www.beedham.org

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 33:a5:ab:b2:ee:80:10:a0:0a:00:00:00:00:15:7b:c7 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.beedham.org

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:a5:ab:b2:ee:80:10:a0:0a:00:00:00:00:15:7b:c7
Serial Number (int): 68650839235156361403950431138504604615
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9e:71:5b:dc:19:ab:5d:a6:f4:db:fb:3c:4a:4e:49:40:1f:74:00:ed
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): b6:de:0d:b0:bc:f2:81:f4:c2:ff:89:40:39:32:bf:95:2f:d6:fb:7c
Fingerprint (sha256): 5d:59:56:08:85:19:d5:c7:b8:84:01:47:29:1b:9f:28:ec:5c:3f:fa:e3:c3:3f:30:b2:56:3f:a6:72:e2:32:0f

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.beedham.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.beedham.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.beedham.org

Other certificates including the domain name beedham.org

(limited to 100 certificates)
beedham.org
oldmanblog.beedham.org
home.beedham.org
sitemap.beedham.org
mail.nutella.beedham.org
universe.beedham.org
ma.beedham.org
nc.beedham.org
trump.beedham.org
xcode.beedham.org
beedham.org
oldmanblog.beedham.org
universe.beedham.org
home.beedham.org
sitemap.beedham.org
scott.beedham.org
beedham.org
oldmanblog.beedham.org
scott.beedham.org
dave.beedham.org
fake.beedham.org
dave.beedham.org
fish.beedham.org
nutella.beedham.org
lee.beedham.org
discord.beedham.org
mail.nutella.beedham.org
blog.beedham.org
home.beedham.org
www.beedham.org
www.theholidaystrip.com
oldmanblog.beedham.org
lee.beedham.org
beed.beedham.org
foj.beedham.org
sitemap.beedham.org
bday.beedham.org
beedham.org
shopy-iq.net
beedham.org
www.beedham.org
www.beedham.org
dom.beedham.org
dave.beedham.org
fish.beedham.org
scott.beedham.org
barking.beedham.org
sitemap.beedham.org
dom.beedham.org
edward.beedham.org
oldman.beedham.org
www.beedham.org
edward.beedham.org
media.beedham.org
1.beedham.org
dorset.beedham.org
blog.beedham.org
sitemap.beedham.org
visitems.com.br
countdown.beedham.org
home.beedham.org
scott.beedham.org
discord.beedham.org
cloud.beedham.org
oldman.beedham.org
harry.beedham.org
ilpa.co.uk
nutella.beedham.org
oldmanblog.beedham.org
fake.beedham.org
lee.beedham.org
sites.beedham.org
lee.beedham.org
files.beedham.org
blog.beedham.org
dom.beedham.org
dave.beedham.org
home.beedham.org
mail.nutella.beedham.org
blog.beedham.org
sitemap.beedham.org
trump.beedham.org
lee.beedham.org
beedham.org
l.beedham.org
www.beedham.org
dave.beedham.org
home.beedham.org
hacks.beedham.org
beedham.org
home.beedham.org
scott.beedham.org
bday.beedham.org
dave.beedham.org
2.beedham.org
dorset.beedham.org
oldman.beedham.org
potato.beedham.org
beedham.org
nutella.beedham.org

Certificate

The complete raw certificate details for www.beedham.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnptUeO5yvWl0C/g8e6e2
1iMW4bZ4lFhHvSl4/34OPPturT5N/Arobiej/WYCzpOrzCDyTLJE3CJmGWmyA4f2
dSsy75SH5MGCXKN/2jWvPyryLCprPWssewWKR4z71HXla2/EGuIkNmsQiBmgDZ7L
22Wb6RT5faUaP7OzQA7vqpiM6UGwtYnHOh1c28hdlKJcHfviLJN/pHTU3auq6pz7
DHevz+4YLOgl2pu4bxG71jKowQ/Z3GGQG9HU1aNMHeFdPl70Aw2jChdNipsePRK0
R7KgEq1ngXj8fxvMAfYM1Vg7n5t19phruF3205vgcg2oSQJs3LNVlOaw3AIGbECh
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68650839235156361403950431138504604615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 15:19:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 15:19:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.beedham.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20022248247750439019276298906712545096351421000647905570720962587421421292281556085245114769020673037744489201429630393965147031274628415557303996825602884513684043925313727647416703974025907435157126165459643351318567250630506092082993320961860872059875947044599914390262941327151484028703669171445371891708644405512861847479202824346168080113958714194200017752826533265575479622262299572842351394815404575729320802540080265590956531603860370779555655372932694891187294302976652950001129118305001904893417719721022343868090763580404713669984309607041524680122247273955951130564746306819802457401216017415703661420893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e715bdc19ab5da6f4dbfb3c4a4e49401f7400ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beedham.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017049a633c6000004030046304402206ddbe1651c40b0abfb37bb096129b690ac46e46cbd92f8292a0af5cdef070f7702203213bc305e93e6c9642db43df9ceda3d1d3e6a046d1ed1a6b68100b23feaa3a90075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017049a633e8000004030046304402200c964e2abf651c40854392d26dad67f1c87fcbfc7c09f37287e6eb122680fae902200bdf2f4cb873eb278478a59d3e1b8ada35ef9c943942891bf5aabacc0315236b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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