blog.goodfaith.church

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 55:16:4d:ee:30:80:e4:20:0a:00:00:00:00:07:e9:6a was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.goodfaith.church

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:16:4d:ee:30:80:e4:20:0a:00:00:00:00:07:e9:6a
Serial Number (int): 113100190789458875245095978656227387754
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:07:96:c0:97:6a:9e:18:9a:5e:29:0f:c5:03:c1:73:20:a9:0d:5f
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): a6:ab:59:43:ee:8d:33:5c:ea:f5:5b:a0:63:df:29:1f:d3:a9:2d:6a
Fingerprint (sha256): f1:ed:4b:63:14:eb:40:94:39:4d:ec:e7:6e:3b:26:c1:bf:fe:df:88:73:42:02:ab:10:ac:93:a7:46:3f:e4:93

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate blog.goodfaith.church

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.goodfaith.church

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.goodfaith.church

Other certificates including the domain name goodfaith.church

(limited to 100 certificates)

Certificate

The complete raw certificate details for blog.goodfaith.church in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUphGGMDHv8FDi4eClD
5CgaCYxb3kg7NTdzAMOYkZxVhFpL/rzEIad8yWGXbLTb0slmUgWhKAfJnSQGta1I
ZVDz5pxu69RjkExXIN509bho0NsqID/JeKFH+18WhXxhAW2QnS51+b+EH9zKiB63
bsSmJ+3c8aMuzJXtmhysNr8gNji9o0CYMaTZv07oKi+sgiA2hjkdEIGr1XLIj9iL
bzd3GbvATElzWrXS11QS1IjG9sWmw4myh4Gk/xNWfurQCfzj2kksDDegJt55YfO0
CnCVjX2533S8Q7kV6bSm7DtFqZgMTGK8cK/+2dN5Wg7Auk61A1TsRbpaZQZktLej
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113100190789458875245095978656227387754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 10:05:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 10:05:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.goodfaith.church'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433514377627268658636019265180610345904346623507492116660960711423096413738581320569397551531974775571539864032121238157170017939648343885737218295863543383253358427299931623232233560729926472452672896239855047821386850068009084927661254383844093996508918300023024638157628019215232641639269340962829875299618815036441589415701522647643601369355108666155258638295870955233669005627706965449155370570113792365940858260459682634002326072848752442965382498599144842319925744071931942992711278419926119742240395236456279529816869133668176756854972177346436921458646615146054551886874580980176370930130619717737701155653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							440796c0976a9e189a5e290fc503c17320a90d5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.goodfaith.church'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f41e27680000004030046304402200f2733fe292d4acd01d98650bc550c29b709b5f98dbd66966fb5f259f38aafcc02206a2f2aa35a3e047552a00d906a519192a70ff4e62d8b0c30fe411029823331380075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f41e2769800000403004630440220305c82febeda050a0819e90e5af9166be8261be6c4000bcd8777b7d3920582a2022052ea21bf01d3f0c29b273490713234d99737bd62449e211b6007f23c7a335c0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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