aur.is

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f9:21:99:e0:3a:72:5a:58:0a:00:00:00:00:ec:87:07 was issued on by Google Trust Services LLC.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aur.is

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:21:99:e0:3a:72:5a:58:0a:00:00:00:00:ec:87:07
Serial Number (int): 331152237720641838315667543678820058887
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 54:ca:41:6a:1f:87:53:b7:24:7d:5a:80:b9:06:94:74:73:5b:d5:dd
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): be:20:a6:09:47:c6:60:c1:56:78:3a:72:84:9d:04:c6:db:e6:61:a4
Fingerprint (sha256): 52:de:6b:c0:c4:d3:3a:ae:9e:58:d5:da:70:85:92:f2:f6:4b:cb:e1:b0:97:e8:eb:da:2c:0f:5d:64:84:70:5b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d4
CRL Distribution Point: http://crls.pki.goog/gts1d4/24E1YFLVsFE.crl

Check the revocation status for certificate aur.is

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aur.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aur.is
www.aur.is
posi.aur.is
verslun.aur.is
aurapp.is
api.aurapp.is
admin.aurapp.is
beta-cms.aurapp.is
pink.aurapp.is
webapi.aurapp.is

Other certificates including the domain name aur.is

(limited to 100 certificates)
aur.is
pymera.pe
greidsla.aur.is
kvika-proxy.api.aur.is
www.aur.is
signpost.dev
greidsla.aur.is
beta.aur.is
gustavogranado.com.br
*.aur.is
www.aur.is
aur.is
api.app.staging.aur.is
api.internal.aur.is
www.blinkov.com
aur.is
www.aur.is
www.awaq.fr
aur.is
aur.is
aur.is
www.privuo.com
deniputra.com
aur.is
www.privuo.com
aur.is
kvika-proxy.api.aur.is
www.aur.is
www.beti.ch
beta.aur.is
api.app.staging.aur.is
api.klink.aur.is
greidsla.aur.is
aur.is
account-dev.tanto.app
www.ficaemcasamairi.com
api.app.staging.aur.is
www.lossti.me
visa-cms-dev.hicity.world
servicedesk-api.internal.staging.aur.is
www.binarycube.in
greidsla.aur.is
aur.is
aur.is
sanjog.turkunepal.fi
aur.is
www.aur.is
gustavogranado.com.br
greidsla.aur.is
aur.is
greidsla.aur.is
greidsla.aur.is
api-temp.app.aur.is
aur.is
sfg-manching.de
bayport.bytekast.io
api.internal.staging.aur.is
www.aur.is
simplebingo.net
www.miomio.de
greidsla.aur.is
api.app.staging.aur.is
www.aur.is
www.futureicx.io
api.internal.staging.aur.is
aur.is
aur.is
test.fitto.work
*.aur.is
auth.withfinn.com
www.surajitg.dev
aur.is
www.gosh.live
demo3.velocitytalent.com
www.dailyui.com
aur.is
*.aur.is
posi.aur.is
api.klink.staging.aur.is
aur.is
api.internal.staging.aur.is
posi.aur.is
greidsla.aur.is
greidsla.aur.is
greidsla.aur.is
demo3.velocitytalent.com
www.aur.is
aur.is
aur.is
api.internal.staging.aur.is
api.internal.staging.aur.is
api.servicedesk.aur.is
thjonusta.aur.is
api.klink.staging.aur.is
aur.is
www.aur.is
aur.is
*.aur.is
api.internal.staging.aur.is
fastify.pandicorn.app

Certificate

The complete raw certificate details for aur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVMdj6X6IEPRsCdcUYz1
euzfddw80zDJmkT8uXc/ZPZ1xPPMlVu3baopu0UQ4mKMLPNjWyEMMtjy+DZ5DuCh
khwkVJyNonlMt69f888O0B5pjxYECbzwPhXiyNI8JMmQ8hWM3mo0Yq0gCcv+vpOc
ClPaDMkjITLpOw6m4GcMnpfNHOOBdOKqPgL5xyZ4GYtl3zV2eXUQ0RWR8JbbfjUL
UndoPgbCdCbxID9vmQHNJBz+1kNbjrwwWzdSJiT+vgG6NWl4CUhxDvWwrfCJd4W7
0/hCifQJUZNMOLqfva4dgwytW1CMNExZbOjB45XqFCnMV8p9JempxkaKUSiUkMrw
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331152237720641838315667543678820058887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 16:09:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 17:09:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24909931845684203565448796434876433103456958971464160733714952469745206905666042409211943887746645849778015030317871719559757370090601711008934953958042425842997585672085131563675437185923595278393295381559915477493434878564107850321474872251410548990313368708218836849155932982007229886875093158895153517716212380426672782573208884477035452154807442099879873609380468808869739648510107829506101947881616290042919982866031199576264413187308285491194259407369884479389844170982170756541274967800928939591914656465167852791855439208334737236017072401694018301659912328102612882391327558984220639615868693343755811090567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54ca416a1f8753b7247d5a80b9069474735bd5dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posi.aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verslun.aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aurapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aurapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-cms.aurapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pink.aurapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.aurapp.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/24E1YFLVsFE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017a58c3fe5d000004030048304602210095c5732416ea02e9af8a1d2033c15edc1e0d41da5f23912165552d83244f2e14022100a7d95fe075fb630d02a68636744f1595d1998934d1a8124e11ee4e20a168c7520076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a58c3fe4f000004030047304502202904501de3d84689ba60104a212ae2b8b074fc1b7973aa3e8a9e24914a3ea037022100ab714854a32e4225bb20544b3cb9499e9d36628a0193a324f74897df67993ec8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fcf55f8f94f4aed29b5a5018f63408ea7113eb189af4602641be64ffb6e32ce6d05f032fc252e17ca7be556ae34f9e010242b477e52257a467639fbe66c10fb1be6de749286d3f22668b854db2a1c0fe49edd61c8ce224041f2088cd5cc925c7e3fb5e80cd750dcc08a6b15fc874e767f1df36595ba80e93f036eab659d968d3377985848d355fa5a67cff7f684cb6d5f30b85a0513843897aebd79363335fc15c5544f20b595f18eacb5bb2323112a0a040b7413f6e8651bc91ad281d0976f36ab715889e250f13080e192314c2322249909d60b3ae329b1b46f989ed5c12e113bac64cb8bc950c5c4c3fc681c8a1255393ab008b83ba0c0b3f3e1afaec18f