evvai.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 98:87:eb:f6:b6:64:55:9e:0e:a9:3f:ec:66:37:8a:86 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=evvai.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:87:eb:f6:b6:64:55:9e:0e:a9:3f:ec:66:37:8a:86
Serial Number (int): 202748401348041819749046284646409013894
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 42:65:b7:74:53:96:97:c7:c3:18:0c:85:fa:fb:d5:25:70:92:0b:91
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 95:ed:e5:74:14:ca:b8:de:4b:6b:12:65:a0:dc:23:a6:80:b0:4a:81
Fingerprint (sha256): 9f:64:e3:f3:be:c4:79:f0:16:63:45:86:d8:80:a5:ae:b4:e2:cd:0a:66:39:e9:53:2e:e0:35:f6:93:64:ab:f6

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/M30F3HsKjZ4
CRL Distribution Point: http://crls.pki.goog/gts1p5/RN1g8DRBdus.crl

Check the revocation status for certificate evvai.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for evvai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

evvai.com
*.evvai.com

Other certificates including the domain name evvai.com

(limited to 100 certificates)
www.marco.dev.evvai.com
sgboxportal.sgbox.it
support.eposnw.com
assistenza.edilbruny.it
assistenza.cmstlc.it
support.seosmash.it
*.evvai.com
soporte.fifa23legacycup.pro
support.inovatraining.com
asup.fancom.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.edilbruny.it
support.despeelgoedschuit.nl
assistenza.edilbruny.it
magazine.evvai.com
mailview.verkaufemehr.de
users.digitrame.fr
ticket.widemann.gmbh
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
support.inovatraining.com
assistenza.edilbruny.it
support.medianit.co.uk
www.evvai.com
www.evvai.com
assistenza.edilbruny.it
evvai.com
evvai.com
support.medianit.co.uk
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
evvai.com
www.evvai.com
magazine.evvai.com
asup.fancom.com
support.manstein.at
support.medianit.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.medianit.co.uk
helpdesk.dataroad.pt
sgboxportal.sgbox.it
cetec.support.arlian.fr
help.syntomax.com
track.weblims.it
support.inovatraining.com
rh.zagora.fr
support.eposnw.com
support.airgp.co.uk
magazine.evvai.com
support.manstein.at
helpdesk.itconsulting.cologne
users.digitrame.fr
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
track.netherfind.nl
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.les7royaumes.com
support.justin-legal.com
magazine.evvai.com
users.digitrame.fr
staging.evvai.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.cmstlc.it
helpdesk.pumtrix.com
*.evvai.com
support.seosmash.it
support.despeelgoedschuit.nl
www.evvai.com
support.lnmlaser.com
magazine.evvai.com
helpdesk.phc.parts
*.evvai.com
servizioclienti.evvai.com
support.seosmash.it
helpdesk.pumtrix.com
assistenza.edilbruny.it
www.evvai.com
support.inovatraining.com
hseq.naturalpower.com
evvai.com
servizioclienti.evvai.com
assistenza.edilbruny.it
ticket.widemann.gmbh
cetec.support.arlian.fr
support.eposnw.com
support.manstein.at
helpdesk.dataroad.pt
assistenza.edilbruny.it
evvai.com
helpdesk.dataroad.pt

Certificate

The complete raw certificate details for evvai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmacA00/R3rJpM5pKS+
pjQKYXvOd+unIx1K6EJ7WkvkhojUOgLC+ArP01dKQj3MYToCK7fM288Xa4q37Q42
MXcxrDNGDHXSDULOAwZzDpJviGdI8xgqpplXoNa9VbTsfcaKztYUVVogqIy4gjZU
tjF7tUg3HlWEeDPy1P1hAhi/kVCaITmFAb+x6dvGPm9yvzgDjuZ3zRl7A4PXOlw5
l5MjAHfU6lcCfTw2BLMl3GcnU3TGwIzuzyEtVvno4pk6fSm4DeKDMr0ObfObvN52
vg3K9EymtZRgEe171dZVb80FEyPLHgFJbJHx1YyIb1tQhoHQnfirdGErJmA4oJb4
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 202748401348041819749046284646409013894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 21:57:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 21:57:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'evvai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24423957666925444821784806561641916211241320860226303534339067084613240249627107076418890277893436814527987842579906244000685740339390090587526864948081153010403132634161118199936659267017160728739674410343981787403425573282015229572793766407051896374920563602774151948433683240514674266165596774039179525156909090731699714614702705348044070259368749321232647463509626006011246440499423568946275297225649289079405795847458286768475078686115495734803191560703698435907854286346167489589702422943281340835001257341798532776211900431787931111482401391443607845213813261126810932302953110538924361823584685530313569794181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4265b774539697c7c3180c85fafbd52570920b91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/M30F3HsKjZ4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evvai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/RN1g8DRBdus.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e8c6e65c5000004030047304502206f4441409e7cde5db577e7e605fd50ce9c5049e1260a908c48f13e29d15bbc4d022100c4e2673b304b38bda4456bdc0b1569d3a3fcde14a5f04a99d678147d43f7c219007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e8c6e665f0000040300473045022100da8b9719a27965e71b71d9a27cb6a8f093f9cae02423ee2cefb54a7956ebb1f2022016d0cd2dade5ecd05fd2cfc261e919c0768ccdf266eeb2e314f2636227f4cfe4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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