macrium.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 99:ef:62:5d:c3:8c:6a:66:13:c1:f6:a7:28:5b:0d:37 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=macrium.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 99:ef:62:5d:c3:8c:6a:66:13:c1:f6:a7:28:5b:0d:37
Serial Number (int): 204614837409161553031533318217370635575
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:61:08:ee:3a:55:e8:68:d2:51:80:39:6c:4e:9c:db:fd:98:ec:f7
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 46:af:bb:37:b2:97:80:19:ba:03:54:ef:68:c6:4c:b8:4c:d1:64:fb
Fingerprint (sha256): 6b:42:b0:7c:cd:ab:9c:57:6d:c8:9c:77:ac:0d:9c:c4:68:be:e2:2d:b6:af:56:96:dc:c4:5f:5e:a5:e9:4a:f8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/DbmFszUplG4
CRL Distribution Point: http://crls.pki.goog/gts1p5/e8HO1MFk_io.crl

Check the revocation status for certificate macrium.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for macrium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

macrium.com
*.macrium.com

Other certificates including the domain name macrium.com

(limited to 100 certificates)
macraftbeer.com
*.msadmin.macrium.com
www.macrium.com
blog.macrium.com
support.unitess.ru
tls.automattic.com
news.macrium.com
letsencrypt.macrium.com
itsupport.nationalable.org
remote.flm380.com
news.macrium.com
itsupport.nationalable.org
support.optimacommerce.com
news.macrium.com
blog.macrium.com
support.optimacommerce.com
macrium.com
news.macrium.com
macrium.com
*.macrium.com
macrium.com
tls.automattic.com
*.msadmin.macrium.com
itsupport.nationalable.org
www.macrium.com
www.macrium.com
blog.macrium.com
support.printstop.co.in
tls.automattic.com
support.serbinconsulting.com
tls.automattic.com
contact.certifiedtranslators.com.au
atencion.traffilog.mx
news.macrium.com
*.macrium.com
macrium.com
news.macrium.com
news.macrium.com
macrium.com
macrium.com
itsupport.nationalable.org
macrium.com
support.ardentintegrated.com
support.optimacommerce.com
remote.flm380.com
ssaqua-portal.ye-digital.com
tls.automattic.com
support.optimacommerce.com
remote.flm380.com
remote.flm380.com
agwet.mytrellis.com
support.computer360.co.za
*.macrium.com
support.optimacommerce.com
*.macrium.com
support.ksportusa.com
support.optimacommerce.com
helpdesk.ashleynva.com
support.optimacommerce.com
support.certifytheweb.com
macrium.com
blog.macrium.com
ssaqua-portal.ye-digital.com
support.rhombus.digital
tls.automattic.com
support.ldtelecom.com
helpme.macrium.com
*.ms.macrium.com
tls.automattic.com
support.clearos.co.uk
support.optimacommerce.com
support.intellectualninjas.com
support.splan.com
*.macrium.com
news.macrium.com
letsencrypt.macrium.com
support.optimacommerce.com
support.optimacommerce.com
support.tekxiph.com
*.macrium.com
support.optimacommerce.com
*.macrium.com
*.macrium.com
support.optimacommerce.com
help.wellforceit.com
www.macrium.com
news.macrium.com
*.macrium.com
blog.macrium.com
*.ms.macrium.com
macrium.com
assist.relativity.co.uk
support.optimacommerce.com
*.macrium.com
www.macrium.com

Certificate

The complete raw certificate details for macrium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/YYaspkRETCnKKIHW8Q
8gi3Kv8T7vgOmVek4E2Uv9ATlq6cPYRyqHfHw7zwSqKIuiSWY44/0NVavTqodY71
Wp7ipJ8G340Xlno6NeG+lExQieLXfNxiscfSCJA1tvCZwt/MHMa3y2VnDPAItRG0
eKL9h0r14DnpOqimU7bYvMD2FQPArV9KgM3ZpA68JHRKby7UFTzVistDgF4D+Vsx
EtZ5DDaERoxKdzgLzFnjCc1VyL7fbmBiwNC7EPoEjlk8LfRtIJUAAQmLzjrSugzY
Rhk1qnMjCtyyi7qyy63hcuLm28EQ3v1i5+LIAhmjDHfucqvhxmCchoGXxcL7q/sw
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 204614837409161553031533318217370635575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 17:04:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 17:04:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'macrium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18678384984570943240296878471867299109275260325233405820420446408133333172986053468021954965772991967079949126093597686611354930799863211031723116628044847480705701207155707938224490088814981551588449847226143819296587781185677316774536560404816749814515988687859089191324439502419425396783595956433461160409485457615216079755287706913112354990241444587644432184356091105594336062055124275425821705276826513038366663443734411495234522634338310529577522029652827614647161689507499411790538684398348764898799987322971148955448451635472433511402821587553546603888222188076678171564674096174409224545148049188357427376261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a46108ee3a55e868d25180396c4e9cdbfd98ecf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/DbmFszUplG4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/e8HO1MFk_io.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7a71613b000004030046304402203f0b70bb6b81e81a516ed294ea91578bae30970633737964f3fa016a95f500dd02203ca8d7a1182ac8cafb0c4929a97b13eef51cacc0ce109b440a22e2d99bfd3f8f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7a71614d000004030047304502210091c7804b079a3740dff9cd44ffeeb1602d6440153f3ebe79e6b7247485d49f1d02207b24a63f3b5590cd0efb3cb3424e596f78f3b03d8d1507a309d21a60ad279de8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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