uriach-pro.i2-sys.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 4c:c2:d2:cb:da:65:44:c9:09:4c:8c:8d:fa:2f:fb:50 was issued on by Google Trust Services LLC.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uriach-pro.i2-sys.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:c2:d2:cb:da:65:44:c9:09:4c:8c:8d:fa:2f:fb:50
Serial Number (int): 102032908727133278625294574747495955280
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bd:01:4d:58:52:b7:b6:e3:b0:09:4c:47:21:cf:13:86:b5:42:09:a8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): e6:ac:06:9b:5a:a7:89:5d:4c:8f:43:d0:d7:ed:ed:f4:5c:10:7f:c9
Fingerprint (sha256): e9:44:a9:29:ec:c2:95:a4:99:2e:9b:03:37:de:3b:33:23:4b:c5:12:9c:72:bb:23:f2:02:b5:d4:88:15:36:d6

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/6-GSlG792JA
CRL Distribution Point: http://crls.pki.goog/gts1d4/dRsonNL9RPg.crl

Check the revocation status for certificate uriach-pro.i2-sys.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uriach-pro.i2-sys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uriach-pro.i2-sys.com
uriach.cat
uriach.es
uriach.it
uriach.pt

Other certificates including the domain name i2-sys.com

(limited to 100 certificates)
hora.i2-sys.com
o.i2-sys.com
hora.i2-sys.com
ing-amp-landing.i2-sys.com
nilo.i2-sys.com
www.seestadt.city
nilo.i2-sys.com
*.valmonte.i2-sys.com
arbot2.cryptovation.co
pre-fundacionlealtad.i2-sys.com
o.i2-sys.com
encarnacion.ca
backpackerbuddy.in
bo.i2-sys.com
cbp.i2-sys.com
taller.i2-sys.com
uriach-pre.i2-sys.com
arbot2.cryptovation.co
o.i2-sys.com
o.i2-sys.com
pre.makingscience.fr
valmonte.i2-sys.com
hamropatro.app
nilo.i2-sys.com
stg.blog-gen.com
hora.i2-sys.com
*.valmonte.i2-sys.com
leads.i2-sys.com
www.delivertu.com
valmonte.i2-sys.com
admin1204.estore.business
valmonte.i2-sys.com
aquilea.i2-sys.com
hora.i2-sys.com
doc.i2-sys.com
taller.i2-sys.com
nilo.i2-sys.com
nilo.i2-sys.com
cbp.i2-sys.com
leads.i2-sys.com
hora.i2-sys.com
namastic.com.co
jovempentecostal.com
nilo.i2-sys.com
arbot2.cryptovation.co
taller.i2-sys.com
www.casakini.es
arbot2.cryptovation.co
pro-corp-web.nilo.i2-sys.com
tiendahospitales.i2-sys.com
*.valmonte.i2-sys.com
valmonte.i2-sys.com
hora.i2-sys.com
bo.i2-sys.com
doc.i2-sys.com
cbp.i2-sys.com
hora.i2-sys.com
pre.makingscience.fr
uriach-pro.i2-sys.com
nilo.i2-sys.com
hora.i2-sys.com
www.seestadt.city
pre-habitat.i2-sys.com
vacrispre.i2-sys.com
kormanik.me
docs.sys.euro.i2-sys.com

Certificate

The complete raw certificate details for uriach-pro.i2-sys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdfnvd8mJeHO0p2qwsYp
UtrvBD6OoxHxBA2AEUbS9APmy4V8JlJi8g2SOca9Pw+DTkOLnhinaT/aVnMKM3xN
S8uEaR9oU06v8ZEsws0rTNQQvWH79nWcOfGaFVWVjiQxCpjdjttKOiAKIZilVTIS
d2YzMvNXnbaZyhtCz+bwV37IyIYIqLdZhMzMcJ7i2FFLb+RG+GUWyn4M7JqNKsYS
sRhWg/arUBoGx0lbbvdstS5UwFTFiTRsorMEIzsYEIr+UjI+cOeQaldWzN86Wv8w
vtUF+ozDUSSJH2LMkybb7YyDqmEjOX57jHJ/FmE1/PShiXJXV2KuR4yYWtm4PvgX
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102032908727133278625294574747495955280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 07:26:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 08:18:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uriach-pro.i2-sys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22955600041248456216576976046197669601678958071292295026277822126676046313718031795613781185926201378768581079742043816613799800525489298921662974021266766750049201826674470944147205838919559584259084842866666502099845500831393717219322702325637706372052051879893533707172211010720134029192106070501354911417714878461623162210343370402809643217776660804154029344531605181131952852562480634932786169318314318099728650872380160723549720975794359434196788587633372489002576845257521207466254685751892209566346791582682687146871869707227508028476534168695041917958284301888487942748804981264930114916699908103099253266379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd014d5852b7b6e3b0094c4721cf1386b54209a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/6-GSlG792JA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriach-pro.i2-sys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriach.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriach.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriach.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uriach.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/dRsonNL9RPg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef050a1cc000004030046304402206020828257e0504a38f59ad5384bd32983f8da970d65d88ecc77c643106a461602203e54f8867a936a0b81f63d0921bcba278901b02866438feb14ae81b060d2e0bf007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ef050a1c6000004030047304502207fb8c184149c970c2ca28c291cb1cfce9cd589ba0bc7d5c1795c38f5e1ec146b022100c086089db3005481d7168728e9bbc5477fb586fa48e555e3619a69b3185236ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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