chaos-axiom.com
Issued by GTS CA 2A1
About this certificate
This digital certificate with serial number 71:6d:9f:04:60:79:9f:e0:0e:85:6a:a5:66:bf:b8:11 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=chaos-axiom.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 71:6d:9f:04:60:79:9f:e0:0e:85:6a:a5:66:bf:b8:11Serial Number (int): 150771949131173016478705085158000670737
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: e5:4f:a3:ba:44:2a:7e:a4:46:91:f5:fc:56:cb:a9:05:fe:a0:81:8c
AuthorityKeyId: 93:18:63:91:17:76:9a:5a:e6:3b:7f:2e:33:83:84:86:6b:1e:d4:f9
Fingerprint (sha1): 88:c5:13:87:d3:1e:a2:9b:b8:d9:5e:d1:1c:ca:4e:49:4c:96:e7:13
Fingerprint (sha256): 5a:df:73:63:c8:d4:e6:89:34:98:ab:c0:f6:02:f9:95:e4:6b:a0:5b:64:9e:e1:2e:45:f0:c6:86:d4:08:fa:5f
Issuing Certificate URL: http://pki.goog/repo/certs/gts2a1.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts2a1/5kLliTj44bQCRL Distribution Point: http://crls.pki.goog/gts2a1/Q3yTWZIKBCk.crl
Check the revocation status for certificate chaos-axiom.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chaos-axiom.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA256
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chaos-axiom.com
*.chaos-axiom.com
*.chaos-axiom.com
Other certificates including the domain name chaos-axiom.com
(limited to 100 certificates)
*.chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
www.chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
www.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
static.chaos-axiom.com
reader.chaos-axiom.com
static.chaos-axiom.com
chaos-axiom.com
*.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
*.chaos-axiom.com
btsync.chaos-axiom.com
btsync.chaos-axiom.com
www.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
reader.chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
static.chaos-axiom.com
chaos-axiom.com
reader.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
www.chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
www.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
static.chaos-axiom.com
reader.chaos-axiom.com
static.chaos-axiom.com
chaos-axiom.com
*.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
*.chaos-axiom.com
btsync.chaos-axiom.com
btsync.chaos-axiom.com
www.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
reader.chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
sni254097.cloudflaressl.com
chaos-axiom.com
static.chaos-axiom.com
chaos-axiom.com
reader.chaos-axiom.com
btsync.chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
chaos-axiom.com
Certificate
The complete raw certificate details for chaos-axiom.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDCTCCAq+gAwIBAgIQcW2fBGB5n+AOhWqlZr+4ETAKBggqhkjOPQQDAjBGMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzET MBEGA1UEAxMKR1RTIENBIDJBMTAeFw0yMzExMjkwNjU0NThaFw0yNDAxMTMwNjU0 NTdaMBoxGDAWBgNVBAMTD2NoYW9zLWF4aW9tLmNvbTBZMBMGByqGSM49AgEGCCqG SM49AwEHA0IABPOCvkRmL5uN4K4WJaHHpljLa3t7s92jkEnQsGNVm3y1OIii6mZ8 M6YEc/YKPi4LvRFFH7JQkjy2DdbK2syPyfijggGpMIIBpTAOBgNVHQ8BAf8EBAMC B4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 5U+jukQqfqRGkfX8VsupBf6ggYwwHwYDVR0jBBgwFoAUkxhjkRd2mlrmO38uM4OE hmse1PkweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilodHRwOi8vb2NzcC5w a2kuZ29vZy9zL2d0czJhMS81a0xsaVRqNDRiUTAxBggrBgEFBQcwAoYlaHR0cDov L3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMmExLmRlcjAtBgNVHREEJjAkgg9jaGFv cy1heGlvbS5jb22CESouY2hhb3MtYXhpb20uY29tMCIGA1UdIAQbMBkwCAYGZ4EM AQIBMA0GCysGAQQB1nkCBQMBMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz LnBraS5nb29nL2d0czJhMS9RM3lUV1pJS0JDay5jcmwwEAYKKwYBBAHWeQIBFgQC BQAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwCgYIKoZIzj0EAwIDSAAwRQIhAKF7zdZg 75BsVJbvJCzVGnd0VBdXWW5wkDXcgYtyD1X/AiB7SEjgTaIJSYmEwyhIXinNS8XA HP5w6TF3c1AlPWC2/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE84K+RGYvm43grhYlocemWMtre3uz 3aOQSdCwY1WbfLU4iKLqZnwzpgRz9go+Lgu9EUUfslCSPLYN1srazI/J+A== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 150771949131173016478705085158000670737 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 2A1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 06:54:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 06:54:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chaos-axiom.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004f382be44662f9b8de0ae1625a1c7a658cb6b7b7bb3dda39049d0b063559b7cb53888a2ea667c33a60473f60a3e2e0bbd11451fb250923cb60dd6cadacc8fc9f8 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e54fa3ba442a7ea44691f5fc56cba905fea0818c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9318639117769a5ae63b7f2e338384866b1ed4f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts2a1/5kLliTj44bQ' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts2a1.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaos-axiom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaos-axiom.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts2a1/Q3yTWZIKBCk.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.1.22 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . [c:0|t:3|false] BIT STRING (568 bits) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:2|false] INTEGER 73041111448511839613018198893290152231076370740230417079416407791180549412351 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 55762196337346536121078061996692232078475946235139752180426018313777065277182