airflow.private.curio.io

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d3:0c:d9:b0:c4:8c:4e:15:0a:36:e1:ee:1d:0f:b6:50 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=airflow.private.curio.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): d3:0c:d9:b0:c4:8c:4e:15:0a:36:e1:ee:1d:0f:b6:50
Serial Number (int): 280533829960788942309684063629038564944
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3d:f9:5f:0d:9c:14:9f:79:11:7d:13:c7:84:c4:5f:f3:7d:bb:c0:dc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): df:86:b5:8f:dd:77:3a:e7:f7:2f:09:20:b8:bb:c8:43:68:38:4a:30
Fingerprint (sha256): 9e:70:c2:92:1d:98:66:46:ce:60:1a:6b:76:6d:ca:75:c1:99:b2:96:9f:f8:65:e8:7f:97:50:70:38:2b:80:02

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Pc9jURsTGMY
CRL Distribution Point: http://crls.pki.goog/gts1d4/Hpb1Ru5zrpw.crl

Check the revocation status for certificate airflow.private.curio.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for airflow.private.curio.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airflow.private.curio.io

Other certificates including the domain name curio.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for airflow.private.curio.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNMc2+ZptmfMSHrxWAaJ
XS6FffTwpFsTEU9VWvtrWA9r4KH3aWJ6O4MF2PttR3eoWjpbV+Ffl4rBMcogyp3c
a13EvBUwppJbEOUo7GC8nmtzOjtoqhLFRrEQtrg5B2qvlvMsofAHRBKqXzQXakpU
+fTUmBZ/t0fqktGVvSs8Y54LnAOIc5uREjauMR6pmWrgtxXThgMigZzkhcStQJL8
87hVANMO6fsCCHZMrBCiZqJjxXJXUHqQEV+dUBTl6/fNVOQJjglzFQsNkhcE+9Q9
yYiPfa9HebyazF5OYWuNg0RgKxKeclc2kU6nj3w67a+4NvioUNI6WxzuburoUkis
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280533829960788942309684063629038564944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 08:21:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 09:15:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'airflow.private.curio.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23836904900976535775452970238107485779251232828038174921886464263019362405645278621554236494457233805938151701002976609363739986420248529185637125556598766367192182469761412228647368411855490902778965203383951350479094992710318767315055931292363634540785819300922403467556175356149379419912469936911364202174509261458455846382614110253778960222462295643870693590202465606958155412918836315693511899853699152161471518127454999047195850445210315566189741715456633026153552648489087807282512009131765287483770786045181775485056041953731388244241818047076571715118684146079740950371100205121739590421774023315556766624973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3df95f0d9c149f79117d13c784c45ff37dbbc0dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Pc9jURsTGMY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airflow.private.curio.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Hpb1Ru5zrpw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ed19c922900000403004630440220091ed4df5351688f4c01d47723204874ee34e3a063363acfd0463909af25bec502204b4bfd71cc10a145523c7e680d6e2b71edf6c68a43ca76db01b0b24a87748f55007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ed19c9208000004030046304402204195d145ebfcd768f9ed3de5d0a6495c31053655592aedf29db86009e40cf37b022004f65b918134763ee8008d71be535749e199d1bfde446b939ad91cdb06c74959
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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