secmsg.rco-eu.unblu.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 10:0e:29:90:9b:b7:e0:e9:10:30:00:92:26:00:56:12 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=secmsg.rco-eu.unblu.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 10:0e:29:90:9b:b7:e0:e9:10:30:00:92:26:00:56:12
Serial Number (int): 21341183124419765382460262918083597842
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 95:75:d3:d2:ea:a8:2e:0e:d7:be:62:12:27:fe:ff:95:6c:88:ae:07
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 4e:58:b0:54:df:99:64:66:7b:62:e2:3a:1d:54:f3:23:94:b9:14:72
Fingerprint (sha256): df:d8:e0:e0:60:1e:2a:54:ae:59:0b:41:55:89:cb:af:3e:32:0c:dc:03:b6:11:10:74:32:49:85:b6:c6:31:d0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/-dYZIKBNls0
CRL Distribution Point: http://crls.pki.goog/gts1d4/S4ncRdVfvuE.crl

Check the revocation status for certificate secmsg.rco-eu.unblu.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secmsg.rco-eu.unblu.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secmsg.rco-eu.unblu.app

Other certificates including the domain name unblu.app

(limited to 100 certificates)
carta.us.unblu.app
collaboration.cbk.unblu.app
rco-eu.unblu.app
carta.us.unblu.app
santander.unblu.app
bper-banca.unblu.app
celero.unblu.app
uba-uat.mirabaud.unblu.app
carta.us.unblu.app
us.unblu.app
carta.us.unblu.app
postbranch.unblu.app
bms.balins.cb.unblu.app
bug-bounty-visitor.app.unblu.app
carta.us.unblu.app
euipo.eu.unblu.app
ringcentral-cnb.app.unblu.app
carta.us.unblu.app
ca.unblu.app
carta.us.unblu.app
carta.us.unblu.app
eu.unblu.app
carta.us.unblu.app
turn-admin.unblu.app
optimatax.us.unblu.app
bugbounty.eu.unblu.app
mirabaud.unblu.app
carta.us.unblu.app
us.sfu.unblu.app
carta.us.unblu.app
*.turn.unblu.app
carta.us.unblu.app
carta.us.unblu.app
euipo.eu.unblu.app
us.unblu.app
stridecu.ca.unblu.app
cbk.unblu.app
euipo.eu.unblu.app
optimatax.us.unblu.app
alternasavings.unblu.app
synergycu.celero.unblu.app
bms.stridecu.cb.unblu.app
nl.sfu.unblu.app
mcmcg.us.unblu.app
abnamro.unblu.app
carta.us.unblu.app
mcmcg.us.unblu.app
carta.us.unblu.app
secmsg.rco-eu.unblu.app
cffcu.us.unblu.app
carta.us.unblu.app
carta.us.unblu.app

Certificate

The complete raw certificate details for secmsg.rco-eu.unblu.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA493FISD8+MyCwL5DV9MC
GvkUBzS9DvoZNb621cLr6T06IIwYI6th8XWwdwvao8kD6qMnEOR/ASTZ8Mrp1Sr8
1AFT9WPY/fk9cnZ/oBOkDMCehx8oi2L8X3m06SqKQBc2feijv3ygRNRR70YL5Vvn
1yjBqCKzxvC3k2qfhqUUkxMZZponSSxVljpSAuIZqpyRwNk9OPyVW776lxJ0AWao
zCziewsiQwpqpkX7NwQg4xcZDAzI6PiTrWT6RZ/f8+FLtC5LCj/33QiDoUC+1HMR
vuvoypvM4dlAmQUjCbuxMkw1/Cq3nE7hZ30WGVpQgNzGH6cNcbyYnfuQgFLo+pR3
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21341183124419765382460262918083597842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 19:14:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 20:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secmsg.rco-eu.unblu.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28765454108281144075643040878294552587048953596135567413782874748669093449819906846124675783881200937609020840050349653799027399139509848039536917664085961991615659718076894185837239205729177497450071329840528433118596767765048220860590047875253620867850470909799842120394342954751187530895387984961522036401350088475477595867483234169283969910430234774229397023539975453677812603195609427292468340354292018038170651366600981235980201664965467508328466122889368723626273318280809126136667480921348168076472819010626408247540700713055036762676185528761921944450113447983670439004517405529306003149402113610178987587349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9575d3d2eaa82e0ed7be621227feff956c88ae07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/-dYZIKBNls0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmsg.rco-eu.unblu.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S4ncRdVfvuE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f30a4d8a8000004030047304502203d3d4b9feda789ac359d3e6926ef6f9911c24d8836c15a2baada884314bf10a5022100e81aaf1e5fb92352971746b83bb7ecc7a5b06db4db2383f90711f8f439e4ba66007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f30a4d8890000040300463044022014edfada30afced3546fb48eb699fb5e51ec283be42b71f4f8f59d30d9e8b2aa02200e99a1b62177c5c1098759d0c426b258b8662fbd9b6607169374d09b1dbf57ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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