reftoken.aspen.vgtf.net

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 32:13:54:ae:07:b3:95:58:0a:00:00:00:00:18:7a:3a was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reftoken.aspen.vgtf.net

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:13:54:ae:07:b3:95:58:0a:00:00:00:00:18:7a:3a
Serial Number (int): 66561770940048437639543221397331933754
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 59:7c:6c:53:57:e3:a9:d6:cf:f8:2f:06:00:de:c2:a8:df:03:90:c9
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 93:3f:cc:29:00:db:c8:74:b4:d6:ce:86:f9:1a:64:fb:c0:47:4d:18
Fingerprint (sha256): 86:89:a9:ae:6c:de:9b:54:89:b7:a8:75:c3:4e:6a:dd:44:34:2b:89:a5:26:c0:1c:7f:0d:8e:b7:1f:36:45:12

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate reftoken.aspen.vgtf.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reftoken.aspen.vgtf.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reftoken.aspen.vgtf.net

Other certificates including the domain name vgtf.net

(limited to 100 certificates)
lsd-prod-56m.gslb.vgtf.net
artifacts.vgtf.net
chef.vgtf.net
www.turner.com
refpaws.acr.vgtf.net
www.turner.com
lsd-int-56m.gslb.vgtf.net
www.turner.com
token.vgtf.net
lsd-ref-56m.gslb.vgtf.net
reftoken.aspen.vgtf.net
www.turner.com
cnn-ref-cms3-service-proxy.56m.vgtf.net
www.turner.com
www.turner.com
chef.56m.vgtf.net
www.turner.com
cnn-ref-cms3-service-proxy.56m.vgtf.net
www.turner.com
*.s.lvo.services.vgtf.net
token.ngtv.io
www.turner.com
artifacts.vgtf.net
lsd-int-56m.gslb.vgtf.net
vgtf.net
refpartner.token.vgtf.net
ospoc.dev.vgtf.net
reftoken.aspen.vgtf.net
ospoc.dev.vgtf.net
www.turner.com
lsd-prod-56m.gslb.vgtf.net
www.turner.com
chef.56m.vgtf.net
aspen.ngtv.io
www.turner.com
www.turner.com
livedataint.56m.dmtio.net
www.turner.com
livedataint.56m.dmtio.net
*.api.56m.vgtf.net
*.s.lvo.services.vgtf.net
reftoken.aspen.vgtf.net
www.turner.com
api.vgtf.net
livedataint.56m.dmtio.net
lsd-qa-56m.gslb.vgtf.net
admin.vgtf.net
www.turner.com
*.api.lax.vgtf.net
partner.token.vgtf.net
chef.56m.vgtf.net
artifacts.api.56m.vgtf.net
lsd-ref-56m.gslb.vgtf.net
*.mon.vgtf.net
token.vgtf.net
www.turner.com
livedataint.56m.dmtio.net
admin.vgtf.net
token.vgtf.net
www.turner.com
www.turner.com
www.turner.com
www.turner.com
*.s.lvo.services.vgtf.net
lsd-qa-56m.gslb.vgtf.net
chef.56m.vgtf.net
livedataint.56m.dmtio.net
vgtf.net
www.turner.com
artifacts.vgtf.net
lsd-int-56m.gslb.vgtf.net
www.turner.com

