T7vfl8VuNM4KZIR2+dl6jd/mkHo/oe4z2TkrUr4Ia5rz1Z/Uyw8s2L5cpdARZqwy
JBOK/CpIXePSDP6PwB0gUStALj5Q1+rYL/CtuQsWH8BKD4dwc5FoP7niTdhpvZKK
NABQ9n3IcmOi9qzdNtyuKDlrM78SJl5k7Y11ptYzIOIsFkLquz4jsT7fKXL57hXa
/TSNlde8Q6e1fFR4IG24tijZhoe12Bt3jMJhs9Anu7ojQnCT8mjbNMmJ+VBJxCqV
IZA1kReoIGJ9M2kZxWRItL2mxWZNG0E5TzHcETvpLrxktXr0DH4qrBlALsUn81AT
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292026321542805319731019195431387540870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:33:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 01:23:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curipod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23234315730731820599343745086235757488037695332007101230929178090652917297853858085474027389215767067709263782760591903835254169746544245579450858275800418482418105362574779507749515273821072724619109154182327329179206872968377736580341562526685552000238792094236046815461591804470237277786169412346071741169731768298678572766524658707609852752355155481217983644701612855652958540121100911787067859994681052749944912399746350070553654305347336248232099112169439821846473561433926658428430965852101816279332482314104639687266676865695968183722695497314447383060443603623004035501357607612177272881270196540571617596213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42b88184135fecc082bd3b88b21e8c73c40605a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/0tQEqA4D1tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curipod.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/x2O7RTp0MTA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7d8a522d0000040300483046022100c6dc5e3789fb7631d05f409019a88a202bcea553748002ddf9ae1ac645357a94022100fa5bae8856fcbece1802d32006a54d0561f3ce67fd288a23e518ce5960732d5100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7d8a525000000403004730450220526e4f6921d38a6f870c30d39c6b6a7d72acc9e58390441604391b50c58ed2a8022100e0beb8edc499ac5e137bde9c1bc72ad85c3d9c7cda9a03309772088128fd8e95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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