abwt.org
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number de:b2:05:4e:83:0b:d8:2f:09:05:07:fc:26:8c:3e:38 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=abwt.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): de:b2:05:4e:83:0b:d8:2f:09:05:07:fc:26:8c:3e:38Serial Number (int): 296012951537472072842913218493890182712
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 4d:00:ba:cb:62:8c:2b:b3:b6:19:f8:d2:6c:b1:86:17:c8:e3:fc:63
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 17:37:21:ec:40:a4:31:05:27:1a:41:2e:04:23:d6:47:dd:9c:3e:38
Fingerprint (sha256): b0:49:5e:b2:8f:e3:db:bf:92:16:c2:16:fe:e8:55:16:a0:3e:4f:50:21:3f:43:ed:07:b9:ea:a8:b8:d8:d6:80
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/KPuugJzf0ZACRL Distribution Point: http://crls.pki.goog/gts1d4/928rNMDfagE.crl
Check the revocation status for certificate abwt.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for abwt.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
abwt.org
Other certificates including the domain name abwt.org
(limited to 100 certificates)
act.one.org
action.standupamerica.com
act.johnfetterman.com
act.progressiowa.org
www-default.actionkit.com
action.wemove.eu
act.boldprogressives.org
www-default.actionkit.com
action.314actionfund.org
act.medicare4all.org
abwt.org
www-default.actionkit.com
act.ourrevolution.com
abwt.org
act.weareultraviolet.org
www-default.actionkit.com
act.lucaskunce.com
act.peoplesconvoy.com
act.elizabethwarren.com
act.campaigntoendqualifiedimmunity.org
donate.demandaplan.org
act.gunsensevoter.org
www-default.actionkit.com
abwt.org
abwt.org
act.powerthepolls.org
act.abwt.org
act.progressga.org
act.defendvotingrights.org
action.futuredems.org
action.futuredems.org
act.ourrevolution.com
act.democratic-strategy.org
go.giffords.org
abwt.org
act.ourrevolution.com
act.gavinnewsom.com
act.nuestropac.com
act.jamieraskin.com
abwt.org
act.ourrevolution.com
abwt.org
act.bcndp.ca
act.occupydemocrats.com
www.nowarwithiran.org
act.bcndp.ca
action.standupamerica.com
act.johnfetterman.com
act.progressiowa.org
www-default.actionkit.com
action.wemove.eu
act.boldprogressives.org
www-default.actionkit.com
action.314actionfund.org
act.medicare4all.org
abwt.org
www-default.actionkit.com
act.ourrevolution.com
abwt.org
act.weareultraviolet.org
www-default.actionkit.com
act.lucaskunce.com
act.peoplesconvoy.com
act.elizabethwarren.com
act.campaigntoendqualifiedimmunity.org
donate.demandaplan.org
act.gunsensevoter.org
www-default.actionkit.com
abwt.org
abwt.org
act.powerthepolls.org
act.abwt.org
act.progressga.org
act.defendvotingrights.org
action.futuredems.org
action.futuredems.org
act.ourrevolution.com
act.democratic-strategy.org
go.giffords.org
abwt.org
act.ourrevolution.com
act.gavinnewsom.com
act.nuestropac.com
act.jamieraskin.com
abwt.org
act.ourrevolution.com
abwt.org
act.bcndp.ca
act.occupydemocrats.com
www.nowarwithiran.org
act.bcndp.ca
Certificate
The complete raw certificate details for abwt.