balance.investments

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number c2:90:52:13:93:f1:c9:cb:09:00:00:00:00:05:c0:ca was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=balance.investments

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c2:90:52:13:93:f1:c9:cb:09:00:00:00:00:05:c0:ca
Serial Number (int): 258619586638611882237109611959450714314
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 25:fa:70:bf:e2:e4:e1:15:e1:95:4c:6e:8e:83:71:3d:3b:68:57:51
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 1a:1c:74:84:20:ba:0b:5b:11:b3:79:c4:6e:c5:9d:4a:51:f4:d1:77
Fingerprint (sha256): 57:fe:89:1c:82:fd:c5:20:35:4b:88:0a:98:d1:96:68:6b:57:b0:76:9d:4c:46:b7:1a:69:4f:61:e1:34:15:a1

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate balance.investments

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for balance.investments

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

balance.investments

Other certificates including the domain name balance.investments

(limited to 100 certificates)

Certificate

The complete raw certificate details for balance.investments in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mXCr1K3u9c+Spxx2+Gf
U27XDLDbblzNJyddaJO/1eK2/oBetclXq5p8nrBMu5k9zstlNfxoB3vhxzKrzH9c
GT5+BUPXiEyXNGNn/IeD3/N8pCtM2P7CcmVPzLF13zAv62PMOJY3zVyZWofxs355
AZ1yhTs7By3HbDovhp2KrAeHjrH1a9nDtgXEhCq5IAz/tj6bdohI/ANi4Ogx1G1L
AF/2ma2cwh556ENy/5Eo+FXst0wV38fhADMkhRZJBYxQ7v0kq0bv48LFDmT8YQlq
csi1twpwclXL9GdkI9dbxZu9HM5c+CpsMniWTl1+YH6uPWk7ihFo/uuhmdRonXZh
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258619586638611882237109611959450714314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 21:48:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 21:48:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'balance.investments'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27065177229463482688223821170795306645437813796518908635928688053570051015639315787518261088139865768170366346914876182066229730339837620945289482874270634521959946546906948596258350754456253249823431810572047610399889708334211366688001802234682306025223202436925718875370681326789549004705638610026416721090728699264365789439979343915780363783758132449475407291794387547775421717426802904591217859914918310086560747746403268794310776413539196948184962655536689543179678015633335941265338312208915299237651961565600568424320653251814245058004843918323885273397911957028655387837354249584866552653706891973397004575143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25fa70bfe2e4e115e1954c6e8e83713d3b685751
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balance.investments'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7d0b2e9a000004030046304402205ca6f441362ab7a822be0b37641f80e56949e003218d18806d8a4a5f5f64706b0220718f27d7a52cd28fbaaeedd89f921d4270c4e6cd602719e9d265056f4b69a05b0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f7d0b2ede0000040300483046022100e39d3914aa20cbbe14cf468ddb33c886998f080242f0e2f78184552b1646a9e902210089191a382319804a1cf2fcef554ef55d1a93dc98511417e2e1f74ab6cb37829a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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