highland.kernhigh.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number c9:6a:72:71:7e:7c:14:7d:0e:37:66:d8:f5:fb:1c:02 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=highland.kernhigh.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c9:6a:72:71:7e:7c:14:7d:0e:37:66:d8:f5:fb:1c:02
Serial Number (int): 267727531806395077377906689590219709442
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:94:5a:2d:26:ff:5d:11:1b:bf:dc:89:39:79:cf:2e:f5:15:52:70
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 3f:d7:5b:6d:2b:d5:5d:bd:fa:f9:3a:a4:6f:9c:24:2d:26:2f:fb:84
Fingerprint (sha256): 0e:77:f4:2b:37:57:32:14:b5:56:3c:16:13:ad:b7:d5:b9:65:5c:50:52:12:7b:4d:34:76:c8:9c:4d:90:9f:52

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/YZ-NL4ZCEcQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/CznYjF9ox0I.crl

Check the revocation status for certificate highland.kernhigh.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for highland.kernhigh.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

highland.kernhigh.org

Other certificates including the domain name kernhigh.org

(limited to 100 certificates)
admin.arvin.kernhigh.org
www.chms.mx
kernhigh.org
kahuluischool.k12.hi.us
www.cerratosd.org
admin.aes.fentressboe.com
admin.annasmithelementary.tooeleschools.org
centralvalley.kernhigh.org
studentsupport.kernhigh.org
mail.kernhigh.org
webmail.kernhigh.org
www.peachtreeridge.org
arvin.kernhigh.org
staffconnect.kernhigh.org
stockdale.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.annasmithelementary.tooeleschools.org
fin.kernhigh.org
highland.kernhigh.org
cte.kernhigh.org
vdicb.kernhigh.org
foothill.kernhigh.org
admin.annasmithelementary.tooeleschools.org
gvhshelp.kernhigh.org
fs.kernhigh.org
bakersfield.kernhigh.org
centennial.kernhigh.org
admin.mozart-secondary.vanguardacademy.education
kernhigh.org
nuhshelp.kernhigh.org
vdi.kernhigh.org
webmail.kernhigh.org
fin.kernhigh.org
shafter.kernhigh.org
admin.arvin.kernhigh.org
staffconnect.kernhigh.org
filetransfer.kernhigh.org
filetransfer.kernhigh.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
liberty.kernhigh.org
www.ps086.com
north.kernhigh.org
staffconnect.kernhigh.org
admin.aes.fentressboe.com
icecube.kernhigh.org
cerratosd.org
goldenvalley.kernhigh.org
admin.ivelem.apluscharterschools.org
admin.cca-denver.org
admin.annasmithelementary.tooeleschools.org
admin.apluscharterschools.org
miramonte.kernhigh.org
vdi.kernhigh.org
fs.kernhigh.org
dohelp.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
ventureacademy.pylusd.org
filetransfer.kernhigh.org
admin.apluscharterschools.org
bakersfield.kernhigh.org
admin.bas.kernhigh.org
centralvalley.kernhigh.org
admin.akinseagles.org
kvhshelp.kernhigh.org
south.legacyprep.org
admin.cca-denver.org
filetransfer.kernhigh.org
whshelp.kernhigh.org
admin.cca-denver.org
admin.spxtulsa.org
www.sfrschool.org
admin.arvin.kernhigh.org
lib.kernhigh.org
independence.kernhigh.org
airwatchserver.kernhigh.org
kernhigh.org
webhelp.kernhigh.org
*.kernhigh.org
frontier.kernhigh.org
shhshelp.kernhigh.org
shshelp.kernhigh.org
vwhshelp.kernhigh.org
kahuluischool.k12.hi.us
admin.veritasca.org
icecube.kernhigh.org
hcm.kernhigh.org
staffconnect.kernhigh.org
vdicb.kernhigh.org
admin.apluscharterschools.org
filetransfer.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.church.spxtulsa.org
filetransfer.kernhigh.org
east.kernhigh.org
roc.kernhigh.org
admin.cca-denver.org

Certificate

The complete raw certificate details for highland.kernhigh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcCkcCAVoDWo6x7CvktO
m3Wt/cfy/DQjVhaU9lGGXLjcIqDzMSB0cAZRBi+9GgtA26aZkSs4ZRzSLPKYQ8by
eD35YQFz/SkS9LgDb1hVkZr/eBxeB5ZOfDjKOZV5jcrB2T3OEJZzdthliKdNL1LE
oDU1i4CXLX9bwPNDcW6KK0+i5cv77lXZvYc10+Bpfn/+Ua+OepzimT3p2+S9AgU8
iPSLngO9PhHWD8PF5ZMzrIMxbJ3pg0UuEOLpLGWA95i4u6XOMk0KbNzVqoEj2jZS
5q1TneQejnULMpP3/EnwzT6hekbgjDFS0990s4dUdKKt7/DL8iP2YSdvGGYv5R/j
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267727531806395077377906689590219709442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 06:56:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 06:56:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highland.kernhigh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24458988334809895886335136549649811925730204366723160618589256460045237922149291836178702489041616287546815150269319576831374051008658272059617251679728999655330718564406218897592767333290272327051360704941768114925156922716592660969758300827658737054557444201641715955561699279514502463013169095544929535571583594088204750603874589033968458458607386257435502963142904301345675056001194539778595216369666634495460479176839319603502873439915643538991563551874951331168560139795943929258553013749367520856776372554505448734854993440960396903441394502047850853266161867861034368173977934628292163671192625115622283404079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a945a2d26ff5d111bbfdc893979cf2ef5155270
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/YZ-NL4ZCEcQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.kernhigh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/CznYjF9ox0I.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000189bf8bfc130000040300473045022100dc7a33fff864fa114af0b695e8818af800439b2681d6a17606bbf9557c0553d90220453509af140e5e66507d8f3d656638991529513b30308917a3c5e7346a859c62007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189bf8bfc2f000004030047304502204f7722923af82e09cd8c6910ef109c76ca8f79f76e089f9358b70838ac124d47022100ae2419652a30ff91bbe8caa106c776fa80e2bbaad61a82bf84480cf52af605cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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