jamiekirchick.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 03:bb:94:d4:66:e9:2e:6e:11:ab:50:55:cc:07:c0:76 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jamiekirchick.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:94:d4:66:e9:2e:6e:11:ab:50:55:cc:07:c0:76
Serial Number (int): 4961662124741923833529603387365507190
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cf:2c:1a:bf:93:2e:8c:ff:4e:b7:77:cc:3b:67:e2:fb:f7:7b:28:5f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 0c:94:1f:f6:68:8a:64:40:ae:50:a6:1d:73:f6:0d:3a:f5:1b:23:34
Fingerprint (sha256): 9b:34:f3:d5:d7:8a:5d:19:36:42:eb:8f:5a:a7:91:f1:74:d9:92:8d:5d:d9:71:f8:fa:f6:d6:48:a3:9f:8e:85

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/_Gn9Dj4BFYw
CRL Distribution Point: http://crls.pki.goog/gts1p5/kPtajCim2Js.crl

Check the revocation status for certificate jamiekirchick.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jamiekirchick.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jamiekirchick.org
*.jamiekirchick.org

Other certificates including the domain name jamiekirchick.org

(limited to 100 certificates)
jamiekirchick.org
bramptonhomebuyers.ca
bramptonhomebuyers.ca
jamiekirchick.org
saintflanagan.ie
miragesubsea.org
usc.mba
leaselock.ca
www.epik.africa
leaselock.ca
leaselock.ca
leaselock.ca
flanaganinstitute.org
jamiekirchick.org
jamiekirchick.org
jamiekirchick.org
jamiekirchick.org
estate.ninja
saintflanagan.ie
okeydokeykaraoke.ca
maw.me
leaselock.ca
bramptonhomebuyers.ca
gideons.bible
theniv.bible
saintflanagan.ie
jamiekirchick.org
jamiekirchick.org
bramptonhomebuyers.ca
saintflanagan.ie
letchat.world

Certificate

The complete raw certificate details for jamiekirchick.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AGHh4MoXhw7Ugrrr9dj
eUbJfi88SGrP0psxFiYZQwXw1qdckQgOHKt7githim1QelZR51jz+V9O1FNQYBV1
PM5TJkCIpsjeVg/W5gnSbLt2Sb5B62mlIg1wSqHJDgDXiwTvwlHy1sTLO8W2CNpl
dk4jspCh0wPxDBXsYaSP4CAtjLw1zIfzYDyHiimpFrO9SdXZWSrQ+Wns8m403YE/
qZEeJMHUPp6/rbU2yAQgxuM4H0rzVe+5gnysFXi6vUW/fI82uxJMvsmpKbM2Ly5h
CoRSranUzXt1QBP94u4bqqQW3uTFgK58yCIANvD8ytHIpqFTlcqyR9dTG4CEmRJ2
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4961662124741923833529603387365507190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 17:12:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 17:12:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamiekirchick.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27268228053590057146160249253296935403161442293359636884395759466724649846371531049468154393086047296205360236451222794562127841263318175473470255084148814487046941850684667190814705129626277911801178065189788542688900232967436012094712036491232534633918882859060113302833776731185016194072577709054122619803550977782125394600019868287197864169290775202342798454863182232532388050154176088321597871781936174554673178431005265156308700524340149647180344194789757041450445922047085897964227466010519527718667163161932419824540470270825219139389993910184628731815815032974239720564028437385917060575773116624803669898771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf2c1abf932e8cff4eb777cc3b67e2fbf77b285f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/_Gn9Dj4BFYw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiekirchick.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamiekirchick.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kPtajCim2Js.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e6c836ac60000040300473045022100de68220e20096fcfb7a730f32e4b834decf152d89450c2cceafa694cd7936e25022048cef0606fb4c80caae3c2fafb614ae9eb56f60fd8bcd8facd46c28370cd627800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e6c836ac30000040300473045022100ebcc1e53bcadac075a6bfeeb90a662b82b5248b9ca39320b86038479d69e84cc02203a67e099a1ecc5ba53ffa949db3f7efd23d9e6607dc656a138be3ca433fef8cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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