baetscher.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 15:86:5f:75:6f:8a:71:ed:11:36:02:0d:06:ee:da:24 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=baetscher.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:86:5f:75:6f:8a:71:ed:11:36:02:0d:06:ee:da:24
Serial Number (int): 28611491823654467164628020403511417380
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 38:de:98:21:c1:46:93:35:54:60:83:a4:a3:2a:fe:ab:a1:17:5c:94
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 22:0c:67:eb:7b:b2:81:29:8c:b8:6e:b8:d2:68:e3:96:14:0f:97:ca
Fingerprint (sha256): f9:bc:56:4d:b6:87:57:53:15:1c:3d:a6:24:ce:49:54:49:ed:e0:ad:17:1b:2b:bb:55:f2:75:78:15:a8:1e:e5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Hy9Ibp7dIks
CRL Distribution Point: http://crls.pki.goog/gts1p5/le_7YNi7t64.crl

Check the revocation status for certificate baetscher.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baetscher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baetscher.com
*.baetscher.com

Other certificates including the domain name baetscher.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for baetscher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GIeX6cwZHWHgcvIraA/
Sx9q1d9DGLJQO0aRMUmIz3kKSEQSvt3BOHGt7ZCV207o3ZVOBVlZWGDrFc4h9m4G
3/22FLgln/JH90KSezbKLmUm2Cne2tJHCqO7BnxW4VGCej94OXxwHJDYbIqnbYiV
q7MSfx9ekood7bv2RcrmKMDvheoI4mjcqc76pIkpaHSnt21Bhm6G+httQdLPweQg
UMkeJfMIP3qAnNYr2+gwFzHTIFOai7oQLYs2h+FhQwqxVVzL+f1qe70aXHHLEFM7
gvhvC4pnQJURJ9XwLCD0BbisrlDBGG5ZcMymxqyX20Y5ct67TGRATYfNg7rWWxcg
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28611491823654467164628020403511417380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 06:21:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 06:21:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baetscher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27315857980829524528075859709012131397016300913601140391567995439824488706434697854171296425528071674588257545367787595295003801286017207136476767047297358709879997005265274148572993719661640455546081453054328639127899528223107235829575374290002558521052026816189200984452074617966204106021553650131513772087183632329248144055258147709988030752995597487129440433378941252452754110034586530256105463394788764714623375760418386815145807193637833550984124796089767893927221451955184350504819366769913247666279921546344120128493032702753464870286226856964654179416967298680133050285995313843248009464034264339845865742551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38de9821c1469335546083a4a32afeaba1175c94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Hy9Ibp7dIks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baetscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baetscher.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/le_7YNi7t64.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a3b054d040000040300473045022100b58e693c0c1b8289cd2a50b3822deb9959bd6d11f8fac0093ad3c671d02b28bd02203f0a68c1d3d1457d4659a9c111d6b2418bfdc27e58a0a13ecd6fbfb3276973d80075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a3b054d000000040300463044022062616df188dde514a57cf64843b1756e502906e1a0cee4b79b95fb2e3350eeba022062be3ef7ab4b40ea39bb92a4caaf3ee247d9d5a93c61a1565478bdeeae9cff9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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