lange.luciamarschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number df:bb:64:55:42:0a:07:47:0d:18:26:24:73:c3:bc:20 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lange.luciamarschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): df:bb:64:55:42:0a:07:47:0d:18:26:24:73:c3:bc:20
Serial Number (int): 297390837568374565577227943640859655200
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c8:32:d4:1a:0a:8e:dd:60:3a:fd:f5:33:78:2d:a3:e1:a9:48:93:13
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): b6:69:95:70:10:45:91:bc:6b:20:41:29:7c:fa:46:82:5c:3c:4d:80
Fingerprint (sha256): 03:bf:ba:d3:3a:da:2d:7f:5a:7c:5a:e8:f2:09:a1:38:28:b3:2f:ab:51:fa:64:65:aa:94:9b:ad:7a:dc:fd:48

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/HqCkBzOwLA0
CRL Distribution Point: http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl

Check the revocation status for certificate lange.luciamarschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lange.luciamarschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lange.luciamarschools.org

Other certificates including the domain name luciamarschools.org

(limited to 100 certificates)
lange.luciamarschools.org
branch.luciamarschools.org
groverbeach.luciamarschools.org
oceanview.luciamarschools.org
admin.groverheights.luciamarschools.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
acatitlan.edu.mx
acatitlan.edu.mx
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
elementary.colfaxschool.org
luciamarschools.org
luciamarschools.org
admin.mhs.centerusd.org
nipomo.luciamarschools.org
excel.dcs.edu
calhanschool.org
adulted.luciamarschools.org
luciamarschools.org
admin.ahs.ardmoreschools.org
luciamarschools.org
branch.luciamarschools.org
admin.adulted.luciamarschools.org
admin.harloe.luciamarschools.org
admin.adulted.luciamarschools.org
fcctc.franklincountyschoolsms.com
luciamarschools.org
admin.adulted.luciamarschools.org
yhs.yorktown.k12.in.us
acatitlan.edu.mx
acatitlan.edu.mx
admin.adulted.luciamarschools.org
franklincountyschoolsms.com
admin.ahs.ardmoreschools.org
luciamarschools.org
admin.athletics.rimsd41.org
harloe.luciamarschools.org
admin.adulted.luciamarschools.org
mesa.luciamarschools.org
www.mountalvernia.org
oceano.luciamarschools.org
groverbeach.luciamarschools.org
admin.middlehigh.alexandercsd.org
luciamarschools.org
oceanview.luciamarschools.org
luciamarschools.org
dana.luciamarschools.org
admin.adulted.luciamarschools.org
admin.aprandolph.com
admin.branch.luciamarschools.org
dana.luciamarschools.org
luciamarschools.org
admin.ewamakai.org
luciamarschools.org
admin.lange.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
mesa.luciamarschools.org
acatitlan.edu.mx
luciamarschools.org
nipomo.luciamarschools.org
admin.adulted.luciamarschools.org
luciamarschools.org
admin.adulted.luciamarschools.org
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
adulted.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
athletics.rimsd41.org
admin.alt.sbcisd.net
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.fairgrove.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.oceanview.luciamarschools.org
l2ic.lex2.org
luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
el.westwoodisd.net
admin.adulted.luciamarschools.org
admin.branch.luciamarschools.org
charlottemecklenburgvirtualhighschool.wearecms.com
tiegerman.org
admin.adulted.luciamarschools.org
fairgrove.luciamarschools.org
admin.judkins.luciamarschools.org
admin.adulted.luciamarschools.org
www.rilohs.com
admin.adulted.luciamarschools.org
lange.luciamarschools.org
acatitlan.edu.mx

Certificate

The complete raw certificate details for lange.luciamarschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU6BTegOUyf+siN3TDkU
d39x0/pNBjfK3hY3rTWlCFpv29N9x1xHxR2JjUfmZN7Z2L7IqQo9rCJety9RbJvW
D+LZReHuQEzQVybaAF+Cgfhdqe7gjxVtEmmmoK8vqkU9GuIOBmXsJXvaZGrm6WR5
g1M3y12DGEmxucNN6bJEt8MVHCCY6MEoZLXN7h1MY86oHC4IN/ZNmMEIC6P7DO8W
6PXbJjzIBJgpT4qnYo4ZreMWkizOk9DTMn+GXLFBNZXnd5arfpOB/m30YhogvSN3
0CIOe1TWujynzPsypLnsLJHbfOp1JQxDxx+wmDrg1rhpC86y1gngK76VUEJG7dEc
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297390837568374565577227943640859655200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 03:54:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 03:54:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lange.luciamarschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24907658383489548984495837130164634592975631342934138924054360986459623431844503691744385304227704020997117558441984905483281191646007547174641095096466600844770768058499954089071672944939887199689676329615962884902715638385413336494424431883653450051137439558889181464146830817099385826751131087953088245609353071223602524676522896171721963313115879664276460857079336411478092388984361506653466803437932149252427140298825863219841560285022093529941649179945264577983868791340937848951201474582273917939587985957851900425538386989314542582196599142546122205789474874191266532358704597924347149457998850678951286742209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c832d41a0a8edd603afdf533782da3e1a9489313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/HqCkBzOwLA0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lange.luciamarschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001899ad954b60000040300473045022100df7f91d7016cbcab389c09dba84181b88f933c50aef84450a459a39307ef9731022055c9c54968722c3fca38f0bffaa114ce69e1eb97db8ae841c4c6b8ad04a3560e0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899ad954d90000040300483046022100c8a54a4f04563f9c0ab1f6e9247e4eb151b55252e9cea0e9dcc1c64f182af19e022100ed66cd35f7adfb7b46344e0775bb900d959d4cb6071dfe72aa607b7e5bd9feb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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