buildingforall.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 94:fb:68:c9:d5:87:dd:62:0e:34:6b:5d:eb:c3:8c:ae was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=buildingforall.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 94:fb:68:c9:d5:87:dd:62:0e:34:6b:5d:eb:c3:8c:ae
Serial Number (int): 198031135249203793594772215375136525486
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:92:b8:11:bb:37:23:d4:11:3e:28:a4:ba:85:44:2f:09:06:ba:ac
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f7:75:5d:ba:76:fc:84:e2:6c:10:0b:d0:5c:48:99:7e:72:a9:48:32
Fingerprint (sha256): 55:04:2a:1c:8a:a0:32:66:a1:bc:ec:41:cf:05:2c:05:4a:d6:ad:53:1c:24:12:11:47:c1:54:d8:33:23:1b:40

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/AIJOX5w-_co
CRL Distribution Point: http://crls.pki.goog/gts1p5/i-CAWIP1u2c.crl

Check the revocation status for certificate buildingforall.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buildingforall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buildingforall.com
*.buildingforall.com

Other certificates including the domain name buildingforall.com

(limited to 100 certificates)
people.smartapartmentdata.com
intranet.buildingforall.com
reclutamiento.maxtalenthr.com
soporte.buildingforall.com
showtime.studio4.in
sni199603.cloudflaressl.com
buildingforall.com
sni199603.cloudflaressl.com
buildingforall.com
webmail.buildingforall.com
sesiones.laacademiaforense.com
seo.buildingforall.com
careers.reshamandi.com
careers.yocket.com
sni199603.cloudflaressl.com
test.buildingforall.com
buildingforall.com
sni199603.cloudflaressl.com
campus.vitofeli.com.ar
show.ccmtecnologia.com.br
sesiones.laacademiaforense.com
careers.align.build
sesiones.laacademiaforense.com
marketingarquitectos.com
intranet.buildingforall.com
showtime.studio4.in
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
vps.buildingforall.com
showtime.cloudy.ma
sni199603.cloudflaressl.com
show.sicktechcloud.com
sni199603.cloudflaressl.com
musitechnic.academy
webmail.buildingforall.com
buildingforall.com
careers.claimshieldpro.com
sni199603.cloudflaressl.com
gestion.buildingforall.com
reclutamiento.maxtalenthr.com
buildingforall.com
intranet.buildingforall.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
sni.cloudflaressl.com
support.certitrek.com
sni199603.cloudflaressl.com
showtime.studio4.in
training.theconcreteprotector.com
sni.cloudflaressl.com
test.buildingforall.com
link.buildingforall.com
reclutamiento.maxtalenthr.com
buildingforall.com
careers.yocket.com
intranet.buildingforall.com
sni.cloudflaressl.com
intranet.buildingforall.com
showtime.studio4.in
academy.appsimplantadores.com
sni.cloudflaressl.com
candidates.palettetechnologies.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
seo.buildingforall.com
sni199603.cloudflaressl.com
www.correo.buildingforall.com
sni199603.cloudflaressl.com
buildingforall.com
sni199603.cloudflaressl.com
training.instasafe.com
intranet.buildingforall.com
intranet.buildingforall.com
soporte.buildingforall.com
test.buildingforall.com
learn.marketomic.com
academy.speaknpeak.com
buildingforall.com
showtime.cloudy.ma
marketingarquitectos.com
sni199603.cloudflaressl.com
musitechnic.academy
show.ccmtecnologia.com.br
buildingforall.com
www.buildingforall.com
showtime.studio4.in
clientes.buildingforall.com
sni199603.cloudflaressl.com
show.ccmtecnologia.com.br
buildingforall.com
sni199603.cloudflaressl.com
www.carenetsolutions.com
show.sicktechcloud.com
analytics.buildingforall.com
intranet.buildingforall.com
schulung.hgverwaltung.ch
recetapollo.net
nlpa-support.certitrek.com
clientes.buildingforall.com

Certificate

The complete raw certificate details for buildingforall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z24b1yy2sVqrPMjhuYv
HcQjZUvBixu6CcIpG+MoxSzi4DZKQqlXaP7i9u9N5BkM6QArvtLm0YJe+0yJvCT7
ezteOS2XqkJet2KtwQ0mLJhYC5e0ML/HszLaFWEvKX/yvlaGwlTdxuZDPhhGkpAY
NeF9F4ZZ6pEYdBTPVGMPjnqB1/S+OxAU+lK3f5dRuyvYfHsa+wAYqDGBkEfXml+k
9bXvqgP8DpO9xS7TUGdNJ09XCOaAoT2mkiPSxUIhUpr4AB85MKmPJXi7eFEbG9Cj
QCjLrLvVj5lHF9UoBQXpG5QZJP3tP66aWVubDZ34P/jE/pyMPmJz4iNEEftAjO5N
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 198031135249203793594772215375136525486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 09:17:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 09:17:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buildingforall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29996253129189929971069659659000870834666040139027492222793978877003821290213863103755496829598256523106999681951640401244194108213251213466734475087960606546139471722679217028663896643156951486907066728006423366141739095864939967935296237105595312313272705858364164791693665873643837529301260088856034163265825235639995787584537623909431690819256994063812108739126842983623339563214582792752753082601534907517811231084313546340161758395270441910746779323292308942274943920330272685899099315628936888974848379624600034767742113713427054938562235790697505969860809711256001313457500695963925062255287668353583828323753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c792b811bb3723d4113e28a4ba85442f0906baac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/AIJOX5w-_co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingforall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingforall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/i-CAWIP1u2c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018afa31b8100000040300473045022100f18f5f82b7c5c8ef8feff7e494277ac3081b725cb48a7d4bdae5552f9f8d58f6022078170950e4fcc3117c6e97a8c9e5c9465fdf5028512180b95e6fb71665db107d007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afa31b84a000004030047304502200c8f0e97c15e07f552f26c9862f87f367043472757daa8628028e6bc3fe44374022100a60b600d36346e1f9e65f112aa51515951e19d69729d64d0c8baf8f21e0ef7b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b1110cc55815238a89d3f07725744c6e112d9e49c3e1603de03228195426904b59011d7b327c0610c911605027bd697fce20d9827a3175b087a4a5427282e2f844be06041fccfb6493b35d3d9fb855318c8a2723b65ec2df9c67c1c9276ead4838101286a8eaa96fbf94cff1fe4afae9a0eb3ecd8273a1537ce7d8589cf24334374eebad67da2878e6827319e9fd5fa866d8aea4683bd22072e35e3799d2c02310ee9fcb4588a165b39d089cb8b064cbbca5eb8287c861cfd59a535bfdbbac4fe6e0e59c25f659479f70945328d35f296d996930416344753d970e29503a9fee1ab82646425e74f3401544410c172a76f4c9b7e1a0cff7b5a6e03380dd39e03