cmb-s4.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 77:b2:ff:72:a8:25:4c:fa:0d:78:e1:13:af:30:fd:bd was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmb-s4.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 77:b2:ff:72:a8:25:4c:fa:0d:78:e1:13:af:30:fd:bd
Serial Number (int): 159107541437722221413345263273060138429
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b2:b5:ac:e9:80:df:ea:ba:9c:36:cc:e9:f0:1c:b3:45:74:d3:79:3f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 38:bc:b4:05:9b:94:54:b0:e1:ad:c0:e7:5a:ab:ef:0a:d5:ac:a6:f8
Fingerprint (sha256): c7:0c:ea:cb:51:4d:e8:99:ab:f1:34:34:f5:bd:00:ec:b5:d0:ff:27:79:41:1e:df:67:f5:32:03:fc:e8:81:12

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/cK29aR5T6Nk
CRL Distribution Point: http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl

Check the revocation status for certificate cmb-s4.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmb-s4.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmb-s4.org

Other certificates including the domain name cmb-s4.org

(limited to 100 certificates)
cmb-s4.org
cmb-s4.org
sni.cloudflaressl.com
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org
cmb-s4.org

Certificate

The complete raw certificate details for cmb-s4.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHfaZ2jLadtICecBxhz4
aQr79Z4Hg2JlCvzNfalkd38e2FJ3rKG1hoAvqAnViREE8kz8Lu9gQz81rA4fG5cP
f5EU3Hdl4Rzw/h+Un68oSq6B8WpmtIfS4wNTP0NwZTNRHqRageOqwprrevEBvxsF
orYW1YJz3pht+Ok2PaJm5HmiUIxOmVd2r2xrGFeilD3OdwIFYf44g8xkMDNlYHQc
qE2qf9LdL1WWgAGdWmLh+vRTMoed8ieCQAAS44PTxApPfUWB9tIkNlpg1WUAj9QE
hUl8Hz7JwSNd4k1O9PTWcgbiZyQQOWbvbPJeZCnhANiG16C7unvljiPPxoNJirVz
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159107541437722221413345263273060138429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 19:19:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 19:19:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmb-s4.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23286949900040515380711778557952151999102339353850747483741589137020606241427488353789290919131076735096383985112018373744597689205148040453102749589091641278741171376799161059190959169000267853469214051516182522874143096353330112829638719245963515199156847886065879813741131707600509447178729724217246131807430529435065964382824063276855556949956462836752654216435526853502540552864449563693224314934037439773682149513266905746446806986922204193854022785244810437911781675896801043174977274750079517998914828996792467560912597472688143386319347965839295875177086805765368059255938360024915296638712048736839834891151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2b5ace980dfeaba9c36cce9f01cb34574d3793f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/cK29aR5T6Nk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmb-s4.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f2136a597000004030046304402206e9cb013b437d4186d346fa0e71c5c68bc54af49b98d24195eae51f3be0ea4ef02207e728fb4c36768f6dc49457283506c8143c7f16fc2b0424a3547edc1f984ff65007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2136a66e0000040300473045022100c4e4b7718409ba44421709f1a0a037cde158f993da1b66bed5417aeabe0d42a202204526fac06194255e3eda77b569f27b082a0cd2c8f60e5cd9810047bf5fdd4b25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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