ast.defiva.com
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number a0:f1:e0:2a:3f:dc:07:41:0a:00:00:00:00:11:34:02 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ast.defiva.com
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): a0:f1:e0:2a:3f:dc:07:41:0a:00:00:00:00:11:34:02Serial Number (int): 213932369475591030251746400940445479938
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: f2:5c:61:f1:49:88:f8:27:a7:73:6f:a9:3b:a2:07:42:df:54:4a:bf
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): c6:a7:7b:23:6a:ab:59:9e:35:b2:52:6b:b3:8f:04:ca:8d:dc:a9:33
Fingerprint (sha256): fb:be:c3:7b:0e:04:78:2d:5a:bd:f1:a5:66:6d:be:3b:56:51:46:c0:34:18:fe:33:6e:2e:7a:9f:8e:16:8f:49
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate ast.defiva.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ast.defiva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ast.defiva.com
Other certificates including the domain name defiva.com
(limited to 100 certificates)
www.tasksboard.com
www.flukkord.com
crm1.edemdance.kz
auth.snowflake.cyberhaven.io
www.beats-radio.com
writenext.com
healthlinechiropractic.com.au
paylessiraq.com
www.defiva.com
myfuel.network
ambush.dreamwave.live
northlanenft.com
www.nucleodatascience.com.br
order.sushiya.in
stg03.wowdesk.jp
school.handtoy.com
mutungurugirls.com
www.badmintonpal.com
data.letsrebelle.com
www.nextapep.net
www.ente.com.mx
redirect.beebs.app
tradenowwithus.in
www.ai.vu
www.musiplan.com
transpotify.compubility.com
www.alwatyan.digital
ast.defiva.com
www.flukkord.com
crm1.edemdance.kz
auth.snowflake.cyberhaven.io
www.beats-radio.com
writenext.com
healthlinechiropractic.com.au
paylessiraq.com
www.defiva.com
myfuel.network
ambush.dreamwave.live
northlanenft.com
www.nucleodatascience.com.br
order.sushiya.in
stg03.wowdesk.jp
school.handtoy.com
mutungurugirls.com
www.badmintonpal.com
data.letsrebelle.com
www.nextapep.net
www.ente.com.mx
redirect.beebs.app
tradenowwithus.in
www.ai.vu
www.musiplan.com
transpotify.compubility.com
www.alwatyan.digital
ast.defiva.com
Certificate
The complete raw certificate details for ast.defiva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIRAKDx4Co/3AdBCgAAAAARNAIwDQYJKoZIhvcNAQELBQAw QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET MBEGA1UEAxMKR1RTIENBIDFEMjAeFw0yMDAxMzAwOTU4MjFaFw0yMDA0MjkwOTU4 MjFaMBkxFzAVBgNVBAMTDmFzdC5kZWZpdmEuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAvTBnO/D8TTbmD5GhM5nn1MJFqCd7XS61nvGp2BSRdwCj 36FrWh5SZeDpVtLSzPifPtc9FK9nvJu2emssQOngFhthPipXw0gwTyrMf5H8mQmk GUzs5GDDKCDkOk2VCD3YZC67kIJx8KCmR4HkATk51L/Nq2G6nKqSttU7y/pCXNxr HZ0CIDnBUQ+QQe1prxQGGyudPcitz+t4Z6athYxgQ5iwNI45G/ZTf/qCG622NpdW Gb00+Q0ceHehw/Ta/RACf/4BAuhxXP1doxMGzpGsYs8OFKFk0IJ1NaXZ9CE1zbR9 AC081mFS1/d0j7xdTAw52sdgFWbjNd+ODVfi16FG/wIDAQABo4ICVjCCAlIwDgYD VR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFPJcYfFJiPgnp3NvqTuiB0LfVEq/MB8GA1UdIwQYMBaAFLHdMl3o tzdy0s5czib+R3niAQjpMGQGCCsGAQUFBwEBBFgwVjAnBggrBgEFBQcwAYYbaHR0 cDovL29jc3AucGtpLmdvb2cvZ3RzMWQyMCsGCCsGAQUFBzAChh9odHRwOi8vcGtp