tinode.co

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number be:07:7c:7d:24:2d:d4:18:09:09:24:b8:b8:af:dd:b4 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tinode.co

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): be:07:7c:7d:24:2d:d4:18:09:09:24:b8:b8:af:dd:b4
Serial Number (int): 252592190210651790335816222497414569396
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fd:f5:a2:12:a8:47:d4:30:d8:d5:05:c9:c9:78:f3:f9:d8:22:7f:d2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 78:15:bc:43:1e:e2:0f:bb:23:30:7e:5c:68:a5:62:46:8d:86:02:ee
Fingerprint (sha256): cf:42:e7:d2:53:d5:6e:82:39:65:7f:72:0e:e0:0e:7a:13:50:ec:d2:96:f3:83:b1:2b:8d:0c:e9:11:42:69:79

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/9USy8s1Tv84
CRL Distribution Point: http://crls.pki.goog/gts1d4/14ud8AuodEY.crl

Check the revocation status for certificate tinode.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tinode.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tinode.co

Other certificates including the domain name tinode.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for tinode.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/sl+xY0IQKRpWpFltu
hSIS1s5He/UtzQaqrv2Pj+71h62vIaok42+mjStuQswiDt7mWiNR5hhqJnhttjVs
B5qigzzTzaXcqwW0uMSC04txS4QgCoH/QtGqZyM6yJ/gdz+a73uPOP4PtIU0TvZx
tCGq+XfkDlxbJeJ1pctdVTecEBIzQhKBXm69rsJYxUn51cEPaNuimD0hkGZ97Rze
h654ULCSvHB/lpWQXavqiPXRqHY1tOdBL+sZHRNQP5zTtpNuhy5H9gSq8kz9QSwe
Q1sZaD8TC+N8M1mBzMuIvsi1iQ/VpJZuPwr3XGlk24BJz6TBACv2dyP+pVSwClrC
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252592190210651790335816222497414569396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 18:47:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 19:34:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tinode.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24963587425294282343465867411668772011515376300333140190764350346247496484384768219331165108335896933897352259170245009873065271518603086640007239495837384904404130092713982170029517757910937542036918436709840714061579953020116486745960191317005346143566523114931944564789087498528086676898561119045017630218869771664076100229621912555431618590606268394089670718074159588629862958714392739175426938573606038384939138350149042861011792959841411353599615720202903617503089303226634639528980932028025586406401441611075391155749069750159933811713354107135765684229946337497238431950751675217896067837648619610828724421147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdf5a212a847d430d8d505c9c978f3f9d8227fd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/9USy8s1Tv84'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinode.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/14ud8AuodEY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cc6910e8f0000040300463044022017526e76d30a920e4b91ad4204aaba7701da88ac69cf46810543be9fc780a47f0220131f6b3b397b2c717a98c540b020803179701976e50aeeec5e24ee2d3e1ce983007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cc6910d8300000403004830460221008f0cec2cc14f030547bb3082e30fc48997a7437b82ad3489017644125f3b7fca022100f2abeb795e20beffe6b600d32230304388569815949945b706497036baadccb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d14a1d261d6d741ce33ac454960ba525539ce4174393f6cae05f10c2ef1128183cfacabfab019d189a4ba1c5e9b3e82d73d286a2b862f7185ecc7594b1727df3aeb8f6f58e9e6a773aff9b7f9e079bad43e95ddcf6b0157345f99b44b40e7c71bfb5c0dcfac3d3360192274bf1c1ec5ed264b08dc3c5ed4cc2d681a17c8a663d6184a27e22d1f08c766ddb1d8bf7008c1929625b88ae5bb65a131676dbc9d2e9162a82f0aae5a8413ea42db9af5d12356795324fa202de00ca6004f415a497b94123f0ecb5849d7f9e4629a0410679ef039b1b95919037420abb3a423e5ae7e2a768467db40a2ed312d8df63c806f62198fc031079767855413c1aa1a284d9a