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIRAN6yBU6DC9gvCQUH/CaMPjgwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMDAyMjEwNTI0WhcNMjMxMjMx MjE1MjEzWjATMREwDwYDVQQDEwhhYnd0Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMzNARA5Ze8zZo5akzH6fuK5GRv6IHFJyHisoXahoCT/4HIH qsq0WnjfZAorihG14CsUSGWfVTZHKy6acLm9Q+2nQcihEixGUJNEBOPtvcWihacr SVu/Jcd4fH92d076xlCXzTVGl4NpG9CoVLLNSbkLAGFRq/Y5Zi/GTAm6i0HQjLJ6 3p+ij+g9K++JQeHYVHxD+tzj11ZddtyOhz57E6GsH9UUc2VXoDwbQBUV1Qo5AbIO aVCYrzImHTuJIXe3jZ6Jcy5CwweLn4sfzk03IuFT0MenlJdSrfLfe/OWugxAbRGL zV0vD9EPwiD/ZC1MfGpaJPUA/U/4+m5aje1Hjh8CAwEAAaOCAm8wggJrMA4GA1Ud DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRNALrLYowrs7YZ+NJssYYXyOP8YzAfBgNVHSMEGDAWgBQl4hgOsleR lCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6 Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L0tQdXVnSnpmMFpBMDEGCCsGAQUFBzAC hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMBMGA1UdEQQM MAqCCGFid3Qub3JnMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMw PAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0Lzky OHJOTURmYWdFLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AK33vvp8/xDI i509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABivJss1UAAAQDAEcwRQIhANaG2RkT b6sV9wqAwjqEFllptk4HDBZgILKsSMJDsqrTAiBo0MXlW3xPtLW34sHFtKdMCe1Q EEhBwg4PI97cdFLRwQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS AAABivJss2kAAAQDAEcwRQIhAKMer0TSsWPca1nUxvJPqYRvrI0N66yjecAUnj1n WG9dAiBb++ZbauH55kKqWK0ZQq6KYAUROl2aquPGjG+GlsLJuDANBgkqhkiG9w0B AQsFAAOCAQEAMX+382pGdOtf4yNTOa2YIvUEDoSGfDbLY7luSaCe5asn1MM7nhD1 +Kt34yLaNROi5PPf/+jO+R5Lq6QjdKBlYUamxPKIZqgxFSnHP6DFnplV497HuEp/ +Dh15XuPHW+KN6h7uOmOMrQm5L3fsTcSRK5ndApMAtgm986leLVeLevn7I+Mb7Ap CpUVnr+VKnizoFBIS8/zX10699AeVvYJvFtFHesCA0Z5ZzqixUbQIwsAkqf4ypMT MXDO+95PIF96iRXT3D+2hC9HFpRNVYYzEOFqmrBLvumjhW84p58ujxUPl3TiHxzL MpJc1GNy+LlHNPukmj32oOZPYD3KIHP6cQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM0BEDll7zNmjlqTMfp+ 4rkZG/ogcUnIeKyhdqGgJP/gcgeqyrRaeN9kCiuKEbXgKxRIZZ9VNkcrLppwub1D 7adByKESLEZQk0QE4+29xaKFpytJW78lx3h8f3Z3TvrGUJfNNUaXg2kb0KhUss1J uQsAYVGr9jlmL8ZMCbqLQdCMsnren6KP6D0r74lB4dhUfEP63OPXVl123I6HPnsT oawf1RRzZVegPBtAFRXVCjkBsg5pUJivMiYdO4khd7eNnolzLkLDB4ufix/OTTci 4VPQx6eUl1Kt8t9785a6DEBtEYvNXS8P0Q/CIP9kLUx8alok9QD9T/j6blqN7UeO HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296012951537472072842913218493890182712 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 21:05:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 21:52:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abwt.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25853705529045512560674710543206447983628469824127459912563488955235206994116346530269065635815843301302859010461503189336192250969432587394133656487261502748167598535847518234437819394308889195241167705896820161163857561760736156389447572620694562874625493076162498877105412096170871999765015230889917207252238342092586918436321382826068777622385107538468644893328479213006724389003607700142347595112442486398154444781141921026020664656466300308726089524488317435265012822732426752456515640018608336506801730241410125921643761533999926166120669029592346678550736474084987974303590485835191864531966239361921706331679 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4d00bacb628c2bb3b619f8d26cb18617c8e3fc63 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/KPuugJzf0ZA' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/928rNMDfagE.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018af26cb3550000040300473045022100d686d919136fab15f70a80c23a84165969b64e070c166020b2ac48c243b2aad3022068d0c5e55b7c4fb4b5b7e2c1c5b4a74c09ed50104841c20e0f23dedc7452d1c10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af26cb3690000040300473045022100a31eaf44d2b163dc6b59d4c6f24fa9846fac8d0debaca379c0149e3d67586f5d02205bfbe65b6ae1f9e642aa58ad1942ae8a6005113a5d9aaae3c68c6f8696c2c9b8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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