Lmdvb2cvZ3NyMi9HVFMxRDIuY3J0MBkGA1UdEQQSMBCCDmFzdC5kZWZpdmEuY29t MCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwLwYDVR0fBCgwJjAk oCKgIIYeaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxRDIuY3JsMIIBBgYKKwYBBAHW eQIEAgSB9wSB9ADyAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFv9hoSqwAABAMASDBGAiEAje/YKWA46BRoVZFmzt64HyhPVUhbRwwP/gJ2LQX3 S9cCIQCEt5azxtSV58HP9698HDAZBv1yfPCNNkklaytp6NYYCwB3AF6nc/nfVsDn tTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABb/YaEtcAAAQDAEgwRgIhAMXv9WDK gR+4oaCnzFUy38oyG3LdFwmRLyY4rVOVGrG/AiEAkGsdpYy/Xxz0uvVy3AFb7Xt0 WYJ4v6oOYihpSFlL8JQwDQYJKoZIhvcNAQELBQADggEBADlDSnBKqSgiMlqhgCwR kWHC0eIMEuRbsR414YXlrFE5ddpG9yVu3tvFJ1j/qaJ2qeZOiBFlDjEVf2Q+MdnI ZE7dFpKjDlDp30wCSqmUVLppQP3XSTLvC2KPXDSKDMKNnYm3c0BOUdiIVOp+zgsJ v5iRKQ41TEJgfetYV1BWuzh607at5Akq5GZad6AElb6w8lC45FJGzvBiiwq1vqBe Xg2qCaxYcOhVUJjH883gRkpjgj5e/FYgGX35pDIYEjocAFw8QIjJW/ikjulF7swM L/2Ruybak7AG9CoHVLZCA+wk6cyq15MQipYe0reQASQi0It6cBmCTlSn0oikgFUi Yjg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTBnO/D8TTbmD5GhM5nn 1MJFqCd7XS61nvGp2BSRdwCj36FrWh5SZeDpVtLSzPifPtc9FK9nvJu2emssQOng FhthPipXw0gwTyrMf5H8mQmkGUzs5GDDKCDkOk2VCD3YZC67kIJx8KCmR4HkATk5 1L/Nq2G6nKqSttU7y/pCXNxrHZ0CIDnBUQ+QQe1prxQGGyudPcitz+t4Z6athYxg Q5iwNI45G/ZTf/qCG622NpdWGb00+Q0ceHehw/Ta/RACf/4BAuhxXP1doxMGzpGs Ys8OFKFk0IJ1NaXZ9CE1zbR9AC081mFS1/d0j7xdTAw52sdgFWbjNd+ODVfi16FG /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 213932369475591030251746400940445479938 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 09:58:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 09:58:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ast.defiva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23882908174885977981278234129541428704235861944283944769165082340922598130210904636863491145358905171673050562526007707762201316133660576434393829484541618361129002807785700810117309450676414625478099477763003817799173125448227994727932710296945092708968353227332038057046160766720115610492050508600254992343331376553408821589920466814367381179916280949489329058781971288054325190522688989888989170943318584431807163025912994858111265329009706709937117848248429404931231929809357669444337392468232934328786862189119046409464902201712902353171502996636627455881201493392835039596797124696492426423722547282188060149503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f25c61f14988f827a7736fa93ba20742df544abf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ast.defiva.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff61a12ab00000403004830460221008defd8296038e81468559166cedeb81f284f55485b470c0ffe02762d05f74bd702210084b796b3c6d495e7c1cff7af7c1c301906fd727cf08d3649256b2b69e8d6180b0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff61a12d70000040300483046022100c5eff560ca811fb8a1a0a7cc5532dfca321b72dd1709912f2638ad53951ab1bf022100906b1da58cbf5f1cf4baf572dc015bed7b74598278bfaa0e62286948594bf094 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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