linkfinancial.eu

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 04:65:81:96:d9:1e:99:0c:13:e2:0d:6a:a4:f8:07:1e was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=linkfinancial.eu

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:65:81:96:d9:1e:99:0c:13:e2:0d:6a:a4:f8:07:1e
Serial Number (int): 5843962348110166937917985709274695454
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3f:b2:98:8a:fe:e0:61:30:be:74:63:85:db:fe:2c:df:8b:4b:ab:24
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 26:c1:6f:46:f6:cb:95:40:30:14:d8:1d:75:29:3a:86:69:27:c4:8d
Fingerprint (sha256): 8f:40:ef:03:26:86:2f:6b:a3:1e:94:6e:67:40:4d:61:88:ab:c0:ab:7a:98:db:20:2e:cd:78:54:05:2a:ff:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/zcR-TF4z79M
CRL Distribution Point: http://crls.pki.goog/gts1p5/C7VLY2UpjTc.crl

Check the revocation status for certificate linkfinancial.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linkfinancial.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

linkfinancial.eu
*.linkfinancial.eu

Other certificates including the domain name linkfinancial.eu

(limited to 100 certificates)
servicedesk.weareavidity.com
servicedesk.vretigas.it
portal.fra.linkfinancial.eu
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
ictportal.linkfinancial.eu
www.linkfinancial.eu
helpdesk.bedes.org
linkfinancial.eu
helpdesk.hambroperks.com
helpdesk.bedes.org
webmail.linkfinancial.eu
transfers.linkfinancial.eu
linkfinancial.eu
assist.pentest.partners
helpdesk.actosoft.de
www.linkfinancial.eu
assist.pentest.partners
helpdesk.actosoft.de
lfanywhere2.linkfinancial.eu
servicedesk.weareavidity.com
linkfinancial.eu
webmail.linkfinancial.eu
helpdesk.bedes.org
portal.prt.linkfinancial.eu
transfers.linkfinancial.eu
helpdesk.coulisse.com
linkmail.linkfinancial.eu
linkfinancial.eu
helpdesk.wentworthclub.com
helpdesk.bedes.org
www.linkfinancial.eu
www.linkfinancial.eu
helpdesk.saviaantjes.be
assist.pentest.partners
linkfinancial.eu
ictportal.linkfinancial.eu
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
transfers.linkfinancial.eu
ictportal.linkfinancial.eu
assist.pentest.partners
linkfinancial.eu
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
LFAnywhere.linkfinancial.eu
linkfinancial.eu
linkfinancial.eu
sni.cloudflaressl.com
transfers.linkfinancial.eu
ithelpdesk.archlynk.com
www.linkfinancial.eu
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
helpdesk.wentworthclub.com
helpdesk.wentworthclub.com
www.linkfinancial.eu
de.linkfinancial.eu
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.hertspartnership-ala.gov.uk
www.linkfinancial.eu
helpdesk.saviaantjes.be
assist.pentest.partners
webmail.linkfinancial.eu
sdp.vdp.com
www.linkfinancial.eu
transfers.linkfinancial.eu
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com

Certificate

The complete raw certificate details for linkfinancial.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTw/0pvpv+s1HI3yxN7t
HAZwOGC6o7MZ3P8mzdb/6sng5TEVF0SF4/JG9AaChLO8/U73SZNZsEsC4cpG9o/c
4kLL1oIXGDTZ5yOcVm6Gls13QTbkOVdyPbhgkQYmtjGjn5ciFMwlDc8lgMbfQ6HH
FHiZwyszV/7+hHqZpeaA3YA2uuBFuEl0OBwY8WRoKth1NH1Ubyt66sSxWkEc2kya
44ekvilGjlxyjHscgnakxcR3MH/4ZgcrV4Q7J5fldkJYeoYlmX4BNANupzLVhHgN
WBbQ+8N8Eg3j0wTolIH6BA1dooO+WMDlbr6fRYhvGa1KojpprCbX98eUvHgfk9y/
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5843962348110166937917985709274695454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 09:24:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 09:24:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linkfinancial.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19344170700588793801438704328206878109945521906502092042498920935641829630622199387929087329107787893212476253401023642498081009519340392560031862653498825300172826060050466970180971020751430051789459778170856664895537342294649484714436479890577610193151237853948248052341703946104923453733352757888157699983234416971358424208827575075770540190162463384753520668772418068856392047372840360908131172803962271212124432408841793822639281409023997239516760731393695113959108909237938687500045587432247893752377346086072027805801401625094430715590027903896257085477322612946503492970963172793125353482803973678139038285571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fb2988afee06130be746385dbfe2cdf8b4bab24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zcR-TF4z79M'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkfinancial.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkfinancial.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/C7VLY2UpjTc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f8b3b3be5000004030047304502210088885f759d4de20d13ecced0ba5a23975faad08e6c1a3e7b4e1676df48c539af02207db8b4b822da0f26caa0e40041fcb137307167e57141cceabdfda259c549d04000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f8b3b3c08000004030047304502204f680e221ffd8b1dc0441dac2d579192c8fe9165c6cb1e4195d007e2007fb1cb022100fd908f247b9e452d90ab1273d9f32c37c92a59c7cb598853e5f858234dc80e14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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