bangkit.academy

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 24:b4:f2:62:6a:d9:24:8e:10:91:57:f5:0f:c1:03:37 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bangkit.academy

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:b4:f2:62:6a:d9:24:8e:10:91:57:f5:0f:c1:03:37
Serial Number (int): 48791737423345171069564048587465229111
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: df:54:cc:b8:31:db:11:2c:51:15:56:4c:ad:01:ae:da:98:ea:c5:c9
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): a1:d9:3e:ab:d4:f4:36:66:e0:dc:5d:44:c5:7d:1f:60:af:86:d9:b6
Fingerprint (sha256): 70:d8:b1:96:a1:42:b8:55:8f:c4:e6:6f:91:a1:ba:5c:c1:ab:4c:95:a2:5a:35:5d:8a:6b:5b:4e:f3:1f:0a:42

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/mOWHfeg5sL0
CRL Distribution Point: http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl

Check the revocation status for certificate bangkit.academy

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bangkit.academy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bangkit.academy

Other certificates including the domain name bangkit.academy

(limited to 100 certificates)
bangkit.academy
app.swipefwd.com
agens24.com
scan.watdrinkje.be
www.c41app.com
goong2000.com
alpha.taskgram.com
huitreriebesson.order.pulp.eu
purgatorio.mx
bangkit.academy
cburg.galander.berlin
www.domenichergert.de
www.elephantcpa.com
www.caremother.in
learn.mobilemind.io
publishingfun.com
bondandbond.co.nz
www.dormlife.app
azem.xyz
farmsense.psyborgfarms.com
srba.fyi
devvidya.com
bangkit.academy
feliciaalfieri.com
www.roomalaya.com
bangkit.academy
www.udooq.com
csavargomagazine.com
www.cloudspecialist.tk
driverportal.co.za
advisorbob.com
app.kiwi-go.jp
realtorpro.infospacesolutions.com
agens24.com
invite.noja360.com
www.jordanmihlali.dev
app.modai.io
www.stickerry.in
app.la-collaborative.org
qpr.scouthub.app
bangkit.academy
blog.bangkit.academy
access.optculture.com
bangkit.academy
www.scryptique.me
retoryx.com
auth3.hiddenlogin.com
vanessabui.com
ninevastudios.com
www.eat-vite.fr
cta.ajitama.io
www.hugeus.kr
set-landing-page.vouchercart.com
konecta.mobi
retoryx.com
adrianviegas.me
gesa.ovenfo.com
tourneygames.com
dealers-support.cox2m.com
bangkit.academy
takeout.page
www.austinpartnersgroup.com
www.lawili.com
cburg.galander.berlin
blog.bangkit.academy
login.itc-kostrena.com
holigan.cc
anderson.pesepay.com
devvidya.com
www.stitchstory.uk
link.getonform.com
get.justech.io
tryhaven.app
lumagroup.it
www.aynama.in
www.infinitesync.app
registration.bangkit.academy
www.anthonykeen.com
thangalsgold.in
www.beyondlove.me
status.bangkit.academy
app.salaryo.com
uejesusamigo.codexplus.net
benfin.dev
worldsworstvideos.com
hpm.healables.ai
roombuilder.ashleyfurniture.com
krew.angular.m4m.io
www.dormlife.app
portal.cloverbyte.com
www.cloudspecialist.tk
app.kiwi-go.jp
www.gracelandchiangmai99.com
app.nutritoo.in
www.adamhemeon.com
www.plasticcupapp.com
reparatur.info
buddbaerinc-scanner-buddbaer.cox2m.com
cloudinfra.co
www.qc4application.com

Certificate

The complete raw certificate details for bangkit.academy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAcv/Td4t8oAhiRF7epv
w/mXPtSXAt77adnC+TUBDTmCIw8N/5Lwh8Ixta055X57WdU3tsaouMfmI8DdyRcI
hv+nhrxFda+/X285OG4LNyMiy6Xa4nrnc6yQv7FfOGXBEhyzKqmHD7SXm66RTTz2
asUfoTQT0juONSmMoLXmF3sBcyLL0zotxNkhwMmkBw5wlotUirYwhEAc0TgmvXCv
DFkXKOZIqOmSicV6TMVNGGH+tar238SwIbSjHIQnKsKocEA4ZuKdYBi9JaJ59BeC
Bijum0TrMFeHts/1gL9GWSpYpYoq2Tu37iniOJqYBiS7dMtIEIBKejGJA4pA9VR6
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48791737423345171069564048587465229111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 11:47:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 12:35:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bangkit.academy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22726439161295247777170914135714029354612452034067725249021179322177461207414668003022798331631445476071226906827302485012554048160184677390764327673663335464817590230358372849079815579871626336778499697015861373346115566639708126697572749555344298051283363777403286948657242080393760521286567938228914556909483081805064896886604834491646325036399639621078716534915887595643577952124357163590836280969554742603821723633532523199412369175040782195262236997559946718925364190013679394455521129155614387866106077687034566957953439194244311925190686301266961913696296298630558185783301814346678024061283669116824098994767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df54ccb831db112c5115564cad01aeda98eac5c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/mOWHfeg5sL0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangkit.academy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1776a49b000004030047304502207c724fe22fb0ec4c7a30b70b49c21675afd3e19a29fede6981902c60a3b46fff022100c9a01171545867ff4dda9cf9929a4862e00cb4f5adc8bfda90d235b72e9bbd500075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d1776a4b300000403004630440220049f31f66b2a7361c6c2f3c0f0f2a2067efb8eff11dfff6f05eb5a3b69e617f8022001625947da4685f8b42c23cdd5deb7758a55f769ffce4ad100587fa303be232c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b2f7643edba6c768b4ef29ace5e94195baad0a3885c9cca222eab04d8681b649b65047f3e3dabb77a83009311c4ca415b6fc9ab511861af60879edfd1343ab66dfccd7046ba98a25f238978dae022f138d7f475604aee5fa7c830b7d9b9d03c03584c0abe4e887231538b6fe870fc4f0b7bddf2828618c1160eda863be2a473558173e41ab8a78ac0af99160e608d57b58619f27cc98a0ab4fae5b9401cf7fee0c30c5d9134c2b92ab6a012e366327d8975a6c6f8cc4ac3a633f170e85735b1868b8f1ba32c1687d4bf6fcc401e1f4c9ff6342df7cea4c3c59bc921adb3bf7458566a37887081e65ee8f4096ba971c8ad480ba8e44c4f421ea15aaf287cf330