zodiak.balbol.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 98:ff:f1:ce:bd:b0:41:96:09:00:00:00:00:08:df:42 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zodiak.balbol.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:ff:f1:ce:bd:b0:41:96:09:00:00:00:00:08:df:42
Serial Number (int): 203371595498655299239647573937622671170
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 77:03:12:3d:2b:4f:94:95:f4:9f:ca:70:41:5a:64:ab:ec:56:59:2b
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): bd:ac:f0:01:6a:4a:88:19:f7:31:c9:1d:3e:ab:e4:c0:c4:2b:7a:ec
Fingerprint (sha256): 56:03:e0:69:53:43:c4:d3:6f:35:43:66:22:94:9a:20:f5:5a:51:12:d4:59:dd:b4:87:13:40:ac:06:a5:b8:cb

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate zodiak.balbol.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zodiak.balbol.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zodiak.balbol.com

Other certificates including the domain name balbol.com

(limited to 100 certificates)
cara.balbol.com
kuekue.balbol.com
resep.opor.ayam.balbol.com
numz.balbol.com
v4ny.balbol.com
numz.balbol.com
mengkudu.balbol.com
zodiac.balbol.com
www.balbol.com
balbol.com
cara.balbol.com
alpukat.balbol.com
tinkom.balbol.com
trending.balbol.com
v4ny.balbol.com
balbol.com
edukasi.balbol.com
resep.opor.ayam.balbol.com
madura.balbol.com
indri.balbol.com
balbol.com
balbol.com
tinkom.balbol.com
tinkom.balbol.com
nst.balbol.com
balbol.com
firmwares.balbol.com
firmwares.balbol.com
harianzodiak.balbol.com
v4ny.balbol.com
android.balbol.com
smart.balbol.com
gudangilmu.balbol.com
drive.balbol.com
trend.balbol.com
cara.balbol.com
bisnis.balbol.com
resep.balbol.com
subang.balbol.com
madura.balbol.com
munajat.balbol.com
resep.opor.ayam.balbol.com
b4school.balbol.com
dua.balbol.com
airnira.balbol.com
edukasi.balbol.com
www.balbol.com
berita.balbol.com
ayosehat.balbol.com
balbol.com
nst.balbol.com
firmwares.balbol.com
acceso.balbol.com
bisnis.balbol.com
tinkom.balbol.com
berita.balbol.com
zodiak.balbol.com
rulog.balbol.com
www.balbol.com
cari.balbol.com
kuekue.balbol.com
airnira.balbol.com
horoscope.balbol.com
mengkudu.balbol.com
ayosehat.balbol.com
resep.opor.ayam.balbol.com
subang.balbol.com
zodiak.balbol.com
subang.balbol.com
resep.balbol.com
mediasehat.balbol.com
ru.balbol.com
android.balbol.com
loker.balbol.com
rulog.balbol.com
mediasehat.balbol.com
firmwares.balbol.com
mediasehat.balbol.com
harianzodiak.balbol.com
www.balbol.com
subang.balbol.com
firmwares.balbol.com
nst.balbol.com
bisnis.balbol.com
resep.balbol.com
www.balbol.com
zodiak.balbol.com
airnira.balbol.com
airnira.balbol.com
balbol.com
smart.balbol.com
astrology.balbol.com
balbol.com
otomotif.balbol.com
madura.balbol.com
media.balbol.com
gudangilmu.balbol.com
top.balbol.com
android.balbol.com
mengkudu.balbol.com

Certificate

The complete raw certificate details for zodiak.balbol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph46cmOnfzyAW7UiUAm5
xQh6BA3BPWOk3P3JxpX4PoF7tPlRr7Up3G0jkYVLmBK99si4Okrf34MnvGa7s4CV
HhSCkzZ0IEte1CzY6NnrI9afX406KkQqVi3R+3as9uU3cKGj8TdgqDlnHrcZU3Jp
wub0Dsd8rRj3f8APPIXR+tA881y1gNQ63pSiCkvKbo7inZtAYs9IQguhgmADpDCw
zMq9MTZ/CcC9Tw0q6gVDYGCrbitxhWvK9w053WNUsmym11REGvZF6a6XDnn+0+O3
yhYniVjQrBObNu3T9PM95pjSEWpmbdY8856ODDeSU/2LxWR8SAqGTvMADYhc6pYB
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 203371595498655299239647573937622671170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 17:53:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 17:53:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zodiak.balbol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20970464758571068479548936002465963766877670283628141420801104365100116952405848743120254354963924224660878510549443794432503722275356093709103098795295502077189469966389750731431374777997732300083733060976679158531224757780111927686344052853238576173987871130707237799108565267111304745823220304867380793238103462256633862157131565589625277777762085839518792266480619418077052454384086218314094484744541397312839821591047859997574517551277612009010561706143935946914633489710395863023844884243690909946388293667425337033532497878072646797926372093050075139133384354714633302177350767429655010403186164042009694044621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7703123d2b4f9495f49fca70415a64abec56592b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zodiak.balbol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff7ccfab20000040300483046022100bc29f60c540228ad771dfda80d659d3fe257967b69156deefe100fb7c4c6cc800221008615cdc890d9500261b4cf0fbd49c07dc8a5246344e963781ddd2de4fa80588d0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff7ccfadb0000040300483046022100e0af345554cc8469d1240a30574e6444c6f01482efc726739535470f27299f86022100e8458ca940fd80f5aba11de088f70196dbd7fb619ef994b0acf4261a3f40ea84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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