dakotalandfcu.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f8:62:2b:fe:58:10:3a:ea:13:e6:56:01:f4:44:de:39 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dakotalandfcu.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f8:62:2b:fe:58:10:3a:ea:13:e6:56:01:f4:44:de:39
Serial Number (int): 330158280341616087125330365981548404281
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0d:6b:db:01:f7:0f:c4:98:0d:15:a4:98:2a:47:dd:b5:0e:f5:56:78
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 56:d6:cc:89:e1:85:6b:2d:41:96:4c:c4:36:05:41:52:09:f6:31:e5
Fingerprint (sha256): d5:45:03:c4:d1:78:b3:01:77:a9:4a:8a:9e:90:7a:ee:e7:83:98:01:df:5e:d6:ed:9e:e6:b4:96:b8:dc:3c:ed

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/z4Rdj39OJkQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/UMpHrkS7PMY.crl

Check the revocation status for certificate dakotalandfcu.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dakotalandfcu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dakotalandfcu.com

Other certificates including the domain name dakotalandfcu.com

(limited to 100 certificates)
eteller.dakotalandfcu.com
mail.dakotalandfcu.com
eteller.dakotalandfcu.com
dakotalandfcu.com
mesa4.aylsoluciones.pw
dakotalandfcu.com
itsupport.pando.ai
dakotalandfcu.com
eteller.dakotalandfcu.com
servicedesk.oneontacsd.org
dakotalandfcu.com
portal.dakotalandfcu.com
mobile.dakotalandfcu.com
forms.dakotalandfcu.com
helpdesk.admix.com
eteller.dakotalandfcu.com
dakotalandfcu.com
dakotalandfcu.com
servicedesk.metro-inet.us
lecitsupport.maf.ae
portal.dakotalandfcu.com
destek.coreway.com.tr
eteller.dakotalandfcu.com
portal.dakotalandfcu.com
itsupport.pando.ai
mail.dakotalandfcu.com
mail.dakotalandfcu.com
dakotalandfcu.com
ssl.dakotalandfcu.com
voc.utc-egy.net
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
mesa4.aylsoluciones.pw
eteller.dakotalandfcu.com
lecitsupport.maf.ae
dakotalandfcu.com
forms.dakotalandfcu.com
helpdesk.intrepidmuseum.org
dakotalandfcu.com
servicedesk.metro-inet.us
support.access2arabia.com
eteller.dakotalandfcu.com
eteller.dakotalandfcu.com
eteller.dakotalandfcu.com
encompasshelp.coastal-bev.com
mobile.dakotalandfcu.com
mobile.dakotalandfcu.com
helpdesk.admix.com
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
forms.dakotalandfcu.com
sac.spark-factory.ca
mesa4.aylsoluciones.pw
portal.dakotalandfcu.com
mail.dakotalandfcu.com
eteller.dakotalandfcu.com
dakotalandfcu.com
eteller.dakotalandfcu.com
dakotalandfcu.com
lecitsupport.maf.ae
dakotalandfcu.com
servicedesk.metro-inet.us
dakotalandfcu.com
support.access2arabia.com
mail.dakotalandfcu.com
support.access2arabia.com
mesa4.aylsoluciones.pw
itsupport.pando.ai
dakotalandfcu.com
eteller.dakotalandfcu.com
mail.dakotalandfcu.com
eteller.dakotalandfcu.com
dakotalandfcu.com
mesa4.aylsoluciones.pw
dakotalandfcu.com
cunify.dakotalandfcu.com
servicedesk.oneontacsd.org
itsupport.pando.ai
dakotalandfcu.com
betacunify.dakotalandfcu.com
dakotalandfcu.com
eteller.dakotalandfcu.com
mesa4.aylsoluciones.pw
dakotalandfcu.com
dakotalandfcu.com
dakotalandfcu.com
mesa4.aylsoluciones.pw
helpdesk.admix.com
servicedesk.oneontacsd.org
support.access2arabia.com
mesa4.aylsoluciones.pw
servicedesk.oneontacsd.org
mesa4.aylsoluciones.pw
lecitsupport.maf.ae
helpdesk.admix.com

Certificate

The complete raw certificate details for dakotalandfcu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUaSEL621SjU0quXS0u+
ZPzUx/nxZOYPp7JNshTuDKPTlvyxIbTjisVztSFI3ViFhgbILWskA8Pm/Svu5EV7
7zVYoOD8YoG5E8TjsTRZ7GzWaz3L1H7q1cNaqtVhoobg0sobtfYEo1NUesv1+fQ/
HXcclrun2Ekqa3dtRdGpWOiXF6J3C1DovTe3ozu/TWCBKHcMLqUwVIoecoyoEdo1
IHf/9wlyzbYLZPS1QfQB5Ruaf+cqZIi0GpgFM1yZO/Npta7F8nBzYzOXsNhN/AFt
q0ntsglMppYru6Wd6FSG33AO7C7q7UFm7l9er6+VKhtDh+rElvvTJLcURc96rRwc
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330158280341616087125330365981548404281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 12:07:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 12:07:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dakotalandfcu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21369073183349186647413158430473074070391520775949017490361478664224345112724752482333305345630567402666257869329718048211622476670028289130813928388533159731397359206520830958955171033405964933113026067830497074001364614988367452742095546491036314186772302662187231749726820754682640684685523108205336505475945393981631820170042211968619679991025014919803711887274511320596577441575747129538764290833850691557027601638741992865314056986342339756397144595015780404271644540631479838340844756899429327553316283568348859464546229175364418683161136719587948953461661373082917382241539078509682067610676753669212023299221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d6bdb01f70fc4980d15a4982a47ddb50ef55678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/z4Rdj39OJkQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotalandfcu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/UMpHrkS7PMY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e4c8634340000040300483046022100a7e71a1a630af709db5779fda9f00a9565816e034053db39ed006b2c462f9c67022100bf7bb0bde14bd13430d64948c36c39d921ea8d0e30656ef8d28436698041ac13007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e4c86343b0000040300483046022100d16ab058f49a62296c41afa1e97b0ac2fbebe04ac69abb2b56db6ccf1b4f084d02210095174c118e2e189588442bb4543b7b3a8f87bcc6e4a514c47a3ca3501e5164be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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