| Certificate Information | ||
|---|---|---|
| signatureAlgorithm <1> | OK | SHA256 with RSA |
| keySize <1> | INFO | RSA 2048 bits |
| serialNumber <1> | INFO | 53845D46A760322009B920BC6FBA1720 |
| commonName <1> | OK | *.google.com |
| commonName wo SNI <1> | INFO | *.google.com |
| subjectAltName <1> | INFO | *.google.com *.appengine.google.com *.bdn.dev *.origin-test.bdn.dev *.cloud.google.com *.crowdsource.google.com *.datacompute.google.com *.google.ca *.google.cl *.google.co.in *.google.co.jp *.google.co.uk *.google.com.ar *.google.com.au *.google.com.br *.google.com.co *.google.com.mx *.google.com.tr *.google.com.vn *.google.de *.google.es *.google.fr *.google.hu *.google.it *.google.nl *.google.pl *.google.pt *.googleapis.cn *.googlevideo.com *.gstatic.cn *.gstatic-cn.com googlecnapps.cn *.googlecnapps.cn googleapps-cn.com *.googleapps-cn.com gkecnapps.cn *.gkecnapps.cn googledownloads.cn *.googledownloads.cn recaptcha.net.cn *.recaptcha.net.cn recaptcha-cn.net *.recaptcha-cn.net widevine.cn *.widevine.cn ampproject.org.cn *.ampproject.org.cn ampproject.net.cn *.ampproject.net.cn google-analytics-cn.com *.google-analytics-cn.com googleadservices-cn.com *.googleadservices-cn.com googlevads-cn.com *.googlevads-cn.com googleapis-cn.com *.googleapis-cn.com googleoptimize-cn.com *.googleoptimize-cn.com doubleclick-cn.net *.doubleclick-cn.net *.fls.doubleclick-cn.net *.g.doubleclick-cn.net doubleclick.cn *.doubleclick.cn *.fls.doubleclick.cn *.g.doubleclick.cn dartsearch-cn.net *.dartsearch-cn.net googletraveladservices-cn.com *.googletraveladservices-cn.com googletagservices-cn.com *.googletagservices-cn.com googletagmanager-cn.com *.googletagmanager-cn.com googlesyndication-cn.com *.googlesyndication-cn.com *.safeframe.googlesyndication-cn.com app-measurement-cn.com *.app-measurement-cn.com gvt1-cn.com *.gvt1-cn.com gvt2-cn.com *.gvt2-cn.com 2mdn-cn.net *.2mdn-cn.net googleflights-cn.net *.googleflights-cn.net admob-cn.com *.admob-cn.com googlesandbox-cn.com *.googlesandbox-cn.com *.safenup.googlesandbox-cn.com *.gstatic.com *.metric.gstatic.com *.gvt1.com *.gcpcdn.gvt1.com *.gvt2.com *.gcp.gvt2.com *.url.google.com *.youtube-nocookie.com *.ytimg.com android.com *.android.com *.flash.android.com g.cn *.g.cn g.co *.g.co goo.gl www.goo.gl google-analytics.com *.google-analytics.com google.com googlecommerce.com *.googlecommerce.com ggpht.cn *.ggpht.cn urchin.com *.urchin.com youtu.be youtube.com *.youtube.com youtubeeducation.com *.youtubeeducation.com youtubekids.com *.youtubekids.com yt.be *.yt.be android.clients.google.com developer.android.google.cn developers.android.google.cn source.android.google.cn developer.chrome.google.cn web.developers.google.cn codelabs.developers.google.cn |
| caIssuers <1> | INFO | GTS CA 1C3 (Google Trust Services LLC from US) |
| trust <1> | OK | Ok via SAN (same w/o SNI) |
| chain of trust <1> | OK | passed. |
| certificatePolicies EV <1> | INFO | no |
| expirationStatus <1> | OK | 60 >= 60 days |
| notAfter <1> | OK | 2024-08-19 15:34 |
| OCSP stapling <1> | LOW | not offered |
| DNS CAArecord <1> | OK | issue=pki.goog |
| certificate transparency <1> | OK | yes (certificate extension) |
| signatureAlgorithm <2> | OK | SHA256 with RSA |
| keySize <2> | OK | EC 256 bits |
| serialNumber <2> | INFO | 2E3626CBA4C3CDAD090A8EAC6B7B4A7F |
| commonName <2> | OK | *.google.com |
| commonName wo SNI <2> | INFO | *.google.com |
| subjectAltName <2> | INFO | *.google.com *.appengine.google.com *.bdn.dev *.origin-test.bdn.dev *.cloud.google.com *.crowdsource.google.com *.datacompute.google.com *.google.ca *.google.cl *.google.co.in *.google.co.jp *.google.co.uk *.google.com.ar *.google.com.au *.google.com.br *.google.com.co *.google.com.mx *.google.com.tr *.google.com.vn *.google.de *.google.es *.google.fr *.google.hu *.google.it *.google.nl *.google.pl *.google.pt *.googleapis.cn *.googlevideo.com *.gstatic.cn *.gstatic-cn.com googlecnapps.cn *.googlecnapps.cn googleapps-cn.com *.googleapps-cn.com gkecnapps.cn *.gkecnapps.cn googledownloads.cn *.googledownloads.cn recaptcha.net.cn *.recaptcha.net.cn recaptcha-cn.net *.recaptcha-cn.net widevine.cn *.widevine.cn ampproject.org.cn *.ampproject.org.cn ampproject.net.cn *.ampproject.net.cn google-analytics-cn.com *.google-analytics-cn.com googleadservices-cn.com *.googleadservices-cn.com googlevads-cn.com *.googlevads-cn.com googleapis-cn.com *.googleapis-cn.com googleoptimize-cn.com *.googleoptimize-cn.com doubleclick-cn.net *.doubleclick-cn.net *.fls.doubleclick-cn.net *.g.doubleclick-cn.net doubleclick.cn *.doubleclick.cn *.fls.doubleclick.cn *.g.doubleclick.cn dartsearch-cn.net *.dartsearch-cn.net