*.ratesupermarket.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 67:31:06:34:9d:42:9d:d7:13:59:da:f6:e7:23:ef:f3 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ratesupermarket.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:31:06:34:9d:42:9d:d7:13:59:da:f6:e7:23:ef:f3
Serial Number (int): 137165031974906295139686134087596371955
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 47:30:4f:3d:34:2a:f7:26:05:ff:df:2d:7a:2f:28:b1:1b:ac:8f:82
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 0f:96:01:47:32:52:32:bf:34:2c:f4:48:9e:89:c9:12:1a:4d:71:ca
Fingerprint (sha256): ed:6c:a4:30:68:a4:89:66:4e:b5:ab:b1:65:89:fb:8b:89:e6:5f:fc:f1:2d:c8:68:0b:65:3c:ae:e0:38:2b:ba

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/x3dVzFI34WQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/MlMYqnZ9WUE.crl

Check the revocation status for certificate *.ratesupermarket.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ratesupermarket.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ratesupermarket.ca
ratesupermarket.ca

Other certificates including the domain name ratesupermarket.ca

(limited to 100 certificates)
www.ratesupermarket.ca
ratesupermarket.ca
ssl384548.cloudflaressl.com
ssl384548.cloudflaressl.com
ssl384549.cloudflaressl.com
www.ratesupermarket.ca
ssl384550.cloudflaressl.com
info.kanetix.ca
ssl384550.cloudflaressl.com
ssl384550.cloudflaressl.com
ssl384550.cloudflaressl.com
ratesupermarket.ca
ratesupermarket.ca
info.kanetix.ca
www.ratesupermarket.ca
www.ratesupermarket.ca
info.kanetix.ca
sni.cloudflaressl.com
ssl384550.cloudflaressl.com
ratesupermarket.ca
sni.cloudflaressl.com
ssl384548.cloudflaressl.com
ssl384549.cloudflaressl.com
affiliates.ratesupermarket.ca
ssl384549.cloudflaressl.com
info.kanetix.ca
ssl384548.cloudflaressl.com
ssl384550.cloudflaressl.com
ssl384549.cloudflaressl.com
ssl384549.cloudflaressl.com
ssl384549.cloudflaressl.com
ssl384548.cloudflaressl.com
ssl384550.cloudflaressl.com
www.ratesupermarket.ca
ssl384548.cloudflaressl.com
ssl384548.cloudflaressl.com
ratesupermarket.ca
api.ratesupermarket.ca
ratesupermarket.ca
info.kanetix.ca
info.kanetix.ca
ssl384549.cloudflaressl.com
www.ratesupermarket.ca
www.ratesupermarket.ca
www.ratesupermarket.ca
ssl384550.cloudflaressl.com
ssl384550.cloudflaressl.com
www.ratesupermarket.ca
sni.cloudflaressl.com
ssl384550.cloudflaressl.com
ssl384550.cloudflaressl.com
info.kanetix.ca
*.ratesupermarket.ca
ratesupermarket.ca
www.ratesupermarket.ca
www.ratesupermarket.ca

Certificate

The complete raw certificate details for *.ratesupermarket.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1c7aVURL717fJw8UwSD
WR60hfc6hJo7eRxE1vCSMJuLjikYyGbne2H27v2mJ1LCdvN6BwXQnSHuRyZRFGB+
GGQs7KVBPpdDew/fcpIB9zA639ptQ2tnR0Rx5aNZKnfCNknjojiIn+JSjdgi2JG8
SK0Ixi9Jb6BDL7anflfQm9vSXJYMeyWYoFlvXdzZnEQMwmZOwYYxZ/sZEEaAhbGd
EEjHwtcLZuACKjwlb8gDDrR2MLeJQQEzXzhneLxgegowmrFEfSprJ6naSO45m5C2
o6LlDvKaW0Pi6widu7RvT4IgvhcxN5FHDrMhLQ9q8DFXIdbr7kG+tPSO5Un6b1ww
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137165031974906295139686134087596371955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 14:49:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 14:49:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ratesupermarket.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20114906229494172622738228542607397191931754959122437446507491922411841142846500376816307051508583494707371401053004862030418131814640128002251323419207231610992468040030881842233089182771823140597069863441409633725497836771326866384361925964609164598263291316215810181738481731972740173759792923126380379879771107942519340898865219302414019186218163707683513228622796467593499063799932264939164450855434623336524283300258263325351797328547854531917754410350832625173497068672664601366895081267270740776711486371909750140514257423249380497182131890690134557266366688238940767960253653315578679300198667408838680654033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47304f3d342af72605ffdf2d7a2f28b11bac8f82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/x3dVzFI34WQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratesupermarket.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratesupermarket.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/MlMYqnZ9WUE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018631b7e7d10000040300483046022100c9433dc44ce992a5554b15044f05759280ac7501a4953f09aa88af2a55d783e5022100c3145b182cb963a60789dd5dfca39703ad9891c19d5f0b6500b25df0596237a4007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018631b7e78d0000040300483046022100cb48f78633aa32d016ecd9fb8424413b4e412ae720ba2074cbc6a2900a6526fa022100b5d672cb1a71f9a9e77d060d378ba923a9ee74e54f370db547cdf5f099b3b013
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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