cdn.oknube.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 4a:83:cd:d9:f4:52:06:cd:0a:00:00:00:00:13:ca:fa was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.oknube.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:83:cd:d9:f4:52:06:cd:0a:00:00:00:00:13:ca:fa
Serial Number (int): 99047237738645357632135989095306611450
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 84:4b:fb:ed:62:e1:e2:89:79:f2:38:21:fa:c2:17:9f:17:cc:d1:c6
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 8b:d1:81:9a:eb:9d:2b:9f:b7:30:be:5f:30:aa:62:c7:38:5f:d5:26
Fingerprint (sha256): ed:c2:89:2e:01:2a:21:9b:ff:e7:be:5b:a8:c4:2a:31:fc:3d:b4:0a:34:06:80:d2:2f:e0:e0:60:ac:f8:7d:14

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate cdn.oknube.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.oknube.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.oknube.com

Other certificates including the domain name oknube.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cdn.oknube.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+IQSQ1awavqvNpsQ3Bl
aqvvR/GKcQOuiO07FrQIw5NGrSEaKi/s5LXQBhS+PJJk1E746Ra4DIVaqLTF8dCa
pZlI4EBVGund3Zzrpep+STDE24cmI4nHyhQJgfgbW3AdPqsIuMPHzkRwtZmzgoy/
Gk0qx1+8HWZUyo1b8F9gpcu4NwJ/95ZYkj5NgJQ0r6MUqrEc9i7UD2KMFobY1HL8
8ZCUkWJRACwxiXPAo2JBtIHPPMyNhMWl0iP4PYsZfW2hT3SpZknWE4Y+Wb+4UUDr
e+UskhNgIOZoeO7jfIVgg+UiZQ4aQvhqItyGLg7o3+Cxh3wDwxAVqExAdGCg0Tod
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99047237738645357632135989095306611450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 16:49:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 16:49:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.oknube.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28767571350469767859778987820556655539589107683534859898365853762716944530935091045290937528056575726989463891926028006910723823971779465075476558103134303334802574598513980340822067473500113850011957679817981676122455181183484425342833069163842923296887793940514596449050794116139836468946223294754150724173149285112463280155419102921555658257286591078651753488747251699009357314466961401894206865105949679962061921335257323204479349855662059952284678434008757057620345578185922898225541345033612912673146466068366668542656217732293697097743814591449172771592140819137604669251582713974841214124640314226070573948189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							844bfbed62e1e28979f23821fac2179f17ccd1c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oknube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702b120206000004030046304402203f306448b4a246c460b455b611b8a76c99a235d5fd6844fff9870005dc872e07022044de597cfb026d5b26796aa5d9809a02a9e690cdb5e93aab450bd991219034570075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702b12022b0000040300463044022020f14abc925619138451388d06b8b70b3839365fbb5371f8a71bdab116557193022010a02a8902c830619ebee25b024ed5067aedfd0963bf3c99efddc73d2d8def65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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