admin.cornerstone.pvpusd.net

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a9:ef:00:2a:33:f2:d9:8e:0e:3b:5b:46:e4:03:20:6f was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=admin.cornerstone.pvpusd.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a9:ef:00:2a:33:f2:d9:8e:0e:3b:5b:46:e4:03:20:6f
Serial Number (int): 225880493580500754846289654384106348655
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d1:f0:ed:58:6c:db:85:0f:4c:44:2f:99:b0:18:44:a8:d7:cf:b0:fc
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f2:37:72:06:1e:2c:96:82:0a:4f:73:94:c9:04:85:c3:2f:59:29:24
Fingerprint (sha256): 12:1b:09:5c:c5:df:ed:34:fe:45:f4:67:6f:13:0b:39:3f:9b:25:e0:91:3e:ee:c3:0b:1d:cc:54:9a:76:3a:2e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/hEoOiSxfhNg
CRL Distribution Point: http://crls.pki.goog/gts1p5/PkkZg3aqgvc.crl

Check the revocation status for certificate admin.cornerstone.pvpusd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.cornerstone.pvpusd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.cornerstone.pvpusd.net

Other certificates including the domain name pvpusd.net

(limited to 100 certificates)
admin.aceacademycharter.org
ms.bsd29j.com
acrma21.org
pvhs.pvpusd.net
www.cranburyschool.org
admin.eceap.gsd.wednet.edu
marktwain.lynwood.k12.ca.us
bes.gobearsgo.net
admin.mills.owassops.org
pvpusd.net
admin.ccs.coloma.org
gfes.comalisd.org
*.pvpusd.net
admin.cornerstone.pvpusd.net
www.cbchs.org
hes.huffmanisd.net
acrma21.org
casshigh.bartow.k12.ga.us
7gc.owassops.org
acrma21.org
pathway.lynwood.k12.ca.us
st.louisschool.org
academia.sanjorgeparroquiayacademia.org
acrma21.org
bhs.ballingerisd.net
www.pvpusd.net
admin.eastvalleyelementary.evsd90.org
www.bronxdalehs.org
svms.comalisd.org
admin.fisher.southredford.org
admin.cerratohs.org
ceres.ewcsd.org
admin.crma5.org
www.sjsmendham.org
pvpusd.net
gordonsville.smithcoedu.com
admin.aceacademycharter.org
abbott.lynwood.k12.ca.us
acrma21.org
pvpusd.net
admin.nes.mcduffie.k12.ga.us
sle.slvusd.org
ballingerisd.net
pvis.pvpusd.net
chs.comalisd.org
frayluisdeleon.edu.mx
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
hhs.hattiesburgpsd.com
admin.lunadabay.pvpusd.net
abe.zcisd.org
nac.pvpusd.net
admin.hs.vanalstyneisd.org
woodsboro.pylusd.org
cses.comalisd.org
abe.zcisd.org
acrma5.org
acrma21.org
acrma21.org
academy.comalisd.org
cdc.comalisd.org
academia.sanjorgeparroquiayacademia.org
admin.moxee.evsd90.org
svhs.comalisd.org
ranchovista.pvpusd.net
ajshs.anacondaschools.org
acrma5.org
mentalhealth.lexnyc.org
cyc4kids.org
vanalstyneisd.org
pvpusd.net
pvpusd.net
admin.cte.mpsdnow.org
admin.williampenn.bcsd.com
7gc.owassops.org
acrma21.org
academia.sanjorgeparroquiayacademia.org
admin.bhs.ballingerisd.net
balloustay.com
lacountycharterselpa.org
admin.aceacademycharter.org
www.colegioangloamericanohgo.edu.mx
admin.glenknoll.org
admin.jh.iasd.cc
admin.mpsdnow.org
admin.burkburnettisd.org
*.pvpusd.net
cerratohs.org
admin.elkridge.whiteriver.wednet.edu
7gc.owassops.org
admin.brhs.bordentown.k12.nj.us
monessenschooldistrict.com
admin.aceacademycharter.org
es.vanalstyneisd.org
admin.vanalstyneisd.org
admin.arcataschooldistrict.org
cdc.comalisd.org
8.bellevilleschools.org
pvpusd.net
lunadabay.pvpusd.net

Certificate

The complete raw certificate details for admin.cornerstone.pvpusd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbHNtbdIExoq+NSdkWG
hKdcl+WhHxIfq0+2QK5L/0P0VnFMqHlCx2dYUEn63sZFtSZk7te7yyFCWXYR9oRt
oXxKJozp6mKajJVKTa6g1xxR+/VjT1uoQf3qsYM3uFxE8OKIEwGQyPOrfKQQg3Y4
u+lVLiAtqu5AZblaq2zlXxy1cnk4t5vdNLVtFCGh/YScBsMAhOLFniZYoXstUwFK
OhrjU9oMEUvDx1vjJSImpWd3NRhY+gtzNU6yD41sRX0/CBaXfuEsAIoHZ4ViGK9k
6/wdg/tkE5vZ3Jpv9kWAVP95XDaSX2u2223DLDc1CV4BMoFmmjypQz67R0dJ/Bz5
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225880493580500754846289654384106348655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 21:30:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 21:30:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.cornerstone.pvpusd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23878161872100559678303189767571101082249291067165148278452533954594095191651236454088148055889047424113529554962048545536077967001603127016461990027716935966286800389281414505716167408401080039849888202693347948258674774667759822440674971085088225535082617968163342995617367705995949913637808554270197509278181335241970723302627765723116870508401047206071890687139597283264615552115581400181976109239134712189041008354201527922406648484141900564752722590546500649445721274745348722181215290493220377724957560383921087984509217652488117313491987603125187602672528327632947855211980242058850047452458072241633683634507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1f0ed586cdb850f4c442f99b01844a8d7cfb0fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/hEoOiSxfhNg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornerstone.pvpusd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/PkkZg3aqgvc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d28fee6a7000004030047304502202da5069cec4b4027fc4684f8c226fd42414b1d49e4d86397608e28ba4ccb27d1022100fb0a03cd7616e6492f0b1d47a283f98f7b740d1a51dda2ee043495f28a6c0e8a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d28fee6670000040300463044022078e66643b36a5597bc864bae3a0f91d7c2579ff08d23595f4d07bf3fb532ac70022022f29299122ab42492cdba28a23fc4090ba60ae94e2672d4f3f873d7ece5dc93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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