oasis.santacruzcoe.org

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 98:b1:6a:fc:ac:18:6e:a8:0a:00:00:00:00:00:2a:c1 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oasis.santacruzcoe.org

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:b1:6a:fc:ac:18:6e:a8:0a:00:00:00:00:00:2a:c1
Serial Number (int): 202963861857443776312335381900008893121
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9f:5a:2b:ac:b9:72:73:e1:11:7f:78:23:a6:d9:a0:34:51:f6:e0:42
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): b8:f1:07:83:96:08:4e:81:82:da:e8:2f:8e:a7:0a:5a:e8:2a:48:75
Fingerprint (sha256): 09:8a:a6:9b:c1:a8:0c:d3:5f:5f:8d:9e:bc:cd:38:2b:b4:4c:d0:9d:aa:7a:33:de:26:50:81:3f:a6:a0:22:1d

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate oasis.santacruzcoe.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oasis.santacruzcoe.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oasis.santacruzcoe.org

Other certificates including the domain name santacruzcoe.org

(limited to 100 certificates)
*.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
webmail.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
email.santacruz.k12.ca.us
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
oasis.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
*.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
dataportal.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
leadership.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
*.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
bayoflife.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
dlearning.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
*.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
webmail.santacruz.k12.ca.us
santacruzcoe.org
cypress.santacruzcoe.org
webmail.santacruz.k12.ca.us
santacruzcoe.org
cypress.santacruzcoe.org
covid19test.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
dataportal.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
cypress.santacruzcoe.org
www.santacruzcoe.org

Certificate

The complete raw certificate details for oasis.santacruzcoe.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3LPUEUscwnYPneZRp54
/OGArV233melind0EcqC/D2e/3vQqunT+O34tP0QJC9mewdVdFnQXJnwAS8+W+lD
dVfbceUeQ6+295iWN9LA8SQ0A1gLl8lYIgfTIto1yEkAmLgPQ+6PKeA94giHqFdo
a0oSphguzIfPBstkXLTtPj3FzfrHrQUPgLnDtaETgfbh33QaH8SU7mq1JG6eh+M/
5zpqRUix7H/0pmYa3BnNPFvIQrlpTQCRXWSnQ6cIsLt6WT/jDPSMgIq16A+ePPIC
mp9mvCSyAcz2d8nxxsQPvwStj0vSWrRA/1XQDn9p9WFq3xDmHBwz6kP17EZ5Ln2A
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 202963861857443776312335381900008893121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 07:28:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 07:28:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oasis.santacruzcoe.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19118598881478443854721561225420973959411369002772970892916813018569982833352135077063500626701039693685544404238659112956924147065080516353150048246282983863373488324786241570660623839808002502548121692038442731364247455366696695558313223255060739262774551660954190495276681041273716962105451969317154654021371666774470381307769000669047401428657383081048099077690213970951086899010024056713350866654809103448525202752505855336847772500851537134322187057844980957336896812597414328932681632361897405150891851263420917685023530280262052603687544220566652220283238177362747817226040822027181567224044121632121953288253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f5a2bacb97273e1117f7823a6d9a03451f6e042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasis.santacruzcoe.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0207e000000004030046304402202d21b1720f04c0e451cc21ff52ed1c83c1af2198968d5b3ea0d37f2fb879397202205f951adb7e0d7971fe545148eb294d93fcf94c53a46e77beb04e1614496420430076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e0207e01c00000403004730450221009065870363f8eb450d3704e291ef202be9885da3f6e7a0146338b95533dfe739022003915c18b7d4932c47912b476dd684dba2ac9a13eb905746661f65054f223f8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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