$ openssl s_client -connect 64.233.165.102:443 | openssl x509 -noout -text depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = US, O = Google Trust Services, CN = GTS CA 1O1 verify return:1 depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = *.google.com verify return:1 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:0c:c3:b8:41:17:1b:08:00:00:00:00:24:32:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: C = US, O = Google Trust Services, CN = GTS CA 1O1 Validity Not Before: Dec 10 08:35:07 2019 GMT Not After : Mar 3 08:35:07 2020 GMT Subject: C = US, ST = California, L = Mountain View, O = Google LLC, CN = *.google.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9d:bf:0a:52:aa:c7:73:91:df:a8:43:91:1f:22: 62:8f:91:bf:6d:92:a8:5b:f4:f6:a8:20:f8:76:d4: a8:04:b4:89:5b:c9:c2:ea:75:8b:a0:f1:3b:4b:7e: 67:39:e7:00:b1:54:76:80:bd:a3:aa:38:07:1f:86: 4a:25:f7:85:20:65:17:e8:21:bc:8d:a2:a4:00:d4: df:ba:69:59:e6:0f:57:30:88:07:df:dc:d3:a0:95: 6f:80:d2:4f:f1:ae:f5:d6:a3:e3:aa:19:3e:56:5b: 1a:55:79:f1:dd:e6:83:36:84:25:09:df:59:5c:bd: 26:a8:58:c7:1d:d8:ce:7a:f1:8c:6a:87:ac:d7:7f: 68:f3:d0:69:89:17:32:4b:83:65:78:71:41:0f:f5: 98:c2:59:15:2c:df:e3:97:e1:8e:40:61:33:4e:39: 6c:83:40:62:2b:61:92:3a:7d:60:39:fc:6f:d6:c6: d5:c0:a0:fd:2d:fa:5d:ff:9a:4f:d3:2b:b8:4e:c4: b8:f1:2b:30:f7:37:f7:4f:26:70:23:61:19:5f:e0: 45:d5:ec:8b:53:f9:98:7f:8d:d4:f5:70:fd:81:74: f9:7b:0a:91:42:d7:57:b1:42:26:f6:d1:79:20:af: 34:40:b9:a8:5f:32:87:e0:49:33:45:09:7d:10:96: 55:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E1:C0:85:94:16:09:44:4F:31:CC:5A:5C:7C:2E:2D:68:5F:19:59:DC X509v3 Authority Key Identifier: keyid:98:D1:F8:6E:10:EB:CF:9B:EC:60:9F:18:90:1B:A0:EB:7D:09:FD:2B Authority Information Access: OCSP - URI:http://ocsp.pki.goog/gts1o1 CA Issuers - URI:http://pki.goog/gsr2/GTS1O1.crt X509v3 Subject Alternative Name: DNS:*.google.com, DNS:*.android.com, DNS:*.appengine.google.com, DNS:*.cloud.google.com, DNS:*.crowdsource.google.com, DNS:*.g.co, DNS:*.gcp.gvt2.com, DNS:*.gcpcdn.gvt1.com, DNS:*.ggpht.cn, DNS:*.gkecnapps.cn, DNS:*.google-analytics.com, DNS:*.google.ca, DNS:*.google.cl, DNS:*.google.co.in, DNS:*.google.co.jp, DNS:*.google.co.uk, DNS:*.google.com.ar, DNS:*.google.com.au, DNS:*.google.com.br, DNS:*.google.com.co, DNS:*.google.com.mx, DNS:*.google.com.tr, DNS:*.google.com.vn, DNS:*.google.de, DNS:*.google.es, DNS:*.google.fr, DNS:*.google.hu, DNS:*.google.it, DNS:*.google.nl, DNS:*.google.pl, DNS:*.google.pt, DNS:*.googleadapis.com, DNS:*.googleapis.cn, DNS:*.googlecnapps.cn, DNS:*.googlecommerce.com, DNS:*.googlevideo.com, DNS:*.gstatic.cn, DNS:*.gstatic.com, DNS:*.gstaticcnapps.cn, DNS:*.gvt1.com, DNS:*.gvt2.com, DNS:*.metric.gstatic.com, DNS:*.urchin.com, DNS:*.url.google.com, DNS:*.wear.gkecnapps.cn, DNS:*.youtube-nocookie.com, DNS:*.youtube.com, DNS:*.youtubeeducation.com, DNS:*.youtubekids.com, DNS:*.yt.be, DNS:*.ytimg.com, DNS:android.clients.google.com, DNS:android.com, DNS:developer.android.google.cn, DNS:developers.android.google.cn, DNS:g.co, DNS:ggpht.cn, DNS:gkecnapps.cn, DNS:goo.gl, DNS:google-analytics.com, DNS:google.com, DNS:googlecnapps.cn, DNS:googlecommerce.com, DNS:source.android.google.cn, DNS:urchin.com, DNS:www.goo.gl, DNS:youtu.be, DNS:youtube.com, DNS:youtubeeducation.com, DNS:youtubekids.com, DNS:yt.be X509v3 Certificate Policies: Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3 X509v3 CRL Distribution Points: Full Name: URI:http://crl.pki.goog/GTS1O1.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : B2:1E:05:CC:8B:A2:CD:8A:20:4E:87:66:F9:2B:B9:8A: 25:20:67:6B:DA:FA:70:E7:B2:49:53:2D:EF:8B:90:5E Timestamp : Dec 10 09:35:11.827 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:3B:48:B6:09:D8:84:F0:D5:F6:F8:7C:C6: 4F:B7:EC:64:84:DD:72:FB:B8:BE:95:13:B5:56:0F:0A: 17:E9:50:47:02:20:71:15:C2:38:BD:F8:C3:1B:BA:72: D4:AE:FF:50:49:0A:BB:31:1E:AA:AA:6B:BB:72:76:64: B2:38:11:FF:E2:F4 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 5E:A7:73:F9:DF:56:C0:E7:B5:36:48:7D:D0:49:E0:32: 7A:91:9A:0C:84:A1:12:12:84:18:75:96:81:71:45:58 Timestamp : Dec 10 09:35:11.859 2019 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:D7:F5:3A:33:3C:D7:49:12:4D:35:50: 05:21:43:D5:7A:FD:53:99:2E:6A:E7:81:57:F0:DA:35: BC:8A:D7:AC:71:02:20:7C:7E:94:BC:39:81:8B:E2:5A: 05:96:CC:9D:38:88:D5:A2:DB:B1:0C:AF:1B:EB:73:82: 7C:F2:45:26:6A:F5:81 Signature Algorithm: sha256WithRSAEncryption 66:94:63:db:a4:9e:f0:88:89:7c:31:02:ab:9f:39:07:47:04: 49:47:21:b1:b1:e3:0a:4e:4a:9a:d6:8c:cc:b5:09:15:74:33: f4:c0:13:e0:fc:ed:86:20:d4:01:7f:25:98:73:35:47:cb:92: b0:50:d0:b5:97:32:3b:fe:a6:97:3f:2f:58:87:d6:b1:90:27: 45:f7:c2:80:70:aa:4c:dd:80:18:82:fc:f3:7e:2b:61:5f:99: b8:3f:2c:f2:8c:2e:3b:a0:5b:24:ed:39:6e:45:bf:05:a6:8d: 36:a0:57:d5:8a:85:d5:59:5b:5e:7a:bb:bc:fe:b6:f0:f3:19: a0:c1:4e:0e:99:48:cd:6a:21:68:50:0a:b9:fe:26:88:df:22: 2d:ca:bb:7a:3a:b4:d2:e1:8d:79:06:4a:a4:4b:92:c5:07:47: e2:4d:2b:35:44:af:d5:24:86:1e:bf:20:74:6e:20:af:50:11: 0e:d0:ab:f2:f2:ea:ff:97:58:62:ce:34:2c:b2:d0:13:6e:13: f8:8d:dd:3b:52:1b:2a:b7:8c:bd:f8:27:36:72:a9:97:14:82: 18:1e:de:07:a9:0b:ea:a1:da:52:25:1d:16:80:2f:05:a2:33: e0:f0:02:19:1e:02:b4:c5:6d:01:5b:e8:44:d3:96:5d:60:51: db:e1:26:ca read:errno=0