tunup.io

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number be:d7:0a:75:9a:52:d9:68:13:0a:48:01:38:e5:b0:7f was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tunup.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): be:d7:0a:75:9a:52:d9:68:13:0a:48:01:38:e5:b0:7f
Serial Number (int): 253669875165270904580544830842524250239
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f2:81:35:b1:36:37:15:d0:f9:b6:ce:ec:74:a4:94:11:33:ea:6c:c0
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 10:88:51:0d:c2:f0:b6:ec:5a:67:8b:56:e6:b9:49:ca:c9:49:47:32
Fingerprint (sha256): 67:73:b5:9c:b0:49:5a:05:e3:89:95:9c:53:e4:74:82:e4:b8:99:16:ec:cd:e7:9a:b4:ec:af:64:a3:1c:11:8a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/VgAVzlJJjHk
CRL Distribution Point: http://crls.pki.goog/gts1p5/tdQplg74lX8.crl

Check the revocation status for certificate tunup.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tunup.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tunup.io
*.tunup.io

Other certificates including the domain name tunup.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for tunup.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fCu+4MSoSWT0x60H6pu
CBDci1KVNDlH12923Pus9FaMm9f3xozDgRw5zUi3Yj3FeMl2PgTQA3k0ii6n/6uk
gxTVxPKV5dafuq4QO1JFwO1BPMk3vB7dyrZvFcWu/LuJNqHdR0Y95Od9c6jo52fz
WKTSE+5kir4svR9Z2N52wlMWS89N92pfYkqTUmSRYRKD1kyJR2tl2ezn6Ft4PlKv
pS0kKbNMDrUrg20PQasJch58qLRL4DcSR6qrw3IxKfbKUnKJeK8egwzvd51fENXm
4DaDue3pgRmZIkOKRybYn84Fy0SF8s5/xwK4Ly9fHvGwgPTQG0EWHNkyRVNn1vF+
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253669875165270904580544830842524250239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 01:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 01:14:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tunup.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27007444427548469697294629021028622930286034741958491297468283024762926920289087359628131076435901388254485594578206631413156220498462979158744500288461691467978290762649662143620907963195891939801888558327598947427515264695679455907876843350346026806830254135421988329204049265764596179440362625495857727172269521440256604236388303836705474059538618710393990605545964190259768419982068902630914608172671090152674150015102859253670848758609974770778938273271315702419889719942114428977722331072606104036533849803588707104647867081873024186623379285060661620412534553137128241762729612588946985663196436809045991587551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f28135b1363715d0f9b6ceec74a4941133ea6cc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/VgAVzlJJjHk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunup.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/tdQplg74lX8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c18dafa260000040300463044022040f065d92c14e506cb6c42cc539864029ed97e69784c7e785fafb252d665d7f302207ef871e49fdf1119da2ba09b8855e88c2c552ee293fdc7a86a536e3b080f356a007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c18dafa0f0000040300463044022015f971920e8ca87411caa03eb1c097367a3f0fc11200484f891f39e088504de002207165c13a8ab68965d466ed1ba3ab0f17cf2419f44daca3e4560c6f10f1eae3d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006595fa329b1d2488cbf0623f1ec5cff5f4183f115148e10b16d0fef739027cb0f11645b8aaaf76dc30852c37e75bed9420d0e4d4e37304aee8778d09e415993776395425826494fc3cb35c484ebf3d3bbeba1d0cd3498c2c3cd386f6ec114bdef4b92ba707bb880d4f87513dd20a4011b3ea4b2e11b7f5c90187d5dcc4fc923070dbf321d20e3b3d27cd0ae09405a0324d153f41a03b820c6a171f27195e521b7d24892913ecabff41dc29b9956ac90427342bd81e4b61226206449984df374999d0d3523feed4c1729dc664a2e17add744ceabf42741c4c733cbb1e4dd7a221356fd5740187099093e0f889b150d1d7f7fda5a6ed34da54b54de4ccc3f4928d