api.annotator-staging.otso.ai

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 73:ae:50:e9:0c:20:f9:fb:0a:48:9c:38:3c:42:b0:9b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.annotator-staging.otso.ai

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:ae:50:e9:0c:20:f9:fb:0a:48:9c:38:3c:42:b0:9b
Serial Number (int): 153766320225334229592738513274456420507
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 63:b6:ed:2f:6a:8e:12:ac:ad:54:60:05:53:00:68:72:a8:45:f7:84
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 11:3f:1a:3f:23:45:5a:d9:9d:51:45:08:e7:41:98:b0:9c:d2:db:50
Fingerprint (sha256): 56:e7:5c:ad:4b:a7:1f:04:9f:2e:85:59:3e:e6:47:02:33:6b:2f:47:4b:23:71:6b:b9:d6:2d:7e:1f:60:9b:4f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/735baepNOUM
CRL Distribution Point: http://crls.pki.goog/gts1d4/928rNMDfagE.crl

Check the revocation status for certificate api.annotator-staging.otso.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.annotator-staging.otso.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.annotator-staging.otso.ai

Other certificates including the domain name otso.ai

(limited to 100 certificates)
utility.darwoft.com
otso.ai
go.zchee.io
get.memojis.app
meehgo.co.mz
auth.staging.otso.ai
*.otso.ai
www.otso.ai
quote.stge.keap.page
otso-lgaq-staging.otso.ai
m.immersivemarketingtech.com
project-feelings.otso.ai
hopesonhorizon.com
project-feelings.otso.ai
api.annotator-staging.otso.ai
otso.ai
www.otso.ai
malkaesther.com
nazuna-kyoto-gosho.b.hotekan.com
utility.darwoft.com
*.otso.ai
www.otso.ai
otso.ai
project-feelings.otso.ai
otso.ai
tirupati.vishnutaxi.com
project-feelings.otso.ai
mathtour.net
*.otso.ai
otso.ai
data-dev.otso.ai
insight.staging.otso.ai
owncloud.otso.ai
otso.ai
www.otso.ai
www.abhiyanthindia.com
glakh.com
www.objy.app
*.otso.ai
otso.ai
www.otso.ai
www.otso.ai
otso.ai
renneshd.fr

Certificate

The complete raw certificate details for api.annotator-staging.otso.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIQc65Q6Qwg+fsKSJw4PEKwmzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAyMjAwNjE4NDBaFw0yNDA1MjAw
NzA1NTBaMCgxJjAkBgNVBAMTHWFwaS5hbm5vdGF0b3Itc3RhZ2luZy5vdHNvLmFp
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vZRdSVOBfQYAT/TV7xJ
/DJpGnZlMBezBVPTicaijQl5gDM7PhiGcmi3ru6sYJBqkZlf3j1nGUea8DxDSZe8
VbHCmrSgcXbJ0HoTNWUquUcxUYqNFsAVsBrr15sErs/wcyKp+tlvP4FJ1s6pdG+L
d3y2iUSo4sF1J/CTJ+AWoaPnHO+mMBcHcA0OI1lUWBSkifT7drlNBfikXEo46Ij3
buAXh/UoiE4MS1lE8fYCdOJtlNV9zIiYuKOoxQ2eTm0/9RiAAejXx/ExzUrBk0Vl
akcVFQiim0UDgpT6Gjm3qksxs6D8CdbBhQoWBP/sdiEwRjI+oVNMQVcjc6xTbj72
uwIDAQABo4ICgzCCAn8wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF
BwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGO27S9qjhKsrVRgBVMAaHKoRfeE
MB8GA1UdIwQYMBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGww
ajA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvNzM1
YmFlcE5PVU0wMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRz
L2d0czFkNC5kZXIwKAYDVR0RBCEwH4IdYXBpLmFubm90YXRvci1zdGFnaW5nLm90
c28uYWkwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8E
NTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvOTI4ck5NRGZh
Z0UuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGNxWGMfwAABAMARjBEAiB5FQHdgvhygy/cKOHp
SqscediuAYyWiVa217lzhFMWOAIgJd2D97Nv8pKJPQ+Nf3MBzPMb4gcg0wr/Mb3v
9preN5AAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY3FYYxa
AAAEAwBHMEUCIQDwKe2CsL/oiXKiJYzaYBCfjxRWPNabaPvTqW1QnoNADQIgFldw
NjkcGBvwXgWmLjGHL6fHLXOaT4D6b1wGj6IQwgwwDQYJKoZIhvcNAQELBQADggEB
ABSyZgFrK5lntMd62wGL2gyZhoAxKkSh+fCwZTYycmYrsrOk6O2AtJ6f7uVkHPhH
0nQBXCMww8SIXWnz8AnX0VB6Wviw3Tm/44qqPXLCX3C0yEW1vkkbdCZrWzOZ1aap
TVGZhjwwS9UPkJvLMbEU9UmNBUsa2M5vG6LFt4i+ybZwidg0Q5sROT2JyAI4f++j
c0HWSOTt6sR7mjXPUn4umXZ1lJN857xO2cz0OmtP7Kqpc1MKtT1U2dsh1xa29UG0
z3p2gGuz71e9wNFyXruysfPwYxjDru6zo2JFDw0lmF4v42zk+O299eIWGUxTJcRp
ocGIPuQMXEtn1LNMuih9aeU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vZRdSVOBfQYAT/TV7xJ
/DJpGnZlMBezBVPTicaijQl5gDM7PhiGcmi3ru6sYJBqkZlf3j1nGUea8DxDSZe8
VbHCmrSgcXbJ0HoTNWUquUcxUYqNFsAVsBrr15sErs/wcyKp+tlvP4FJ1s6pdG+L
d3y2iUSo4sF1J/CTJ+AWoaPnHO+mMBcHcA0OI1lUWBSkifT7drlNBfikXEo46Ij3
buAXh/UoiE4MS1lE8fYCdOJtlNV9zIiYuKOoxQ2eTm0/9RiAAejXx/ExzUrBk0Vl
akcVFQiim0UDgpT6Gjm3qksxs6D8CdbBhQoWBP/sdiEwRjI+oVNMQVcjc6xTbj72
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153766320225334229592738513274456420507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 06:18:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 07:05:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.annotator-staging.otso.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27641414510966153923599019730984097866806648794854848276996477752692238167759558806439012487460847211548973675376280653578411440492752713714754071191970888992071535653290058701579448433340525907408743313729538594342262347565787319104495523747973549182426579241969706130339205022790045531282837088068920733696284106035144063590884745531236341707094779148259004886678213844350330079853495022240366125756504976870961997577166450586506323919191895784362367102208035009945462713924327491720086007370472262679465909188400523164411589011598353572857928871364778932582349551975246638973487297303231293108420481269848176785083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63b6ed2f6a8e12acad54600553006872a845f784
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/735baepNOUM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.annotator-staging.otso.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/928rNMDfagE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc5618c7f00000403004630440220791501dd82f872832fdc28e1e94aab1c79d8ae018c968956b6d7b97384531638022025dd83f7b36ff292893d0f8d7f7301ccf31be20720d30aff31bdeff69ade3790007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc5618c5a0000040300473045022100f029ed82b0bfe88972a2258cda60109f8f14563cd69b68fbd3a96d509e83400d022016577036391c181bf05e05a62e31872fa7c72d739a4f80fa6f5c068fa210c20c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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