cdn.app-staging.youbooq.me

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e5:96:30:85:5d:c3:4d:4b:0a:4d:4e:c3:8c:3d:6b:6a was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn.app-staging.youbooq.me

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e5:96:30:85:5d:c3:4d:4b:0a:4d:4e:c3:8c:3d:6b:6a
Serial Number (int): 305173039685550760171265907349723638634
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b9:18:ba:aa:44:3b:04:c5:3b:8e:ef:9d:26:7d:97:e3:88:4f:3f:b8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8e:1b:d1:b1:60:04:83:98:d9:94:db:72:6d:18:80:27:8d:2d:9f:54
Fingerprint (sha256): dd:f7:ae:a4:de:bc:80:6c:71:61:51:4a:12:0e:9d:70:2a:0a:35:76:f3:bb:90:ab:39:6e:35:8a:f3:0e:b7:aa

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/oQCNSS5RJbM
CRL Distribution Point: http://crls.pki.goog/gts1d4/_WHbAHysn_A.crl

Check the revocation status for certificate cdn.app-staging.youbooq.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.app-staging.youbooq.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.app-staging.youbooq.me

Other certificates including the domain name youbooq.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for cdn.app-staging.youbooq.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMA7v6YBzmCjim5FrEur
gQMjlBgVAtlPQwCj+UEsWtxCNcQeInWcUe7T3xucxP99Y5FNYh89CyvxE11bsyVM
HrusfrMr6RaZWvl63nfkHb2ruJVCn7yU/8GbLvEHUHfKrTGioDZYVGWOcbWo1o8C
e9BaK0sJBYKudD3RLuytVvngnblw4du2dbJB1lFTR0SACwtBubV7dyq1LSelnTSO
a6CNzqAEZ1q4maSX1thjBXdTqI87ipHawavJbuwEYUQK9BVhbkb/ohN+HtOguWTJ
Dbm+nvOrJa4gm+DoUBIxW870qaLaY8vW3FNMhcgA9Ziorr5aoNNmZjecqPs/cNOG
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305173039685550760171265907349723638634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 00:46:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.app-staging.youbooq.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25342454812350290976412389047332355043391586647926360782080126409208720463960755023328753833217804986967162256319207582160269028783726661548068195353807218329260301680762146116833411315620689507114530544975614069692782472886256526936059088946397222116867195290136466226943890501517197329078266331188073288599615225187963944737859706660584920795234485928166605450329445306933573953213068971759911858897444782587271132661352259969493927839409949366652475883907632407361206618748735689573504272562207218374088451870808405871384493357752754565903260881400016564219356335410397960384648346904573112160360814609959461553773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b918baaa443b04c53b8eef9d267d97e3884f3fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/oQCNSS5RJbM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.app-staging.youbooq.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_WHbAHysn_A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dddc60bc50000040300483046022100c607bbda09fd690066b0b33698d13da033075854be260ba298f3d0d007ef74ac022100da8d2640f1b0021b1afa1ab7b90a25526312b3371f62130e4ace9fcd02c8d91d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dddc60b9c00000403004730450220646afc060ab14bae1d23bd6fb30fd42dc59698d9cbc9aa5eae3fe59cb7dd4605022100cbc3edb3a4fe81db076340f99e0cd565ff5c9cfab93ccfc300ef4bef8932447f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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