ssl-api.itranslateapp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7e:70:b7:4f:dd:74:ee:3b:12:1f:9b:e8:af:3c:97:5e was issued on by Google Trust Services LLC.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-api.itranslateapp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:70:b7:4f:dd:74:ee:3b:12:1f:9b:e8:af:3c:97:5e
Serial Number (int): 168067982725575155141324671758655854430
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e3:5d:d6:66:73:ab:10:52:14:11:a9:fc:48:7b:67:33:44:84:21:af
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 5d:18:91:fa:23:71:84:27:f4:02:c6:49:0c:6b:fa:a0:b6:f1:c1:d3
Fingerprint (sha256): dd:1d:dd:ad:37:e0:fc:89:d6:e3:ce:e4:02:1f:16:1e:d6:19:2c:3f:1a:78:03:7d:22:08:16:e8:0a:08:2a:8b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/NJVjgx3S97A
CRL Distribution Point: http://crls.pki.goog/gts1d4/AsPhGEt1lbU.crl

Check the revocation status for certificate ssl-api.itranslateapp.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-api.itranslateapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl-api.itranslateapp.com
web-api.itranslateapp.com
lba-setup-test-accounts.itranslateapp.com
admin.itranslate.com
web-api.grammatica.io
accounts.grammatica.io
hub.grammatica.io
api.speak-translate.com

Other certificates including the domain name itranslateapp.com

(limited to 100 certificates)
medical.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
asr.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
medical.itranslateapp.com
data.itranslateapp.com
data.itranslateapp.com
pypi.itranslateapp.com
dev-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
gandalf.internal.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
dev-api.itranslateapp.com
asr.itranslateapp.com
han-shot-first.itranslateapp.com
pypi.itranslateapp.com
pypi.itranslateapp.com
pypi.itranslateapp.com
medical.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
pypi.itranslateapp.com
dev-api.itranslateapp.com
pypi.itranslateapp.com
data.itranslateapp.com
lb-setup-test-ssl-api.itranslateapp.com
vpn.itranslateapp.com
dev-api.itranslateapp.com
asr.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
test.ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
api.staging-3c6e.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
data.itranslateapp.com
itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
asr.itranslateapp.com
test.ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
api.staging-3c6e.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ssl-api.itranslateapp.com
accounts.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
itranslateapp.com
pypi.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
asr.itranslateapp.com
ssl-api.itranslateapp.com
test.ssl-api.itranslateapp.com
itranslateapp.com
medical.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
pypi.itranslateapp.com
web-api.itranslateapp.com
ssl-api.itranslateapp.com
web-api.itranslateapp.com
medical.itranslateapp.com
api.staging-3c6e.itranslateapp.com
accounts.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
web-api.itranslateapp.com
test.ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
dev-api.itranslateapp.com
ssl-test.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
web-api.itranslateapp.com
test123.itranslateapp.com
temp-blub.itranslateapp.com
api.staging-3c6e.itranslateapp.com
data.itranslateapp.com
asr-watch-v2.itranslateapp.com
data.itranslateapp.com
ssl-api.itranslateapp.com

Certificate

The complete raw certificate details for ssl-api.itranslateapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TYMdj27T1EZOuw4y/OF
oP/p3eSYhJo7d2Jt1CAkqlXhPrD6F98r0y48QNoGqcMEKFZb5RRS+S+AMmp+3qPz
T1/XPUb1G75gg/vayW/Rl+NoMq0XkZ8GOPxblSEBVi7UCQf9Gtnn2Kknb9C397Ip
IQvq5B4Q5dAqwCA63JDEUkKWXIxnTVnpQGSQIo1kgx8goZYjU7d83355k9EKME2j
FD2LuT536/Dl6wxp66L2/2+/DP5gxgPYxm1uIdJNi29suPxVhDiAwAFh+D6PtQhq
msFZeGi3heV83P93zkBIalet4aJUmixrAOBT0zi18KYtMGUqzFaU8mBpsLbi3a7x
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168067982725575155141324671758655854430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 11:22:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 12:15:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-api.itranslateapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27420364574704870845736854550532717857520115439218983688258164847715925981610184678575913719496944136400070653539088772428403970382615581483848098967174652478627129191133593135662682178416929003954774192162010929805918185397979776271854255756263952431509176690108596066943308570321154871332614127423136420109893116454443292649345475667059748379768092417019266614061690333980799606938919792939796178837152343672823777282315777110487700863627574905365359877948007769581647426217623547778758431460681702497283206900585453770021762319046612047658471271753338102146858501837011789649842746407278595510552809646481984123297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e35dd66673ab10521411a9fc487b6733448421af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/NJVjgx3S97A'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-api.itranslateapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-api.itranslateapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lba-setup-test-accounts.itranslateapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.itranslate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-api.grammatica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.grammatica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.grammatica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.speak-translate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/AsPhGEt1lbU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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