cardzmania.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number cd:c4:26:9b:9c:a0:a0:41:12:34:9f:6c:7a:f8:9a:34 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cardzmania.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cd:c4:26:9b:9c:a0:a0:41:12:34:9f:6c:7a:f8:9a:34
Serial Number (int): 273510212380584555077176505635972880948
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a3:df:41:b0:2f:e9:d6:6d:ba:c6:b4:9b:9b:56:f7:5b:12:3e:b3:51
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): e4:08:a6:ec:56:1d:c6:13:d8:47:e7:bc:28:bc:9a:f2:b7:cc:ed:77
Fingerprint (sha256): 5b:22:1e:15:d8:f1:df:e4:73:3c:6c:ee:9f:9f:72:f8:96:7d:47:2e:66:85:5c:2d:d2:1b:09:e6:7b:c3:fa:02

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/j377jQANHTI
CRL Distribution Point: http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl

Check the revocation status for certificate cardzmania.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cardzmania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cardzmania.com

Other certificates including the domain name cardzmania.com

(limited to 100 certificates)
kurudamparambiltrust.com
compra.pago46.io
hindrajtraders.com
beta.cardzmania.com
beta.cardzmania.com
cardzmania.com
beta.cardzmania.com
lstn.xyz
godswords.io
cardzmania.com
lstn.xyz
www.tricapmgmt.com
spa.home-finder.kziete.cl
www.masterutility.com
akshayverma.net
lensketongerlo.geffrey.be
myrnd.in
verify.dor-e.com
massageenvy0704.tuition.io
beta.cardzmania.com
beta.cardzmania.com
kurudamparambiltrust.com
pf.paulofilho.dev
alcaldia15.rebus.com.co
trivia-addicts.com
www.cardzmania.com
powertuning.lt
cardzmania.com
beta.cardzmania.com
myrnd.in
lenggo.app
beta.cardzmania.com
baiotraze.app
beejkharedo.com
explore2.saga.einride.dev
beta.cardzmania.com
slot-free-games.tk
drcoaching.fulldoctor.info
beta.cardzmania.com
beta.cardzmania.com
auth.b8ta.app
beta.cardzmania.com
assets.kwkly.ca
givverly.com
cardzmania.com
alexdonn.com
moulding-solutions.in
beta.cardzmania.com
techshot.online
www.flexdocs.com
www.cardzmania.com
shop.mybrand.site
foodl.ca
powertuning.lt
www.robindossche.be
slot-free-games.tk
autolynx.com
exin.sentai.eu
stadiumth.com
www.cardzmania.com
lenggo.app
autolynx.com
cardzmania.com
cardzmania.com
spa.home-finder.kziete.cl
authservice.diaryhomework.app
cardzmania.com
modes.liamsellers.com
beta.cardzmania.com
auth.raygum.com
youtalk.tk
stadiumth.com
beta.cardzmania.com
beta.cardzmania.com
beta.cardzmania.com
beta.cardzmania.com
audits-dev1.nucor.report
moulding-solutions.in
jazlynsharp.com
beta.cardzmania.com
beta.cardzmania.com
identity-portal-staging.fringe.nl
explore2.saga.einride.dev
alcaldia15.rebus.com.co
cardzmania.com
aureaavionics.com
lensketongerlo.geffrey.be
cardzmania.com
audits-dev1.nucor.report
shop.mybrand.site
beta.cardzmania.com
cardzmania.com
beta.cardzmania.com
cardzmania.com
cardzmania.com
auth.b8ta.app
beta.cardzmania.com
beta.cardzmania.com
beta.cardzmania.com
beta.cardzmania.com

Certificate

The complete raw certificate details for cardzmania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2TD28fVihzJhdlmJW98
DQ5d49XYMyDFBsq/7U7DWF3weP8GNrMW+SIQWbu9ahmKEQVAC4/UG+konRW73IZU
UNOukATpFrXvvS2QUSklw4MJhn9vRlfvSEZf9oan8A0nPSH6cRbqYe+CDGH1ffbk
T5Kgn9O5lsPOtoAxLxfgYLnbW8cEMNitB1dJPQP8IHdzisFIzVr8DRey1cGFxux0
JteA+eW+/hpgU73089xjZXr1OkAKgkn4KuAASQzvf2tVT6vLgmZLNnTorCqGbmnP
IMqX7TWi8CPIJ+acj4d92P+invufwIdf1bJQQENHRep9oQeChqcrclBkXSpMoIy7
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273510212380584555077176505635972880948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 10:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 11:35:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cardzmania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26181018237081399178636120928802289368524643821281992963423048465088094765154860459444711193908354381169731881008299958256039033535540861624116050802550134587506682001770024389038511370764422886333157873277256657706071256035031567968871337661454373695728402320410918053494818849728306203328401169126372598062666780907616729931387909285497291386248879514928957097916206446517395688365413317116829906425965919620515864596562408839493313148560547222607721777901394820592288063410366285254839870382015792090699483319141810650859269066894024725566299131638182954413245914397194276158658644890939673898283195367642415020921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3df41b02fe9d66dbac6b49b9b56f75b123eb351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/j377jQANHTI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardzmania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018da24c4682000004030046304402203451ea86e333f8249bbd8dbdba45d9d2beba3eb719db9aeb2308a5f5cd7b33f202201354c193d0f707bd0b35a5642c929d635ba37ea8c5f57265bd4b4da97f4090fd00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018da24c46ae000004030048304602210082327b403dec8e80bd9e7f6b6583fd0c5ff10d55311c5b10fca1b5ae1a12cb1402210086e365367f9f3f081e387092b62340f647e2c9356eae0d1575ca1fb57b0da49a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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