googletraveladservices-cn.com *.googletraveladservices-cn.com googletagservices-cn.com *.googletagservices-cn.com googletagmanager-cn.com *.googletagmanager-cn.com googlesyndication-cn.com *.googlesyndication-cn.com *.safeframe.googlesyndication-cn.com app-measurement-cn.com *.app-measurement-cn.com gvt1-cn.com *.gvt1-cn.com gvt2-cn.com *.gvt2-cn.com 2mdn-cn.net *.2mdn-cn.net googleflights-cn.net *.googleflights-cn.net admob-cn.com *.admob-cn.com googlesandbox-cn.com *.googlesandbox-cn.com *.safenup.googlesandbox-cn.com *.gstatic.com *.metric.gstatic.com *.gvt1.com *.gcpcdn.gvt1.com *.gvt2.com *.gcp.gvt2.com *.url.google.com *.youtube-nocookie.com *.ytimg.com android.com *.android.com *.flash.android.com g.cn *.g.cn g.co *.g.co goo.gl www.goo.gl google-analytics.com *.google-analytics.com google.com googlecommerce.com *.googlecommerce.com ggpht.cn *.ggpht.cn urchin.com *.urchin.com youtu.be youtube.com *.youtube.com youtubeeducation.com *.youtubeeducation.com youtubekids.com *.youtubekids.com yt.be *.yt.be android.clients.google.com developer.android.google.cn developers.android.google.cn source.android.google.cn developer.chrome.google.cn web.developers.google.cn codelabs.developers.google.cn |
| caIssuers <2> | INFO | GTS CA 1C3 (Google Trust Services LLC from US) |
| trust <2> | OK | Ok via SAN (same w/o SNI) |
| chain of trust <2> | OK | passed. |
| certificatePolicies EV <2> | INFO | no |
| expirationStatus <2> | OK | 60 >= 60 days |
| notAfter <2> | OK | 2024-08-19 15:34 |
| OCSP stapling <2> | LOW | not offered |
| DNS CAArecord <2> | OK | issue=pki.goog |
| certificate transparency <2> | OK | yes (certificate extension) |
| Protocols Information google.com/172.217.26.238 | ||
|---|---|---|
| SSLv2 | OK | not offered |
| SSLv3 | OK | not offered |
| TLS1 | INFO | offered |
| TLS1.1 | INFO | offered |
| TLS1.2 | OK | offered |
| TLS1.3 | OK | offered with final |
| ALPN.HTTP2 | OK | h2 |
| ALPN | INFO | http/1.1grpc-exp |
| Server Information | ||
|---|---|---|
| cipher negotiated | OK | TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519) |
| Cipher order | ||
|---|---|---|
| TLSv1 | INFO | ECDHE-ECDSA-AES128-SHA |
| TLSv1.1 | INFO | ECDHE-ECDSA-AES128-SHA |
| TLSv1.2 | INFO | ECDHE-ECDSA-AES128-GCM-SHA256 |
| Cipher Suite |
|---|
| Client Handshake Simulation | ||
|---|---|---|
| android 422 | INFO | TLSv1.0 ECDHE-ECDSA-AES128-SHA |
| android 442 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| android 500 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| android 60 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| android 70 | INFO | TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305 |
| android 81 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| android 90 | INFO | TLSv1.3 TLS_AES_128_GCM_SHA256 |
| chrome 65 win7 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| chrome 74 win10 | INFO | TLSv1.3 TLS_AES_128_GCM_SHA256 |
| firefox 62 win7 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| firefox 66 win81 | INFO | TLSv1.3 TLS_AES_128_GCM_SHA256 |
| ie 6 xp | INFO | No connection |
| ie 7 vista | INFO | TLSv1.0 ECDHE-ECDSA-AES128-SHA |
| ie 8 win7 | INFO | TLSv1.0 ECDHE-ECDSA-AES128-SHA |
| ie 8 xp | INFO | TLSv1.0 DES-CBC3-SHA |
| ie 11 win7 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| ie 11 win81 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| ie 11 winphone81 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| ie 11 win10 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| edge 15 win10 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| edge 17 win10 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| opera 60 win10 | INFO | TLSv1.3 TLS_AES_128_GCM_SHA256 |
| safari 9 ios9 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| safari 9 osx1011 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| safari 10 osx1012 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| apple ats 9 ios9 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| tor 1709 win7 | INFO | TLSv1.0 ECDHE-ECDSA-AES128-SHA |
| java 6u45 | INFO | TLSv1.0 AES128-SHA |
| java 7u25 | INFO | TLSv1.0 ECDHE-ECDSA-AES128-SHA |
| java 8u161 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| java 904 | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| openssl 101l | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| openssl 102e | INFO | TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 |
| openssl 110j | INFO | TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305 |
| openssl 111b | INFO | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| thunderbird 60 6 1 | INFO | TLSv1.3 TLS_AES_128_GCM_SHA256 |