news.usuhs.edu

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e3:05:07:af:6a:95:ee:2e:0a:44:5c:58:98:83:e3:0c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.usuhs.edu

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:05:07:af:6a:95:ee:2e:0a:44:5c:58:98:83:e3:0c
Serial Number (int): 301760872402250908605957026838674137868
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8b:d6:2b:f3:0f:2f:56:3b:22:99:46:a6:1a:5c:7e:0b:32:fd:ab:9c
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 6d:5c:12:29:f7:b1:fe:26:20:3d:06:4f:0f:83:f3:d5:4f:14:1e:19
Fingerprint (sha256): 05:92:d3:17:af:d4:fd:72:e2:c7:7f:ad:97:35:bc:f7:5b:7b:6e:a5:4d:5f:83:d1:95:32:95:e0:59:13:a5:38

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/K7J3c1gl8Ig
CRL Distribution Point: http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl

Check the revocation status for certificate news.usuhs.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.usuhs.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.usuhs.edu

Other certificates including the domain name usuhs.edu

(limited to 100 certificates)
www.usuhs.edu
usuasoexweb2.usuhs.edu
www.lrc.usuhs.edu
puppetmaster.usuhs.edu
my.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
www.usuhs.edu
portfolio.usuhs.edu
echo-ess.usuhs.edu
usuhs-vh-03.usuhs.edu
carlosdev.usuhs.edu
er.lrc.usuhs.edu
desxi28.usuhs.edu
usuhs-vdi-03.usuhs.edu
scholar.usuhs.edu
drupal-centers.usuhs.edu
stage-fac-dev.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
mneat.usuhs.edu
usuhs-vdi-01.usuhs.edu
lmsdev.usuhs.edu
desxi32.usuhs.edu
stage-sakai.usuhs.edu
news.usuhs.edu
www.usuhs.edu
eduapp1.usuhs.edu
usuimpact.usuhs.edu
usuasodevweb.usuhs.edu
stage-fac-dev.usuhs.edu
stage-redcap.usuhs.edu
ususecureauth2.usuhs.edu
caslocator.usuhs.edu
usu-awx.usuhs.edu
slides.usuhs.edu
canvas.usuhs.edu
eduapp2.usuhs.edu
usu-conn-srv-02.usuhs.edu
desxi29.usuhs.edu
usuexweb2.usuhs.edu
usuasostage.usuhs.edu
lrc2.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
cas.usuhs.edu
slides.usuhs.edu
usuhs-voip-02n.usuhs.edu
content.usuhs.edu
cfapps.usuhs.edu
kcoeus.usuhs.edu
usuasoweb.usuhs.edu
servicenow.usuhs.edu
panopto.usuhs.edu
dental.usuhs.edu
im.usuhs.edu
lb.usuhs.edu
doc.lrc.usuhs.edu
usuexweb1.usuhs.edu
usuasoexweb2.usuhs.edu
usuasostage.usuhs.edu
certificates.usuhs.edu
usuasoexweb2.usuhs.edu
pathslide1.usuhs.edu
*.lrc29.usuhs.edu
usuexweb1.usuhs.edu
usuasodevweb.usuhs.edu
eduapp2.usuhs.edu
usuhs-voip-04a.usuhs.edu
www.usuhs.edu
erdev.lrc.usuhs.edu
cac.cas.usuhs.edu
ususolarwinds.usuhs.edu
mta-sts.usuhs.edu
usuhs-biz.usuhs.edu
usuasoexweb2.usuhs.edu
CER-MC-CPC1-SUB.USUHS.EDU
iwcp.usuhs.edu
*.lrc28.usuhs.edu
usuexweb1.usuhs.edu
cf2.usuhs.edu
usuaperio1.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
epicc.usuhs.edu
my.usuhs.edu
redcap.usuhs.edu
epicc.usuhs.edu
www.lrc.usuhs.edu
usuasoexweb1.usuhs.edu
usuhs-vh-01.usuhs.edu
stage-sakai.usuhs.edu
usuexweb2.usuhs.edu
maintenance.lrc.usuhs.edu
er.lrc.usuhs.edu
www.usuhs.edu
apps.usuhs.edu
content.usuhs.edu
usuehshpserver.usuhs.edu
stage-drupal-centers.usuhs.edu
foreman.usuhs.edu
lrc-web.usuhs.edu
ncdmph.usuhs.edu
RCS28.lrc.usuhs.edu

Certificate

The complete raw certificate details for news.usuhs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K0f3KWfUhDiIzn0XLac
X/VSadvYMmTNFjBDMg4xOJj0WY4nUE1UT0e5/MXgZy2+jqE/pB1JgMq1sYXK3H+D
+p+Np8z079dVBRBqOyi1PzSbGIZLBVecIQmX1JkthiVsbRPLSLRo0YiSpcHryfcs
jV0eIxPDh4N6Sc6C8kV+cPM/0YQhNxTNNzy4O1hRmygRxuDJKnepqde/Q8s4XUR1
2nf99JVWHr6Zsp5qfafuQi9fsiViXJQhmzq1O+uxuMobOxMfJFDGJ4x98Ek10nm4
sQKYKY8P4tZ4emVtXb3gJOJOem52DmHCjIktCwb08aWt59NSIvEb2zWpKniT1CbP
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301760872402250908605957026838674137868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 07:45:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:35:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.usuhs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29877610825305006323743977880483046315330342935252135146925941500875365573531851945903387885518666870282994598302616036071781438449630825006364302759751368268557781461221513735793962452404031732199270631304044727824257764394129538567843820459455496154067720943499669114012954743026909392073610059061559251196640242755681814901908494481594013595603417730766046897477127317002768465071077583954356913877088180512627129119983125028008879835739525991149656192527130968064504267441566769170755733575375765976477737122886619350530303617296985846204259193376305282307841852672343386124783610848230827277730028891966143909781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bd62bf30f2f563b229946a61a5c7e0b32fdab9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/K7J3c1gl8Ig'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.usuhs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d44f1e8f6000004030047304502200b766a27df4cf5a1971c287a1bfe2d8edc0c5a7543f8ae13070472892d2cd0f7022100bec15bdb142922a6bb6c9c52b97bd386b8ffbe348189e4fa0322eec900e7ed0e007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d44f1e8d60000040300463044022015f736cb48cd11fa3d0160b64066db20a0f05196c2a60ccca509a610f1ce687502202b04b7ddda91cc80986e5cdc32c67559e06061e6247d5735a406f7862e1cebc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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