dash-api-acceptance.churned.io

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 2a:1b:ed:b3:9c:8e:15:0a:12:75:6b:20:c9:04:39:06 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dash-api-acceptance.churned.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2a:1b:ed:b3:9c:8e:15:0a:12:75:6b:20:c9:04:39:06
Serial Number (int): 55972588999515490861145900792617908486
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bc:85:35:41:f5:d8:a5:a1:9d:79:9d:de:18:39:a9:12:a8:96:a5:0b
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c0:76:7e:9b:be:6f:61:1b:19:db:1d:d2:84:98:d6:e9:56:c5:ea:e8
Fingerprint (sha256): c5:dc:3b:44:fd:33:d7:2e:78:64:d2:d0:07:87:3f:07:14:8d:25:29:92:19:89:ba:cc:2d:5f:86:ff:06:eb:12

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/b1Ay4PUwtic
CRL Distribution Point: http://crls.pki.goog/gts1d4/kA4WW9mzpzY.crl

Check the revocation status for certificate dash-api-acceptance.churned.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dash-api-acceptance.churned.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dash-api-acceptance.churned.io

Other certificates including the domain name churned.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for dash-api-acceptance.churned.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvllpgONAAx8XyDMcqY+x
bKA5ZsmW6t5Cf1OZEitEu/oKB4bnFnGD9ynND82Y/X1P+eML6rEQMfqLbNS8Cvtk
ypd05Kutb75/X5t7ude0YZnR1oXFpt4+/YtNglrHrGtA2ytda1sbvI/2xZckFh5L
L5pYysVrlJP0v5G/99tRdyYsLDbRjHZIaUmIVWN3srRamr8hC2it6/4jBicadO4z
I839YCUfSuqqanE0l5An2JPgsQo3D9M+4CZZoSF4DQPUU+Pp3RKdM5etV7NGQRB2
qG9NUhSubqx6Thlc7nAqNuGlvI8Tur+7e4bjZ4O2+1DoBL6ZKqU81kU8y005YEJO
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55972588999515490861145900792617908486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 15:22:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 16:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dash-api-acceptance.churned.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24029368704648238510627385090338176136530187567316109653661267099517896132590318544103271545100561444818399037230088277820971875516864037141540705995120964954522139913294684735152787399555831086496581525654433130652548454151168719608353558320758811657416363116659453352359319287287269890146769896737722124124400593931469111924800360763988279835096430825984506277690609422498617915173882538039957535080150861583798748346270581372702020946158007859851798026409047512030475032422135993807903025848070295669110929943257906441333921576754081993834509126129084820399513500851226966409628664915835362564226685849033838317253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc853541f5d8a5a19d799dde1839a912a896a50b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/b1Ay4PUwtic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash-api-acceptance.churned.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kA4WW9mzpzY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eecde043b0000040300483046022100c783a4907cf4d355075ea0d81ea5766c12603ca827ccc8a8bf30efd8c974ca64022100e64fa6dd60c3bd7d0c257ac8edf8abee583cdf2fd0ed0690bf3a3ab2588819e000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eecde04dd0000040300483046022100f72fe1e953d3b3acf4ee93d4d24fdb92be5c0a947c206d528b65d50470d9694d022100a90f2a4956171aab05e0429818f3bb52048378bc7ac6f512265dc50138d552ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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