clicknpark.staging.spaq.app

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 0b:28:61:bf:cb:8b:66:c7:11:67:4b:39:b0:45:f1:1b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clicknpark.staging.spaq.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:28:61:bf:cb:8b:66:c7:11:67:4b:39:b0:45:f1:1b
Serial Number (int): 14831182417280045179799560277337698587
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:23:c0:bd:3e:18:cf:86:e9:51:24:33:b3:b5:1b:70:d5:d7:8a:34
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): ac:39:bf:c0:17:ad:1a:1e:54:18:6b:ad:39:31:e3:71:44:ea:87:75
Fingerprint (sha256): b2:c4:dc:d4:47:e4:d6:94:1e:0a:df:65:93:e5:19:6b:4e:40:28:01:c2:13:81:c4:ac:af:fd:9b:3e:bd:ea:07

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/DOhT5gI2vRc
CRL Distribution Point: http://crls.pki.goog/gts1p5/hm8QoF_oxJs.crl

Check the revocation status for certificate clicknpark.staging.spaq.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clicknpark.staging.spaq.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clicknpark.staging.spaq.app

Other certificates including the domain name spaq.app

(limited to 100 certificates)
www.kitchy.club
cloud.naxs.com.ar
prod.spaq.app
furtlegame.com
thebestparty.pl
www.clpe.co.th
forms.westenddance.com.au
marketing-staging.internal.io
pa.historypath.us
system.embryoteen.com
hiragram.app
go.qa.gravywork.com
messagebus.app
wishlist.kotary.com.au
www.alexlarson.us
www.chowgrabber.com
citiehoops.com
referral.fameup.net
stockholmshem.demo.movello.se
qiriqu.com
bottleopeneradmin.estore.business
ciussse.staging.spaq.app
fire.lazarangelov.academy
tectec.eu
tinycost.gq
staging.spaq.app
www.okdsc.com
referral.fameup.net
www.fhirnative.com
og-br.com
stockcharts.investorcloud.net
www.subsocial.com
modiin.highlander.cloud
sio.backpac.co
deucria.net.br
www.cyclopoints.be
cloud.jochun.tw
travela.world
stockholmshem.demo.movello.se
www.ooshopping.nl
clicknpark.staging.spaq.app
blog.alfhai.ly
edu.mrwnmncd.com
www.slickhouz.com
www.gitmilk.com
www.deproent.com
bot.c-plus.cloud
www.drhayes.io
voice.chat.ac
api.wizardtreasure.com
travelmaxhub.com
mondo-natura.org
pulse.cash
app.fractory.co
www.togetherwerebetter.ch
rain.retrorocket.biz
getpayed.app
areyoufree.xyz
web.escuelard.com
www.hathtech.com
casseroleprivacy.com
ycard.app
www.malecon.gramola.app
www.myresearchexperience.co.uk
dart.technology
pin.mybees.be
cisssmo.staging.spaq.app
api.clicknpark.spaq.app
spq.staging.spaq.app
uplift.academy
police.gov.kh
www.serravi.cat
system.embryoteen.com
worldtopdealsadmin.estore.business
dev.spaq.app
www.ansaf.net
chamberyhandball.deeplinks.bfansports.com
uplift.academy
redirect.herbitussin.pl
comunidad.myrealfood.app
www.hawkingchatbot.com
www.dodolandia.app
chiefmedia.madhive.com
www.appgrate.net
www.saigontoday.com
cisssgaspesie.passerelle.staging.spaq.app
messagebus.app
thebestparty.pl
www.adilandsara2022.com
reputationscam.com
agent.oipcsp.in
fastestbooking.com
www.appgrate.net
staging.newslang.app
dhammah.com
app.sedric.ai
clicknpark.staging.spaq.app
ycard.app
inc.lanternoid.com
vibrart.proyectos.vlivemedia.com

Certificate

The complete raw certificate details for clicknpark.staging.spaq.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ8GqEhwUQJRAwF0KFLP
g4amlWbHVUlh6FiBpytpJPqBHT2T6h/owXsqPou2uUvzTbzw1npb+WHrhvUvdC1A
lQswAzadlC85uIzBXxEf9O2a9WdN/C0AfrfH7ffGAuBc1FOB/hmWIqALlhklDGCA
FsVs78OOCcHzYS/Q0meQapxGDbZHoUhMx9KU/mSmj7zyMQTqiHfTCZgtjVTJni2v
WpNMST0AwEZbeBfJou8SUm388a8lUDiTPck0DD83yY+h4rRu9J7HxqCbfPf+2zsR
fY0cCH6uO+kddy2CPxlBA+37hFkGEPl/8OQcb6BqLyVhyuuAuF8T1wCcQVWshhSi
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14831182417280045179799560277337698587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 14:59:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 15:58:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clicknpark.staging.spaq.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24371402457819458020250667600433337841613394332964325932541827210929169845794673358258907996652724658233062011788281516487739817917658045655217900052035939387026121428068159973794649275575146258853443766532086287515493974303022230812690665118180557262792107546815245390206772651210596753101686166067110008717883805314981135387131516580417744275751683124515597688193160886473756977853728509682426052331089548137888020559141070371947973595348515026371640602949145632815597016594343941455110070349680218942766187690130167910099151027749692215547095859790552695300421765758362797439309122666554952118063218689316979253781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1323c0bd3e18cf86e9512433b3b51b70d5d78a34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/DOhT5gI2vRc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicknpark.staging.spaq.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/hm8QoF_oxJs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b1529e74e0000040300483046022100d93d1d0d126259c6b68854388a20d18a8c2fa301cb89eaffeee60dd2a1a000c60221008034051f8100ecb1d5c1d821adcff4ec5a113b884c805247b935e915432fe21600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b1529e74100000403004830460221008b69582eb3a9370e0bd8e84b776803d90328a1b22728552c7d0dcac5a0f66ec2022100b4562d312d5021cb39770168a9df8731e28edce2f1be917c5051405c6f85ae07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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