point1wellness.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 57:04:61:c1:d3:91:a5:c8:13:a0:c7:32:af:46:db:c2 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=point1wellness.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 57:04:61:c1:d3:91:a5:c8:13:a0:c7:32:af:46:db:c2
Serial Number (int): 115665587570966153915574382935193082818
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a1:df:47:d1:eb:fe:a6:50:ff:4e:4a:51:29:88:c2:ae:3f:a5:ea:75
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): b6:de:89:26:3c:93:e1:2c:ed:02:3c:f7:c2:36:69:80:58:f1:08:c7
Fingerprint (sha256): 55:c3:aa:e2:88:c9:d5:5e:0b:95:41:96:c2:6a:5e:08:75:98:33:22:04:3b:d9:54:47:8d:6c:9a:51:e9:36:d5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/6rumcIw4i-Q
CRL Distribution Point: http://crls.pki.goog/gts1p5/t0HKcOwWsXw.crl

Check the revocation status for certificate point1wellness.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for point1wellness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

point1wellness.com
*.point1wellness.com

Other certificates including the domain name point1wellness.com

(limited to 100 certificates)
connect.aventos.com.br
events.ourteams.org
stage.hb-consulting.website
my.zaptor.co.za
books.8foldmfg.com
20aniversario.aeh2.es
cos.ocaforms.com
events.ourteams.org
usaidyouthexcel.yotaweb.org
events.iskala.net
virtualexpo.saknquare.com
20aniversario.aeh2.es
www.asiagolfconvention2023.com
connect.aventos.com.br
www.brightxa.com
20aniversario.aeh2.es
events.aliciavernonspeaks.com
events.humanitarianglobal.com
events.humanitarianglobal.com
auraspeaks.ableaura.com
lens.ca2l.fr
event.msmescaleup.com
events.closedtitle.com
www.brightxa.com
events.aliciavernonspeaks.com
www.eventati.org
evaluationforum.uky.edu
events.aliciavernonspeaks.com
www.innovatewithdata.net
accounts.zeffu.com
billing.pillardigital.io
events.humanitarianglobal.com
events.wisequarter.com
books.herotech.ca
events.closedtitle.com
event.complexelaprovidence.ca
events.eminae.com
www.dotcybersummit.com
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.closedtitle.com
backstage.spiritedsolutions.org
nyambu.kyalo.co.ke
events.humanitarianglobal.com
eventos.inspiriadental.com
events.myriadas.com
events.humanitarianglobal.com
finance.shilela.sc.tz
www.ideandoelaula.cl
backstage.spiritedsolutions.org
events.salam.sa
events.wisequarter.com
www.ateliers-mfpci.com
evenements.aqta.ca
my.zaptor.co.za
auraspeaks.ableaura.com
events.humanitarianglobal.com
events.humanitarianglobal.com
www.eventati.org
www.ateliers-mfpci.com
events.humanitarianglobal.com
stage.hb-consulting.website
wolfden.wolfpackceo.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
event.msmescaleup.com
events.ybc.club
adm.consultoriaegn.com.br
events.humanitarianglobal.com
desk.forplane.com
www.brightxa.com
eventos.inspiriadental.com
www.asiagolfconvention2023.com
backstage.spiritedsolutions.org
point1wellness.com
events.ybc.club
lens.ca2l.fr
desk.forplane.com
events.humanitarianglobal.com
books.quadrant.ky
www.dotcybersummit.com
events.humanitarianglobal.com
events.humanitarianglobal.com
events.point1wellness.com
lens.commtel.io
www.ateliers-mfpci.com
www.usafricabusinessexpo.com
usaidyouthexcel.yotaweb.org
events.humanitarianglobal.com
events.wisequarter.com
events.ybc.club
auraspeaks.ableaura.com
soporte.audad.com.ar
connect.aventos.com.br
20aniversario.aeh2.es
mail.telecomcube.com
virtualexpo.saknquare.com
events.humanitarianglobal.com
help.crowd.br.com

Certificate

The complete raw certificate details for point1wellness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTYQWZjt7lOYNb9ihQaN
3Ff3IpThLtFiLi6U3nExNJlotYcf5X8phx0LMoE/qra4NoDd85BbnlLHhja8SAQT
tjEpHURvVuAhF2mukaamCur95u/XFPP/3VLl5Csw4zdpR3/gFYH14rulVQnNhjeq
21tBP3CFTDS/MWC2f0TekWeDagtC/6JuuQnk0FTfkAZ5BgfjBQSQtxlnvGvgK58j
0VVmtFaQTKvQHFO3LvI5YIg1cIkaKslRW5qj9MpnOrrzERmGhiQ5dCGxKi9ZgGp4
1129zTO9dDumPc0J3fVsjevJ35BW1SSF/DOe2ImKsQv3I2okd9P3sMt98hOwHuC3
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115665587570966153915574382935193082818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 21:35:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 21:35:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'point1wellness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25400559184695808051289818221048958474511785728316894442746167693346067809555642163100003610117196375784417629750742523175144638037309580526433527122180099706336169662917782657861138449944252691498974650186241208945926745819460623625204992717792684710478627448402146779078940510147637063636451734423904137647240029255325536314130057123310056468645257068168815825933986230956622959363349560923028093743452460933267300187221050935733219690968604744720492537242333621846133681054675393747270497831611064881503904906407643994752165174689467738622268464237230443735867828075212741363680116925852660589447523994759717762973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1df47d1ebfea650ff4e4a512988c2ae3fa5ea75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/6rumcIw4i-Q'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'point1wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.point1wellness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/t0HKcOwWsXw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e77c0ec9500000403004630440220067c191218d4a8cff35028640944a95b28b402072a71e4cd746be61acd193a6102202f2690de42676261cd465091601521a9a0d4ef4938691a56d5ea75256195a29d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e77c0ec720000040300483046022100e47e27dd68e3f212c630033f49aacf8587448d19eec116ba561b1341d711e755022100b10230674aec87c7c44302b52f4f5b821206f491124e71d1f24909d2b5bc856d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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