hes.davidson.k12.nc.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 6d:e6:1d:68:5a:40:e8:76:0e:4d:6e:63:c2:17:f2:ef was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hes.davidson.k12.nc.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:e6:1d:68:5a:40:e8:76:0e:4d:6e:63:c2:17:f2:ef
Serial Number (int): 146080676275558367786157208097439347439
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 18:c1:2b:ca:e6:9d:44:67:49:be:94:e7:66:29:cf:d9:8a:95:82:c7
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 20:f9:22:44:56:3f:a7:a0:9b:ef:4d:de:a5:54:8a:fa:e0:50:26:83
Fingerprint (sha256): 12:aa:a5:1e:91:61:94:7b:f8:36:cd:52:8f:ac:2b:b2:b9:29:ea:52:88:51:52:b9:7b:63:2d:b6:8b:70:40:0f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/vyWV4zHZEMU
CRL Distribution Point: http://crls.pki.goog/gts1p5/WIgCKdFuPhE.crl

Check the revocation status for certificate hes.davidson.k12.nc.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hes.davidson.k12.nc.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hes.davidson.k12.nc.us

Other certificates including the domain name davidson.k12.nc.us

(limited to 100 certificates)
wps.windhamraymondschools.org
fes.davidson.k12.nc.us
www.cfn.edu.mx
sdhs.davidson.k12.nc.us
admin.adultlearning.sunrisesd.ca
www.bluehazeelementaryschool.wsisd.com
lumberton.k12.tx.us
admin.sves.davidson.k12.nc.us
admin.lms.davidson.k12.nc.us
acldtillotsonschool.org
www.oahornets.org
mail2.davidson.k12.nc.us
abramfriedmanoc.org
abramfriedmanoc.org
admin.aristoiclassical.org
admin.preescolar.semperaltius.edu.mx
ac21.clps.org
admin.aceroschools.org
elementary.plsd.k12.pa.us
admin.davidson.k12.nc.us
admin.sts.davidson.k12.nc.us
admin.eastprimary.kiskiarea.com
ees.elkincityschools.org
hes.davidson.k12.nc.us
abramfriedmanoc.org
admin.aristoiclassical.org
materdeicatholic.org
www.bonnydoon.santacruz.k12.ca.us
www.livingstonusd.org
adams.k12k.com
sre.dcs.edu
admin.sms.davidson.k12.nc.us
admin.cdhs.davidson.k12.nc.us
res.davidson.k12.nc.us
acldtillotsonschool.org
admin.bms.davidson.k12.nc.us
sgmission.org
admin.va.davidson.k12.nc.us
adams.k12k.com
admin.wdhs.davidson.k12.nc.us
nms.davidson.k12.nc.us
adams.k12k.com
acldtillotsonschool.org
admin.escalonhigh.org
dz.aceroschools.org
summer.materdeicatholic.org
admin.aileencolburn.school
www.colegioverdi.edu.mx
admin.athlosbrooklynpark.org
admin.cdhs.davidson.k12.nc.us
admin.garvyschool.org
admin.aspiraacademy.org
admin.nms.davidson.k12.nc.us
adams.k12k.com
admin.cms.davidson.k12.nc.us
admin.grupocedva.com
www.rebsamen.mx
admin.breed.exteraschools.org
dtes.davidson.k12.nc.us
ogms.davidson.k12.nc.us
admin.escalonhigh.org
www.collegeachievegreaterasburyparkcharterschool.org
admin.bms.davidson.k12.nc.us
pmes.pennsmanor.org
admin.ndhs.davidson.k12.nc.us
admin.scs.ealas.org
admin.asgl-lausd.org
escalonhigh.org
lifeschools.net
www.grandville.k12.mi.us
admin.aspiraacademy.org
davidson.k12.nc.us
cdhs.davidson.k12.nc.us
acsaregionxv.org
aak8.org
acsaregionxv.org
mes.davidson.k12.nc.us
elementary.troupisd.org
admin.fges.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
centroculturaljalilgibran.edu.mx
aceroschools.org
aak8.org
admin.res.rsu14.org
www.movalleyelementary.org
acsaregionxv.org
sme.davidson.k12.nc.us
admin.hes.davidson.k12.nc.us
admin.hg.aceroschools.org
admin.tes.davidson.k12.nc.us
admin.fges.davidson.k12.nc.us
admin.memphiseast.com
lms.davidson.k12.nc.us
mas.mpusd.net
acldtillotsonschool.org
admin.asgl-lausd.org
admin.aimschools.org
admin.bms.davidson.k12.nc.us
admin.cds.pusdschools.net
res.davidson.k12.nc.us

Certificate

The complete raw certificate details for hes.davidson.k12.nc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRPitNDnLucSCk6cHNG3
0vqNu9d8jx4BQEcMYN6mVfmkwqrSTdDhiOy44Mrd5sHEAETr5XUMLhcKiu5wa4RG
duKCS3JyO7OR3r2Rof/QlN/aYsM4bc7p1c42MpLbkFIOk0NBTDrKO8HCu4D4KlTA
qqgLVBIaLf5JbUkDPoUZBF7ZAwrD7aXTnfVtKom6YZcPZ/E7dwX3idD9T7fZTDb5
xMF/pr2k1KanvSm8dEBDWJUWCll7PXFpc7TYBFIy0wNF4EFLQNqLA1rkhHyHniEk
HwMMii6/gEHr2CUFKRM4f9Jiw4/jVW4HzmzPTVqmjmnbBRzAXTiTeXa6MuY71mkA
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146080676275558367786157208097439347439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 16:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 16:47:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hes.davidson.k12.nc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24373798799244962488055835698649052862736635741541670442065633655895545726156763299996621326662348810491635092025257907500301905011867450808121731412792805714874038467065084356662023944297796930309630167445780165540145681480812804804897698599181710978933371876018793069557399850867049716070059449194123922194415548523956884344701818665702382490073947587159693092541205189696491510007314366381637484945135018575395546079361652794459374438196330938090889134887780934486793321442092829558786738268868417881630188838804017128248624860703879798473386610054397554752564638733725946162683319245329168058670537383740732670077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18c12bcae69d446749be94e76629cfd98a9582c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/vyWV4zHZEMU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/WIgCKdFuPhE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e810600620000040300463044022059ed094dcac33bfb9793b09af1dbe5ae8de7cb94098f141e829b8c4fd08b761102203b169c8b2423a11a7823267af3aa917c16a1a1312eaf184f4bd8f99d582cb76200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e8106003d0000040300473045022100b885f1e0b9258d1a52bbde9bcf0c4cb3ba494ca57116b9d2e1779af591f49e9702207bd371e80e1d806014bf125dbe430128ddbf3d1a13dcbf0b702f52098def897b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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