rouvy.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 31:4a:6f:d1:1d:24:1d:fe:12:4e:9a:b4:bd:b3:e2:bc was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rouvy.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:4a:6f:d1:1d:24:1d:fe:12:4e:9a:b4:bd:b3:e2:bc
Serial Number (int): 65518669676163154083206711304856527548
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 70:44:d1:99:6c:4b:92:d0:9e:da:a5:90:c0:38:bd:aa:53:45:07:8a
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 85:15:87:a8:26:a5:7e:ac:98:26:f3:3f:52:59:27:fd:fb:c3:9a:85
Fingerprint (sha256): 6c:19:47:34:97:bf:1b:00:c3:57:a7:16:53:fd:49:c2:a3:d2:09:b1:e4:5a:6a:3e:1a:14:1b:91:5e:b2:a0:75

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/a3Zm34M7mQY
CRL Distribution Point: http://crls.pki.goog/gts1d4/oMerlZrw32M.crl

Check the revocation status for certificate rouvy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rouvy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rouvy.com
blog.rouvy.com

Other certificates including the domain name rouvy.com

(limited to 100 certificates)
blog.beta.rouvy.com
rouvy.com
my.test.dev.rouvy.com
support.rouvy.com
riders.rouvy.com
dev.restamiga.com
rouvy.com
my.dev.rouvy.com
rouvy.com
support.rouvy.com
blog.beta.rouvy.com
rouvy.com
blog.beta.rouvy.com
support2.rouvy.com
devapp.muallafbaitulmaal.org
my.dev.rouvy.com
partner.rouvy.com
my.test.dev.rouvy.com
rouvy.com
backoffice.rouvy.com
my.test.dev.rouvy.com
my.test.dev.rouvy.com
dev.rouvy.com
rouvy.com
my.dev.rouvy.com
tls.automattic.com
my.dev.rouvy.com
charity.rouvy.com
partner.rouvy.com
rouvy.com
race.rouvy.com
my.dev.rouvy.com
links.dev.rouvy.com
blog.beta.rouvy.com
my.test.dev.rouvy.com
connect-ng-carrier-loadboard.rxoconnectmain.rxo.com
support.rouvy.com
reseptahu.cutescottish.com
www.rouvy.com
my.test.dev.rouvy.com
app.varejaodasucata.com.br
gradingbyblackjadedwolf.nyc
tls.automattic.com
support.rouvy.com
blog.beta.rouvy.com
my.dev.rouvy.com
my.rouvy.com
my.dev.rouvy.com
support.rouvy.com
rouvy.com
my.test.dev.rouvy.com
tea-minder.rodrigozevallos.es
my.test.dev.rouvy.com
rouvy.com
rouvy.com
rouvy.com
rouvy.com
baiotraze.app
tls.automattic.com
camp.rouvy.com
my.dev.rouvy.com
camp.rouvy.com
partner.rouvy.com
my.dev.rouvy.com
charity.rouvy.com
rouvy.com
rouvy.com
dev.rouvy.com
www.rouvy.com
www.curedgerd.net
dev.rouvy.com
tls.automattic.com
partner.rouvy.com
my.dev.rouvy.com
support.rouvy.com
rouvy.com
rouvy.dev
support.rouvy.com
support.rouvy.com
ksp-foundry.com
rouvy.com
support.rouvy.com
rouvy.com
lowkeyworks.com
my.dev.rouvy.com
aniceholiday.blog
blog.beta.rouvy.com
support.rouvy.com
www.cavs.app
support.rouvy.com
rouvy.com
blog.beta.rouvy.com
blog.beta.rouvy.com
rouvy.com
links.dev.rouvy.com
www.mekinsie.com
partner.rouvy.com
support.rouvy.com
race.rouvy.com
race.rouvy.com

Certificate

The complete raw certificate details for rouvy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+CjLQjvGc4Bmo68PCXN
wqZfZx89MXG3NZDbx27IujW1pWc/8rQlFtD3rKcqR2YD7DvEXtXALjf1EzQVzcAb
G2b+djfO1y22uCqDl5vsQ9sgRNbNaLjCEYYS0HLmduHALkWJ9V7A+7ETKiApL6x4
jUFx14oJ1QcxuvHat0XzFmtQweqQ9ILsmqIZxXvWT1pyEwBjdmi4uW2lOIjBbVa+
E/QrN92gUAyxSIOi4iGCJxykzGK/nds79S986MzipXphiyPlkvSqSn+j1R40qPBu
2/odDCESZ2qBTuGfVWSxL4/RaKx0FMlocZKJ04yzwLiCze7zj4Mx3T5sMviIhD5O
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65518669676163154083206711304856527548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 22:06:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 22:59:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rouvy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29776774500446920990873565562141712291061172456980384289405335010168915568859631620286499784755276571321979043287836742371994939928788318227374199645809248319784783761879871220430621321784579076966299334764977990078083177509356733557972535621433769599532813126412819178503737798927451858698022798922504688175237039385339843391415752777240813268339741179439762200324091453797738682358976236120074039166345871084837307234083655459486379219485800450135448097878792925010691383938644485183267888723668607202252205408762023815529023809963273407924865921780399711873576819280088241629150108235533056262863098858715601587811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7044d1996c4b92d09edaa590c038bdaa5345078a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/a3Zm34M7mQY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rouvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.rouvy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/oMerlZrw32M.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b7363429900000403004630440220301fca4d5d93dc8338d4a148e3be20d585241018b9397abf694ba6c6fb16713102202b7ae8806188e8d115aecd8b6f4840cd9979c5fccf1879dfedba04f9f28d1aa500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b736342a90000040300473045022021813caddcfa1ae365552fd98a70a566ab2f93aaf9f7aa38f7e5613fceabfca30221009c1363b8d67d61bed7408907975e1fd83bfbe1cd59dc08dc28f8daa132bea92b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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