dynamaze.de

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f9:97:36:d3:90:07:3b:0b:13:e4:8e:ac:3b:25:94:3e was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dynamaze.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f9:97:36:d3:90:07:3b:0b:13:e4:8e:ac:3b:25:94:3e
Serial Number (int): 331762919787918281743915282217113588798
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3b:19:dd:97:3e:6b:00:66:b7:ee:68:64:8f:df:a6:c1:cc:a8:70:5c
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 95:39:9a:e2:ac:28:10:f7:3d:27:4a:fe:40:d5:74:86:02:41:2c:b4
Fingerprint (sha256): db:e2:a6:85:b5:37:e2:15:1c:49:82:ce:7d:a5:5c:40:22:19:0d:e9:b6:7c:0a:65:35:a5:e5:a3:e6:60:2d:71

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/_h2CphQNwdI
CRL Distribution Point: http://crls.pki.goog/gts1p5/le_7YNi7t64.crl

Check the revocation status for certificate dynamaze.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dynamaze.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dynamaze.de
*.dynamaze.de

Other certificates including the domain name dynamaze.de

(limited to 100 certificates)
dynamaze.de
staging-vendor-app.dynamaze.de
*.dynamaze.de
*.dynamaze.de
dynamaze.de
www.flowframe.app
www.dynamaze.de
pantriapp.sndvll.dev
dynamaze.de
dynamaze.de
www.chromepare.com
*.dynamaze.de
dynamaze.de
dynamaze.de
pos.easybus.app
checkin.halozen.com
*.dynamaze.de
dynamaze.de
www.dynamaze.de
www.dynamaze.de
dynamaze.de
www.dynamaze.de
dynamaze.de
vendor-app.dynamaze.de
dynamaze.de
www.dynamaze.de
dynamaze.de
dynamaze.de
dynamaze.de
dynamaze.de
freizeit.dynamaze.de
cloudstory.co
pantriapp.sndvll.dev
www.sovex.xyz
dynamaze.de
thinkingk.app
embedded.dynamaze.de
*.dynamaze.de
freizeit.dynamaze.de
dynamaze.de
www.dynamaze.de
staging-vendor-app.dynamaze.de
embedded.dynamaze.de
templetone.com
freizeit.dynamaze.de
www.dynamaze.de
dynamaze.de
gdg.bambooapp.ie
www.dynamaze.de
www.dynamaze.de
*.dynamaze.de
freizeit.dynamaze.de

Certificate

The complete raw certificate details for dynamaze.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIRAPmXNtOQBzsLE+SOrDsllD4wDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNDE2MDk0MTEzWhcNMjQwNzE1
MDk0MTEyWjAWMRQwEgYDVQQDEwtkeW5hbWF6ZS5kZTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMjLEbwmWZppRE8weVMZ9kOlIQtPdqFcgImmCvC6lpOp
yM0Yu2U+Djp+kFyf9znDlqYTaxIqAllYxYjKltbeGVlTBL4JBpjm6lqufgl9ruvL
Ymd56mgS0I+iqqOM3j1Jn8qIgzhgkw6DzkASBPtfL9S6ais0778UMhSjTEna6Lbb
gXNHmRBPQLm1QvfDGH6H9kC6NnPj4T0PJn++Si6BvkhLafcN815WYeD98K9nqwv1
qk32xhsl+jr42r98uBgHlsK3cz/7gFvAdClwXGKI+ym73Q/HZbEJZVfIOZoE3fj5
jxyNXvpE6asiYa7zYyy1djR0zjHomoUNZbyJBCuZQDMCAwEAAaOCAoEwggJ9MA4G
A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQ7Gd2XPmsAZrfuaGSP36bBzKhwXDAfBgNVHSMEGDAWgBTV/J4N
3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0
dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L19oMkNwaFFOd2RJMDEGCCsGAQUF
BzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMCUGA1Ud
EQQeMByCC2R5bmFtYXplLmRlgg0qLmR5bmFtYXplLmRlMCEGA1UdIAQaMBgwCAYG
Z4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2Ny
bHMucGtpLmdvb2cvZ3RzMXA1L2xlXzdZTmk3dDY0LmNybDCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB
juZ/HFoAAAQDAEcwRQIgfgkAAgT7Vrtqq7DTYpX75CJ8WfJ0ssMGveqkjyLyYq4C
IQC74yiHExXFNFIbHRoOg8o7/C5N5em99hxfmTwhwxq7dAB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjuZ/HHsAAAQDAEcwRQIhAOgIfPyBoz/c
gThh6/QlaItPHWNEFO8rmKtCZDGNAn5QAiBGjPx9XalyWTONNhtas8eEGRUIMihg
UUCckg/kOcpjKjANBgkqhkiG9w0BAQsFAAOCAQEAYIlMfuFOZT6J7HVZngOUpknM
b6T+fgFnD6rkvuOZLfod+A59JnrJlAZCxRDQsDTVWfDjKwYg5JXn+RuE0wf2Nai1
Pcw7Pq+kgE6BJ6E0UwOGI2OetZOBHG/dHzvkPrCI18PvUAbJ+5aQt4HR+VVHyOmL
mHrxrU4kTIc6GegIamiw3AEUHxZ5x6ikGMrGSiT9me5ZbKazACPY+LF7XvJVaSzD
Sg98FVzEC0ypN3gj2kVlrTNBBULfpdtfe3gOvWgub51QHJS5I89+TVfgVE7gHTam
acfFjJFhFMz5iVP5HYqUKVPnWQIVf0K4I+24Sy0MYBIrZKjqs5bm6ClPeqtPAA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMsRvCZZmmlETzB5Uxn2
Q6UhC092oVyAiaYK8LqWk6nIzRi7ZT4OOn6QXJ/3OcOWphNrEioCWVjFiMqW1t4Z
WVMEvgkGmObqWq5+CX2u68tiZ3nqaBLQj6Kqo4zePUmfyoiDOGCTDoPOQBIE+18v
1LpqKzTvvxQyFKNMSdrottuBc0eZEE9AubVC98MYfof2QLo2c+PhPQ8mf75KLoG+
SEtp9w3zXlZh4P3wr2erC/WqTfbGGyX6Ovjav3y4GAeWwrdzP/uAW8B0KXBcYoj7
KbvdD8dlsQllV8g5mgTd+PmPHI1e+kTpqyJhrvNjLLV2NHTOMeiahQ1lvIkEK5lA
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331762919787918281743915282217113588798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 09:41:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 09:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dynamaze.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25347798185957501361085333468844689589964970036402376606676711080867525810734081794337742217267058698174110232888030498428486546300695759492464506750160458877352936319354884058689835446106472376739459871439267827421722563663004853768509415540110106281648845172696622002423694085170744517982447986291783806695318320643696805170405988573568064388818019855184515271486105709476246077247900963976980454042656763710729541357745153621780442823845704761122250372923156124952556705605378932201000186437759882210435904849949755034629287314153523969383484026450764367591119504527184859712862589104144761359249298783596397019187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b19dd973e6b0066b7ee68648fdfa6c1cca8705c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/_h2CphQNwdI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamaze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamaze.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/le_7YNi7t64.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee67f1c5a000004030047304502207e09000204fb56bb6aabb0d36295fbe4227c59f274b2c306bdeaa48f22f262ae022100bbe328871315c534521b1d1a0e83ca3bfc2e4de5e9bdf61c5f993c21c31abb7400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee67f1c7b0000040300473045022100e8087cfc81a33fdc813861ebf425688b4f1d634414ef2b98ab4264318d027e500220468cfc7d5da97259338d361b5ab3c78419150832286051409c920fe439ca632a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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