baricata.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number d8:2f:54:ce:1d:45:ce:18:09:1a:f6:f7:83:74:a7:8e was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=baricata.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): d8:2f:54:ce:1d:45:ce:18:09:1a:f6:f7:83:74:a7:8eSerial Number (int): 287359005094360604541778267747864848270
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 5d:5b:5b:55:5f:ce:2c:55:9f:b7:b8:da:f1:0e:98:aa:3d:e7:62:72
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): a1:e9:5d:60:c5:f4:c2:b4:fa:0b:cb:a1:fa:91:bf:f2:d4:df:1f:a9
Fingerprint (sha256): bb:e5:b1:9c:7a:2f:84:b2:4f:10:6c:7a:48:37:dd:80:c1:32:0f:a6:81:dd:51:99:f0:ec:29:53:eb:92:3f:d0
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/d9NsnkDyhDwCRL Distribution Point: http://crls.pki.goog/gts1d4/OYfpKaWafnA.crl
Check the revocation status for certificate baricata.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for baricata.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
baricata.com
Other certificates including the domain name baricata.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for baricata.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIRANgvVM4dRc4YCRr294N0p44wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMzI2MjEyNzA5WhcNMjQwNjI0 MjIxNjIwWjAXMRUwEwYDVQQDEwxiYXJpY2F0YS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDv2MzsHbzBMi4H/MeXrvR+/gxcU54H9E+9sBVk+XB4 gDHmlnRLqXnVVBnUhTK3ZvIlfZ0gthEvAdMn3qj+5C5vs3lg2Cz47hInANn6rRv9 COgYntGYsrTrohtV+QkhDYsk3CyU33LsMETd4aZ79ZWkJz0q8wqDXuA98h38ts74 R5Y1wbsItesCX/ji6ppNlpeUc9BSZgcVbiheYf5CuUQe50mCWRGkXGyZn046/q84 uwnHTNkQtFcDZ4dll8Dqm5Wg8rqXO6RHrgZBnncoZL5rd9+x365djHKr9rVhLIGs iyMexYbaCyY7BBnkTjIn0nikdDiMd0K0anUZL32CkWXlAgMBAAGjggJzMIICbzAO BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUXVtbVV/OLFWft7ja8Q6Yqj3nYnIwHwYDVR0jBBgwFoAUJeIY DrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9kOU5zbmtEeWhEdzAxBggrBgEF BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjAXBgNV HREEEDAOggxiYXJpY2F0YS5jb20wIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYB BAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9n dHMxZDQvT1lmcEthV2FmbkEuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOfN/gGQAABAMARzBF AiBMu+gIYBR9bIy7p22k5KaInj7qohob0wJy9OAL+atd2gIhAI4PPFwTWoS7jY6c AIRXrQRAlAGex1jNPwVnGWrMQoTFAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGOfN/r3AAABAMARzBFAiEA8J2GMch0b9A98bd8phTwUFEDDUSh K6M16IVU7G6pSk4CIDv3MjSznY8hWa4pftg3M7Lo77g0HAY2gNvsmLSEq19JMA0G CSqGSIb3DQEBCwUAA4IBAQCYPrMV54xRGYTCgdbi0vRZbCX8vq2LIhe7utE8e3I5 +Tm3sDDGyny1PSz2m0ty70jC1OrA8iCTUTYEBNzLaN5ZLodZINJLFMkU5hoa+MdA 7Z2m+pJ9whTlKUKOJlSMSgnZm0NYeuhOgvZ0R8ZIGxiBgMVlvbEBKDtgfNHFCyB7 X2kPtVTD4gjBUQNkIJqJxyirtHo6qvsH9mGdRz7rP/3IK4vgRCs3eiiW6NRSx457 ijHl2G/fZJFXh/LPbSDl7OQF1q/s5/8p+HXCliy7obk3JxDM84u/rxFVK3D1il7z uGTEFfHniPBJ+uwOS80NR8N6Pxz7Dokn06kVyfB8g8++ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79jM7B28wTIuB/zHl670 fv4MXFOeB/RPvbAVZPlweIAx5pZ0S6l51VQZ1IUyt2byJX2dILYRLwHTJ96o/uQu b7N5YNgs+O4SJwDZ+q0b/QjoGJ7RmLK066IbVfkJIQ2LJNwslN9y7DBE3eGme/WV pCc9KvMKg17gPfId/LbO+EeWNcG7CLXrAl/44uqaTZaXlHPQUmYHFW4oXmH+QrlE HudJglkRpFxsmZ9OOv6vOLsJx0zZELRXA2eHZZfA6puVoPK6lzukR64GQZ53KGS+ a3ffsd+uXYxyq/a1YSyBrIsjHsWG2gsmOwQZ5E4yJ9J4pHQ4jHdCtGp1GS99gpFl 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287359005094360604541778267747864848270 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 21:27:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 22:16:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baricata.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30277863187041132275269095301674051955326834626955412608882804878705558660826329075183652203183788393020734349488588146840117296015332125236745402483015989253790115352811646709036026863981874847824394293775664136564173395936613331642108099073459847908172046835999272476646454433036697518116837580625553607451564690647660755538291677811792942769468005880611084449127019429636483601107632465212495932094214885462802733031460395077797720041361422918930869592166053601213295825117742288661096755152137637364449340091655183187636018313711528857551162238867802227596160220515494722992009710165954301056689115465253024523749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d5b5b555fce2c559fb7b8daf10e98aa3de76272 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/d9NsnkDyhDw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baricata.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/OYfpKaWafnA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7cdfe019000004030047304502204cbbe80860147d6c8cbba76da4e4a6889e3eeaa21a1bd30272f4e00bf9ab5dda0221008e0f3c5c135a84bb8d8e9c008457ad044094019ec758cd3f0567196acc4284c500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7cdfebdc0000040300473045022100f09d8631c8746fd03df1b77ca614f05051030d44a12ba335e88554ec6ea94a4e02203bf73234b39d8f2159ae297ed83733b2e8efb8341c063680dbec98b484ab5f49 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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