asociatia-g2.ro

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number dd:e8:7c:30:b8:9b:63:33:09:35:1d:a8:1d:a0:95:1c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=asociatia-g2.ro

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): dd:e8:7c:30:b8:9b:63:33:09:35:1d:a8:1d:a0:95:1c
Serial Number (int): 294966518818522235178278190569102546204
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0f:2d:bf:7b:dd:60:85:80:9c:cf:e3:e0:ca:54:be:33:f5:1c:71:08
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 0e:b7:19:8a:03:0a:6e:a8:e5:f8:23:50:37:ff:88:d7:46:e1:da:c8
Fingerprint (sha256): a7:3b:81:bf:9e:9e:5d:35:07:ed:d5:dc:21:9b:a6:0a:f7:01:89:2e:4d:5f:2b:a3:00:03:ce:6a:f5:44:66:3c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/dPD5mqYkcO4
CRL Distribution Point: http://crls.pki.goog/gts1d4/uu7bI-NdiXQ.crl

Check the revocation status for certificate asociatia-g2.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asociatia-g2.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asociatia-g2.ro

Other certificates including the domain name asociatia-g2.ro

(limited to 100 certificates)
beta.finantare.asociatia-g2.ro
www.catch22.restaurant
beta.finantare.asociatia-g2.ro
b2b.favstay.com
finantare.asociatia-g2.ro
auth.finantare.asociatia-g2.ro
app.jrft-dev.com
beta.finantare.asociatia-g2.ro
finantare.asociatia-g2.ro
youtrack.asociatia-g2.ro
finantare.asociatia-g2.ro
www.asociatia-g2.ro
beta.finantare.asociatia-g2.ro
melancolica.xyz
birthdayforacause.org
asociatia-g2.ro
asociatia-g2.ro
beta.finantare.asociatia-g2.ro
finantare.asociatia-g2.ro
app.sukii.at
beta.finantare.asociatia-g2.ro
www.painreliever.ca
finantare.asociatia-g2.ro
asociatia-g2.ro
www.asociatia-g2.ro
www.asociatia-g2.ro
www.asociatia-g2.ro
asociatia-g2.ro
vvsphotos.com
beta.finantare.asociatia-g2.ro
topaz.bidmytires.com
vereins.link
www.asociatia-g2.ro
youtrack.asociatia-g2.ro
finantare.asociatia-g2.ro
beta.finantare.asociatia-g2.ro
finantare.asociatia-g2.ro
beta.finantare.asociatia-g2.ro
www.asociatia-g2.ro
asociatia-g2.ro
finantare.asociatia-g2.ro
www.bonfante.dev
asociatia-g2.ro
www.igorrodriguesadvogados.com
app.test.doufupay.io
youtrack.asociatia-g2.ro
finantare.asociatia-g2.ro
raazdaar.com
finantare.asociatia-g2.ro
asociatia-g2.ro
finantare.asociatia-g2.ro
www.asociatia-g2.ro
www.asociatia-g2.ro
www2.cwlau.com
act.anticrimeterror.com
enablus.com
thetunneloflight.mwata.site
finantare.asociatia-g2.ro
beta.finantare.asociatia-g2.ro
pay.payforme.io
asociatia-g2.ro
asociatia-g2.ro
finantare.asociatia-g2.ro
finantare.asociatia-g2.ro
asociatia-g2.ro
asociatia-g2.ro
finantare.asociatia-g2.ro
staging.conversell.ai
finantare.asociatia-g2.ro
beta.finantare.asociatia-g2.ro
auth.beta.finantare.asociatia-g2.ro
www.asociatia-g2.ro
asociatia-g2.ro
finantare.asociatia-g2.ro
youtrack.asociatia-g2.ro
truengage.xpsads.com
vicuatui.classfunc.com
auth.beta.finantare.asociatia-g2.ro
klaysend.com
www.courserim.com
www.darkeinu-olimp.org
beta.finantare.asociatia-g2.ro
www.asociatia-g2.ro
asociatia-g2.ro
stocksage.app
nmbjjgrappling.com
beta.finantare.asociatia-g2.ro
asociatia-g2.ro
www.uccloud.com.tw
andanh.us
asociatia-g2.ro
asociatia-g2.ro
beta.finantare.asociatia-g2.ro
anathon.com
www.verbup.com
www.asociatia-g2.ro
www.asociatia-g2.ro
www.asociatia-g2.ro
rivieraincasa.com
as.lovelive-lab.fans

Certificate

The complete raw certificate details for asociatia-g2.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qLBN5wMwzuG/Q1yGSF7
XPkS5q1HMyTCJLLEJZHSivKYGrLHGcoIXO0+iAiMtGruRuIoAKCCvMQyUB9xXh5q
8GNDzrZvtToo2a5OYHyC7gha+yI+1I5qJf9ks8NXKGYwP/hDo/Jk4VjTnRcto/q8
UoYHBImxgBSXgJX4Y3PCwpCTtw5FupwIOwKSgZrj4VSM6WXk6c3YAvZ/i7WibU+H
A0gA3GeVdfeyystQ+ORSha2b1Wpo8O+ASOEQFZib7zQlLrmpSTr6yy4u1JA3MErf
fVelg/pz/KpJ80uE1SRzVv2N9L0FJ51ThctbSe85ZIquZbd9H2yU8+ZOZKAy/FzN
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294966518818522235178278190569102546204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 05:05:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 05:57:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asociatia-g2.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30124973942739086317542527208778292093843833089546431552982234141837948312474824604051176830924458169550795661840028708683581712413983873135824881230087053843300852137566785500853988725902309399887747891745039478262176639416732339051519839573857636966584487594736460022419464030192083030013663537822392230241876171085407298857606598035916828944296350738188489498054192116665513553778648901704181972232989672342132536724706143058624956967753347746751469296395112385412891216309652082862217037148484009367452356080774403427218959501153283414954726067463812679355476819495833125277752623459684753057937409231680394022257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f2dbf7bdd6085809ccfe3e0ca54be33f51c7108
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/dPD5mqYkcO4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asociatia-g2.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/uu7bI-NdiXQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d2579219d0000040300463044022012fe71678ebdf097f08ed018bf96771da5f97a5959ceb191d1d546a456f5189602202b2bc2daa2f474dc894616d518b928a810fdc86cd3152ab545bab606517c015d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d2579217c0000040300483046022100c54e294f428651c3310fd45e228a5f8689e2d2e485739ecf8f22e433b40b450d022100de703c2d5e9768833d0c2af92dedea0514d6fa82ae931e834a4a8670be32d9dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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