portal.jucy.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number fa:93:66:4d:46:19:5a:05:0a:86:5f:c4:74:16:ef:ba was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal.jucy.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:93:66:4d:46:19:5a:05:0a:86:5f:c4:74:16:ef:ba
Serial Number (int): 333072341512476272895043083414340562874
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:4a:fd:18:01:40:8e:ad:ef:f8:6a:a9:31:20:af:46:93:d5:91:35
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 19:39:af:56:7b:c9:2d:fa:73:7e:a1:72:ca:2d:ba:e6:c1:f5:dd:a0
Fingerprint (sha256): f2:84:ac:ad:15:6d:b6:8a:27:4b:2c:ad:9e:63:e8:0f:2b:6c:1c:75:49:b2:d3:7b:3c:fb:81:fa:fe:d2:da:6c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/xgo4Z79rRC0
CRL Distribution Point: http://crls.pki.goog/gts1d4/oZuavMRg6V0.crl

Check the revocation status for certificate portal.jucy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.jucy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.jucy.com

Other certificates including the domain name jucy.com

(limited to 100 certificates)
ipubg.ml
www.lovepetdn.com
www.preguntaz.com
www.ourcardgame.ca
sni.cloudflaressl.com
sassouni.com
redheadgreenthumb.com
loadbalancer.nix.jucy.co.nz
tools.4b677a73.dev
www.categat.com
bookings.test.jucy.com
loadbalancer.nix.jucy.co.nz
regional-platform-prod.china.thoughtworks.net
admin.liveservice.abus-kransysteme.de
www.tipplemusic.com
www.denislenz.com
careers.jucy.com
bookings.test.jucy.com
www.admin.k-9access.com
app.test.bitstack.fr
bookings.jucy.com
deals.test.jucy.com
login.jucy.com
portal.jucy.com
pharmresfoundation.in
d2a.me
baratodavez.com.br
my.precise.credit
www.lorenaguartazaca.com
landing.turitiando.com
www.semsabaharat.com
www.c21caribbean.com
share.mona.app
gericard-pros.es
dev.klarcommunity.com
logs.uat.cloud.jucy.com
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
sni.cloudflaressl.com
admin.liveservice.abus-kransysteme.de
lembacommunities.msbe.co.za
www.underthechurchtower.org
careers.jucy.com
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
results-uat.microba.com
www.littlecatgames.com
ipubg.ml
safeguard-advisors.solerabank.com
www.cobwebcyber.com
www.foosboard.app
careers.jucy.com
spotimixify.bradyisom.com
ns1.rusticcitrus.com
careers.jucy.com
www.visualcomputing.nkportfolio.com
loadbalancer.nix.jucy.co.nz
careers.jucy.com
payment.getweb.dev
bookings.jucy.com
www.bagnoler.com
loadbalancer.nix.jucy.co.nz
bookings.test.jucy.com
app.compassionuk.org
jucy.com
www.tipplemusic.com
sajvantransportes.com.br
ccsconsulting.rocks
loadbalancer.nix.jucy.co.nz
wktk.jp
www.categat.com
www.iwdd.net
jucy.com
www.gismatrix.si
loadbalancer.nix.jucy.co.nz
demo.paymytable.com
aisoftwarehouse.com
app.test.bitstack.fr
careers.jucy.com
wktk.jp
careers.jucy.com
careers.jucy.com
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
www.epscomercial.com.br
portal.jucy.com
bookings.test.jucy.com
bookings.jucy.com
portal.jucy.com
loadbalancer.nix.jucy.co.nz
www.andreloco.it
sajvantransportes.com.br
login.jucy.com
app.compassionuk.org
www.visualcomputing.nkportfolio.com
www.theedugoogle.com
lowes-kitchen-estimator-cert.3dcloud.io
www.skannieraitt.com
guzzlesoda-orders.crispnow.com

Certificate

The complete raw certificate details for portal.jucy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBHxx17g3uD4wSy3AT2P
5z1bkn5gcdcVUvzW66MnwddAZ6XL8un5izBDOZ5Bt7L/ZeIMFfHMvxsG9pV5FEsF
l3WHO0njLJUq2ClK+fYDYcik4VVVW5Fju2kqXRrty4qnE0AAo6nAJBbNUOfBdfcq
PNTXsXVxNmtqOBZYqenPg9ScWNPC21yZA0VdhDot0tyBLMETuDyuJHh6CLPu2q/Y
wOFYmuDIXH+BAh2Nx2L1j6AqU6xiQZjXqa/FmN1vYNU5a9UnSCRXIcU3XG5IZjWn
Q5RsWfu3kqz2FqEtGOp9BXK22kmAoJH0eqrNkXS28zaNXf5u62djeiv6M+4R+i7B
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333072341512476272895043083414340562874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 23:26:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 00:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.jucy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17682211432553282221527792955059309046314988425297696204750116975500466494879566691125222509313732378665932122325589572603318480706025598054166636981641356826217697639970018676706026273028211874028233821786454332653403680299715718223815667013321713439880058498394091789416226778269458135310332562924669393392480674798957147893728774273428634873979488599236713986614051798022082459141772181200411585661730515701435893911096021029113125173981858836708584744403354214930010821304989196417060920217505784852740882650788744634981308757352566472266119881905481615848364490517996519311367112853296299248749737745308445491711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e74afd1801408eadeff86aa93120af4693d59135
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/xgo4Z79rRC0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.jucy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/oZuavMRg6V0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b7df9fb110000040300473045022100ab4d2b3d9e14f26a4a863d869ec662b6d244b33e79c2b6ff7654000ff445e50a02205677aba5db14e95b6c1754879fc5182f4765a4627a19ab2a14f89c0b4f9909390076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018b7df9fb41000004030047304502202cd32212d4a37cc7a25c796b0450b5082544d40b14ff4356abc20b58ad6a19c4022100c664ecb2ce89d639f69c20f72f5ec3a2f30e5ca0faa4018344749d942a18ce56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00391a35c41ce11341f268326a76ce433ed6d8a76f85575102e6650ee15b23553af4874f50db94fa804b275a04428bc5b7f17cd8cb8cb2873e804e238a1070007315fb9cc3022a99a87802e669bf0579109c07cf39563c05fb1cccf8e695b00e572ae26347312da28ae2a6c486637bf1cf844819a1143d1e2fe93a8196b9caf92037ba64aee2fda844cd9102d344af4dbf6de8533e7dece5c67c8d421d756bca27e284cc74f1712dd0a5d1ee7cf054d69021bc1e573ef995ec39a347bf26aa5efc0ecdd8a34e1697d31525f064b7fac4efcec39dfe28d6364d7f5c948bbda6deb7bc1d46c8b55578aeaf7c47d6242c22b30b0a411a49f71635bd79a80323465cc0