gw.clinikk.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a8:de:13:5c:e6:b7:ce:9f:0a:5c:6a:3b:63:6e:b2:fa was issued on by Google Trust Services LLC.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gw.clinikk.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a8:de:13:5c:e6:b7:ce:9f:0a:5c:6a:3b:63:6e:b2:fa
Serial Number (int): 224463385920637780500603680169946690298
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:70:cd:79:9f:9f:d0:e2:f5:82:a7:66:87:a2:0b:1b:73:86:b7:a3
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 60:f9:cf:35:a1:72:0a:03:a6:24:c3:47:83:1a:bb:df:3c:bc:3e:d5
Fingerprint (sha256): 9a:1c:96:11:69:ab:e5:51:77:2c:a2:d7:d4:d1:f8:1a:06:5e:2a:a0:d7:00:1a:23:08:8a:f0:ff:f6:dd:f7:f1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/lJqi0bc7-ik
CRL Distribution Point: http://crls.pki.goog/gts1d4/kmlci6sou6A.crl

Check the revocation status for certificate gw.clinikk.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw.clinikk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gw.clinikk.com
api.clinikk.com
app.clinikk.com
ops.clinikk.com
sales.clinikk.com
doctor.clinikk.com
accounts.clinikk.com

Other certificates including the domain name clinikk.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gw.clinikk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzZWmLP0xRPYIR3zPTGa
k8fz+z4CzEpqp12v8Dnhg1q21b09BvjqRxtj6fTEfmDpCf15eytS3difiimxOvQF
NCQNv/ONwaKQcsKO8a8DE7VxfF9MVSe18osw/HnJjq/KUjpc/9pDeIqKnPLA2drF
nJzWhX0krCppqJu5zljrmhAQoafXLSGzKHEfA0DEp7sGgwlwtKyZMxLRbO6Ai3q/
CVmoHOTnmO5L2v/sYarjmL1lY3Z87ibv1HZKnV0/IrX4IEVUUr2gfGX6BhXKLh0+
Rn0WMnlecEjP3/yaNyvBeefrs2I+6LI+ZvN2mGtWSku33F5vjDMjjfodqCVx4TWG
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224463385920637780500603680169946690298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 21:17:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 22:10:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw.clinikk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22118498567465880371696915726729734252876504887614270445995287093247921602072581522762770401899372935477745788180059559205138917790219058567743700888632251176260974562405581273512703070514869758910345695076408655357381444527823428966614640651118219982801475155698407593708441016150930685106565752823360867407535097921289665942908549493643697242124289694840606014865789857829977668351209630443907532439395365974348800743870431507236028317125611053440036596962704556023444130373152988044504646906329266755235031224037423511017412589079239311209317303404638172618302330537137248372164282720586860793448475872284978284139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2170cd799f9fd0e2f582a76687a20b1b7386b7a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/lJqi0bc7-ik'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor.clinikk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.clinikk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kmlci6sou6A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d574caf480000040300473045022100913e6d941135fa326e864d2264b9a76fe03f0befbe5a546e1f5762f6fb6b85ca02202d7b7270cba66e3cf9ebae747ca76dccd8c8a315786d69ebc69545df14cbdbf800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d574caf39000004030047304502210097fddbf03b2b41e34b344f16edac93fdf21b69819b948e1f8f83d5075bb3cc4002201747213b45728851d7018f245c459c502f891f05bb91d1e0725641d2c3e9d7f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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