intagono.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 5c:eb:9d:f5:cd:ea:f2:93:13:1c:bc:fe:46:0d:3c:d3 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=intagono.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:eb:9d:f5:cd:ea:f2:93:13:1c:bc:fe:46:0d:3c:d3
Serial Number (int): 123512369186903995287777165311136840915
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 27:34:bd:db:a9:da:33:57:88:fc:30:b6:84:ec:ac:95:6a:52:6f:ce
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 96:be:3d:48:82:8a:5e:f7:57:d1:98:26:b6:24:b9:43:6b:60:94:4f
Fingerprint (sha256): 65:a1:07:6b:81:2b:e0:f4:f7:e1:3e:5a:b6:cf:12:bf:ab:96:01:7f:44:4b:27:d8:64:78:90:85:0b:ab:d6:f1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/lka3kRYF7Q0
CRL Distribution Point: http://crls.pki.goog/gts1p5/wMjMizjhDiw.crl

Check the revocation status for certificate intagono.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intagono.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intagono.com
*.intagono.com

Other certificates including the domain name intagono.com

(limited to 100 certificates)
qa.intagono.com
support.intagono.com
dotproject.intagono.com
redmine.intagono.com
qa.intagono.com
leads.bleevit.com
leads.bleevit.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.adeptplus.com
leads.idigitalstrategies.com
inwork.intagono.com
leads.adeptplus.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
intagono.com
redmine.intagono.com
projectopen.intagono.com
phprojekt.intagono.com
www.intagono.com
leads.idigitalstrategies.com
www.intagono.com
leads.idigitalstrategies.com
phprojekt.intagono.com
leads.idigitalstrategies.com
rh.intagono.com
rh.intagono.com
administracion.intagono.com
conversions.imexpert.com.au
scrum.intagono.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
sni.cloudflaressl.com
phprojekt.intagono.com
rh.intagono.com
reports.intagono.com
intagono.com
leads.idigitalstrategies.com
leads.bleevit.com
leads.idigitalstrategies.com
support.intagono.com
reports.intagono.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.intagono.com
reports.intagono.com
inwork.intagono.com
redmine.intagono.com
hubble.intagono.com
leads.idigitalstrategies.com
anfragen.hntmarketing.de
leads.idigitalstrategies.com
anfragen.hntmarketing.de
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
conversions.imexpert.com.au
diseno.intagono.com
administracion.intagono.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
intagono.com
diseno.intagono.com
leads.idigitalstrategies.com
intagono.com
pat.intagono.com
leads.idigitalstrategies.com
leads.intagono.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.digitalstrike.com
leads.idigitalstrategies.com
administracion.intagono.com
leads.goconstellation.com
desarrollo.intagono.com
diseno.intagono.com
projectopen.intagono.com
anfragen.hntmarketing.de
intagono.com
pat.intagono.com
dotproject.intagono.com
intagono.com
intagono.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
support.intagono.com
webmail.intagono.com
intagono.com
diseno.intagono.com
intagono.com
leads.idigitalstrategies.com
projectopen.intagono.com
leads.idigitalstrategies.com
intagono.com
support.intagono.com
leads.idigitalstrategies.com
administracion.intagono.com

Certificate

The complete raw certificate details for intagono.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wbqxrl84+rbJIUX72X9
lkmyih9gv8dE+Au5liYjGpNWzJ94X/fHI7fr6cV6FqLBCNFb6Zb5XwdQk/6364nd
h95ILnyd95XG6kSM6S/zaqVBPqTPafxqnmtAhIfw06lg0Ji1G80KvhXYUeixXk2s
VovsOYE40tA4kkNGJDVqRJQlsg5symhlr1X4I0E4jkVXmPg99Q1VQKCcKwfEk3DN
P8yIypE0mqXhBujj9m9covFYtrlKbgca2oUAQoIDgZrQSSTrc9/an2lVTeq3ncSU
EIK3TfTucmmvvZozG9kzKbhiLWL0gBs00WgLGh1DJJaYTd1Dqwb855BGvJ+AoE9p
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123512369186903995287777165311136840915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 02:46:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 02:46:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intagono.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26434556048840236113498494211575762831246663294587363145422372461659234511149558959801624098765137623836870874978191656970732502907963889468772731473136646765601429746147565114014049833092212850365017606139380953414488067179079755967308141335946722214768457597573654335759329565821189143798437430111024971417782321167948230619429317284677049290944594178058789305474038886163940978044948891095429233198337622233978528805121830790701419674710952849243261201922127257730518511110548501935071197730665829932760481829245221907722491182164943777802809058147238347240332211448592185210441987158113773938306659653812612983261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2734bddba9da335788fc30b684ecac956a526fce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/lka3kRYF7Q0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intagono.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/wMjMizjhDiw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dceebceab000004030047304502202bacb381f975c2c9560df11a74c1e645babba9757d40438bd7b477574ec16227022100ce67f32c3a37ff4b5a1119a8c61ebb3bed6cff6a42a0f22d060aceb145117018007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dceebceee0000040300463044022037248afda02350e84eadd22e19ea3df4184d7233ce5ef7aeb8478f86a16a0a9002206df5247f8d62c0933b8f30b05f295cbd9d0291bc3d9dd9e603fd2233d93015c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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