Certificate

The complete raw certificate details for reftoken.aspen.vgtf.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIQMhNUrgezlVgKAAAAABh6OjANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMw
EQYDVQQDEwpHVFMgQ0EgMUQyMB4XDTIwMDIyNjEzMzkyMVoXDTIwMDUyNjEzMzky
MVowIjEgMB4GA1UEAxMXcmVmdG9rZW4uYXNwZW4udmd0Zi5uZXQwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1Fd3iM3Xex1oz0uW4DdKTLJ4/BchqAMC
NiIzmCeRJWZ4MYfi8F65Y/8xqlcfOu3he1dT8I6VrhWa5p44BaCja13LQ8Ge51bD
n4WQTHQjzIMXKuMf5ObR3SxNZ5YoM69KPLiIUIgSsHONM1W6RoywUj1A5RFxVL4I
/pR1YI5zH2cer6hDBbVNB2fHHsa+kCoj0y9Mu0/1iUf0Hdf1zCcblHp+v2yem0xj
kP+pNllcDvdMMGTTUK3u0O0vzcnLZT+Zu7Kp8G6xMPYMC7zWn6NR9bApVc28qNoT
qgnUJEgoZHBDocFekFiCrM2b4Nfgz0/GlSIM0HMLgMCt4QJTnvFVAgMBAAGjggJc
MIICWDAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUWXxsU1fjqdbP+C8GAN7CqN8DkMkwHwYDVR0jBBgw
FoAUsd0yXei3N3LSzlzOJv5HeeIBCOkwZAYIKwYBBQUHAQEEWDBWMCcGCCsGAQUF
BzABhhtodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHMxZDIwKwYIKwYBBQUHMAKGH2h0
dHA6Ly9wa2kuZ29vZy9nc3IyL0dUUzFEMi5jcnQwIgYDVR0RBBswGYIXcmVmdG9r
ZW4uYXNwZW4udmd0Zi5uZXQwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHW
eQIFAzAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vY3JsLnBraS5nb29nL0dUUzFE
Mi5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LNiiBOh2b5K7mK
JSBna9r6cOeySVMt74uQXgAAAXCB8By2AAAEAwBGMEQCIFxoFrBLPiwvNDTJeFnP
sHEakUH7m5e2rhRZ6jKyTPFXAiBhS5A8ett3+BbLFQiVK1SAgb64kPnlYBq1tU5J
BQ48gwB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcIHwHOMA
AAQDAEcwRQIhAPyDzlJEBVyDNnyLDce6CTbYBHuukbxeHzR9SOl1LhypAiArJLbT
35n7eLshuT8m19blpWbyYh7psReuSAcv7t3MrDANBgkqhkiG9w0BAQsFAAOCAQEA
nNwKs72q7zxRvSAl2IOgW3KZSwOEji69op8BH0ZbfxDxls/dTMMzZjVWavh1Eopp
r3bW/5fz+4W9xh6KPo4xxhSTRIhdsipnCJCUV0mb8fpIy/pAkUoG72YRCdmzxVHz
8lLdkLXFJCxY3lMcQWKO4tnYDVGhUWqTNDtt7xB0+pQKz9RFHOn8tc6X3pCN5ver
slbADkl/Aou7mOCn2q+n+JgF6X/FP6jk4hC1c21nrcWYqxKhkOAuFgnN0P2ZlJic
ctIU7EPRgsXwhoYRYR9xWbbaVWB7rOflgkKnT/sFNUZkdpEOra9UQO1qPQUZzXdK
GN7Qb9x53fspyu6Tr1bS/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9RXd4jN13sdaM9LluA3
SkyyePwXIagDAjYiM5gnkSVmeDGH4vBeuWP/MapXHzrt4XtXU/COla4VmuaeOAWg
o2tdy0PBnudWw5+FkEx0I8yDFyrjH+Tm0d0sTWeWKDOvSjy4iFCIErBzjTNVukaM
sFI9QOURcVS+CP6UdWCOcx9nHq+oQwW1TQdnxx7GvpAqI9MvTLtP9YlH9B3X9cwn
G5R6fr9snptMY5D/qTZZXA73TDBk01Ct7tDtL83Jy2U/mbuyqfBusTD2DAu81p+j
UfWwKVXNvKjaE6oJ1CRIKGRwQ6HBXpBYgqzNm+DX4M9PxpUiDNBzC4DAreECU57x
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66561770940048437639543221397331933754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 13:39:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 13:39:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reftoken.aspen.vgtf.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22196412947982607326779405908057117967469765670523923274184636339491790314501855311047124097155843892554871106847852799216994578169746214905003013163281935444171699262285385517441207552492221930997495224327994622375973481826789261788590083747494274779869796284434008100893349342813769681616388239780227685012805772492526952262262662686764599031333968878836147821836843884137803121543510262563994328328964458253415723689735095469355132475784174654456752983665600466419303144072021862853672939600695926359245612632259566830359354368800424973199188116862762440021805936449216547360244699715799408121519795451188895215957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							597c6c5357e3a9d6cff82f0600dec2a8df0390c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reftoken.aspen.vgtf.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017081f01cb6000004030046304402205c6816b04b3e2c2f3434c97859cfb0711a9141fb9b97b6ae1459ea32b24cf1570220614b903c7adb77f816cb1508952b548081beb890f9e5601ab5b54e49050e3c830076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017081f01ce30000040300473045022100fc83ce5244055c83367c8b0dc7ba0936d8047bae91bc5e1f347d48e9752e1ca902202b24b6d3df99fb78bb21b93f26d7d6e5a566f2621ee9b117ae48072feeddccac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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