hhs.hermiston.k12.or.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a4:b5:50:96:49:e8:7e:a7:13:55:7c:66:9d:17:e7:f4 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hhs.hermiston.k12.or.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a4:b5:50:96:49:e8:7e:a7:13:55:7c:66:9d:17:e7:f4
Serial Number (int): 218934831539987150837557974843398809588
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e2:1d:c8:5a:ca:37:1f:5b:ef:68:3f:3f:fb:2a:d5:1a:eb:ca:5b:8f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 73:12:b2:03:a3:ac:45:ff:e3:0f:b2:a7:75:69:01:b0:98:09:01:e4
Fingerprint (sha256): 06:2b:24:a5:d9:f4:88:43:f4:70:52:56:9e:48:9e:0b:d2:50:44:21:3d:af:9a:b3:63:a5:53:6d:b7:a9:60:5b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Y1w6a-Rszrg
CRL Distribution Point: http://crls.pki.goog/gts1p5/-KLK99YK1_g.crl

Check the revocation status for certificate hhs.hermiston.k12.or.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hhs.hermiston.k12.or.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hhs.hermiston.k12.or.us

Other certificates including the domain name hermiston.k12.or.us

(limited to 100 certificates)
coloradosprings.coloradoearlycolleges.org
admin.alms.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hermiston.k12.or.us
admin-cuajimalpa.peterson.com.mx
www.plummerpanthers.org
washington.bcsd.com
mydocuments.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
admin.gsdacademy.com
windsorms.coloradoearlycolleges.org
admin.arundel.scsdk8.org
powerschool.hermiston.k12.or.us
pioneer.bcsd.com
*.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
powerschool.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hhes.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
im.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.eim-education.com
sierra.bcsd.com
*.hermiston.k12.or.us
sequoia.bcsd.com
longfellow.bcsd.com
hermiston.k12.or.us
*.hermiston.k12.or.us
sequoia.bcsd.com
conference.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
admin.casaloma.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
plummerpanthers.org
*.hermiston.k12.or.us
wpes.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sms.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.coloradoearlycolleges.org
admin.kes.rcschools.net
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sm.hermiston.k12.or.us
admin.downtown.bcsd.com
hermiston.k12.or.us
hhs.hermiston.k12.or.us
admin.cato.bcsd.com
admin.mtvernon.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
seal.bcsd.com
*.hermiston.k12.or.us
chat.hermiston.k12.or.us
mail.hermiston.k12.or.us
gsdacademy.com
hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.compton.bcsd.com
admin.bcsd.com
admin.alms.hermiston.k12.or.us
wpes.hermiston.k12.or.us
*.hermiston.k12.or.us
fcwestms.coloradoearlycolleges.org
alms.hermiston.k12.or.us
mydocuments.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.arroyo.scsdk8.org
rhes.hermiston.k12.or.us
admin-tlalpan.peterson.com.mx
admin.central.scsdk8.org
hermiston.k12.or.us
lyncpool.hermiston.k12.or.us
*.hermiston.k12.or.us
www.hermistoneducationfoundation.org
*.hermiston.k12.or.us
sip.hermiston.k12.or.us
admin.gsdacademy.com

Certificate

The complete raw certificate details for hhs.hermiston.k12.or.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jHeJElkz4O5dz0SIr0l
l6VfJCT47FqFUiwTQij6PplUGrzd7IeZYU2taGdrQDKojRzgZMlETFeci4qAFat/
3I6am7cWqkH9maAqAD345KMiTftaXL+6iwNuLVP0AiK+YXVJTmJp8hRUFxaGynlK
HMivVA+NnvNFdze705l4HIXpfCVs1zHrN9/QxmTmMT5FxXz5oeLw7F0aIu7Q6zFi
tezCStQhl/j3Dxy1nBIq377JgjGYMPXWYQWmJOrjstMnXW3DhQ38Sm5M7Ss6c/65
5je0pGtQ2pJNp90ZV8dckUDYGpQI3Ck+XRzaZhzTZgZqi/JbLuOQr6DZ9DihEJf1
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 218934831539987150837557974843398809588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 02:09:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 02:09:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hhs.hermiston.k12.or.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28049494402154233292627034000302976922633329258127052157257645825314329012806863683821835593553587471776932371851627456193454615788074180349543197393007896136775690773058919080139550584322416864588014606908426647940104011137141598287821960930782011547434718851885048512770766199894153845876764007986397975603628493883917909236768022925151682677951159203276034364191057266843448528167804168595206668184012067257411727933805896035150459340486933891941643300324131250750803140674022172377445519899599594913682358152164583684722407219952926114588253768407265176467747936625018282199683536628674785939517500903678736332133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e21dc85aca371f5bef683f3ffb2ad51aebca5b8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Y1w6a-Rszrg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/-KLK99YK1_g.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001899a78e7220000040300473045022100a7f22ad96d25ab5ad675e4aaea1a75951a7484095dee94e63a57c6856123da0d02201f6c02f2efd367164282ed77fa91e383a5fcb97a370c2bbeb36eccb9812497bb007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001899a78e70800000403004630440220596afcecb1f50f27dd82752b2bb955ac0a85dfb4ae35a436e06792e064103a6502205538ae7a66d708ebbc32cf39285834ad7be6fe8da14b0a4fe0066ae4a521196d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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