lorenaisd.net

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f2:cc:15:a4:13:84:80:ec:13:14:21:ac:df:4c:93:80 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lorenaisd.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f2:cc:15:a4:13:84:80:ec:13:14:21:ac:df:4c:93:80
Serial Number (int): 322732842469151477315882654951982011264
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 45:d6:6f:12:b7:53:00:78:40:cd:ae:bd:a6:e5:81:9b:79:06:bd:d4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 52:21:34:9a:da:41:d1:af:1d:20:5d:8c:fd:5a:c0:41:a7:b4:8d:86
Fingerprint (sha256): 13:4b:e1:96:b1:eb:1f:93:2b:be:1b:a0:a4:8d:a2:93:48:b0:7d:a8:6e:d0:e0:3a:d1:ab:ac:ed:46:d5:08:84

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/wVlhdvbr4W4
CRL Distribution Point: http://crls.pki.goog/gts1p5/jqYGehfdDa8.crl

Check the revocation status for certificate lorenaisd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lorenaisd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lorenaisd.net

Other certificates including the domain name lorenaisd.net

(limited to 100 certificates)
admin.almadinah-school.com
northprimary.kiskiarea.com
www.automotivehs.com
admin.eastprimary.kiskiarea.com
186streetschool.com
lorenaisd.net
www.holyfamilycatholicacademy.net
lisd-psp.lorenaisd.net
acldtillotsonschool.org
cte.mvusd.net
acldtillotsonschool.org
acldtillotsonschool.org
lorenaisd.net
lorenaisd.net
admin.rembrandt-elementary.vanguardacademy.education
www.hfhsglendale.org
admin.almadinah-school.com
centroculturaljalilgibran.edu.mx
phs.pusdschools.net
acldtillotsonschool.org
benchmarkbobcats.org
cra.freeholdtwp.k12.nj.us
admin.bands.dekalbcentral.net
admin.aes.acsc.net
lorenaisd.net
admin.es.lorenaisd.net
acldtillotsonschool.org
admin.benchmarkbobcats.org
186streetschool.com
kernhighnetwork.net
acldtillotsonschool.org
ms.lorenaisd.net
www.humphreyscountysd.org
www.stnorbertschool.org
lisd-psp.lorenaisd.net
186streetschool.com
acldtillotsonschool.org
www.southernwakeacademy.org
mis.edu.mx
shs.lskysd.ca
www.saintjames.school
admin.ersk.acsc.net
lorenaisd.net
admin.ps.lorenaisd.net
www.madisonmonterrey.edu.mx
admin.acsc.net
admin.bands.dekalbcentral.net
www.kernhighnetwork.net
acldtillotsonschool.org
admin.chuckey.greenek12.org
admin.centroculturaljalilgibran.edu.mx
2.southampton.k12.nj.us
admin.ps17queens.com
acldtillotsonschool.org
admin.ups.lskysd.ca
harpethhighccs.net
coahomak12.org
www.rosemont78.org
admin.acsc.net
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
186streetschool.com
www.mstmaatroosevelt.org
admin.sherard.coahomak12.org
acldtillotsonschool.org
acldtillotsonschool.org
acldtillotsonschool.org
www.ckchicago.org
2.southampton.k12.nj.us
icabh.org
westcheathamccs.net
admin.semperaltius.edu.mx
www.stjosaphat.net
acldtillotsonschool.org
admin.benchmarkbobcats.org
bbjh.magnoliaisd.org
lorenaisd.net
acldtillotsonschool.org
admin.avrlacademy.org
oglesby.cps.edu
ckcs.lskysd.ca
2.southampton.k12.nj.us
lisd-psp.lorenaisd.net
admin.rosemont78.org
lisd-lib.lorenaisd.net
www.swake.org
site.waldendos.edu.mx
ups.lskysd.ca
www.cardinalritterprep.net
acldtillotsonschool.org
www.irlandesmonterrey.com
www.cardinalritterprep.org

Certificate

The complete raw certificate details for lorenaisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbQVYCKBZT2vV+T6pALN
1hBevcPVLTVxiQbi9dZBfFJ9fBuYNTmgkKcy4KRUiVS12jh+fv7wSu8CwHcUvgeD
pMd8kgcwjEzdcQzyzpToMb3mesQSp6v1qd7rmi/IEO9CRru2KGhoTXNITzYyx/rb
pWZJCJpIH8I7wbi00biusqAbbntUilYbjHYUV/djBhhfpn9UnrGkp0cBTo78dbSG
pr0GVizOx/V0ApspR5fQ6pf+OPFS6obhPocECgelllsIkr8luDTEvFMJl6NKj0lM
aCm9BQcK4v6OTs1pUJtnN2aQjwa1Q+9JMxTpi0wrYTUKUY7wO7eyIA3QzdtOFTql
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322732842469151477315882654951982011264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 05:20:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 05:20:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lorenaisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25967655000693850716421558590148952752820597271296325586794222837415707952651206029764056411463274288928550980169849060080328427733976884472230120537020924625665232665320159435881605252639600257000038246140932809451770890530808741357310433735954726592993817693720578333973098151948219296828710916695281792951132439482563903334988393621452212445756851003758962173402704962041587878602791531925731440163389011382719414895959094849197692161860088928545499791749391597251484498102301454956081301262838345491287083286497012801206512006832982046140995375361008859593076937763362916475940701647787976844393385269198059119889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45d66f12b753007840cdaebda6e5819b7906bdd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/wVlhdvbr4W4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenaisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jqYGehfdDa8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d2587977800000403004830460221009e999ebbd80a5f6fd295aeda5e950c13fd55189fccb0b8507be07b9b1f2ed093022100888540c6c845aafc4124c13ccdce162fde4fdaab627da4c3483367e66f987976007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d25879744000004030046304402200100e09c93a58893e50eef5fffd50fa7c3a9b351746717db6e89c99915bba9d702203c72f6c76d6ef2175e3992b26e82491fb3f011ed0999f131cd504299ee7c626f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033817eed94c2a7169febb5978db290d6e2470f501fd63cec875c6a763cafc4727db821c50cf2029b4844ba46289854083d05b0fd9f4e96e4ce52c8d57b3eff868f7ab582b157713e52f1fa6c11c017fd58b612093934c43a25238805253ad434bbc08008d2da8379b10e26938cde3c9ff91ba15a222839b5d6a00c68a05dad4f721e43d03c8590003cd8b118e565f6dabaa81e92f317f555befff51469a5e44ba30d3f1ce77623969e7f4d760cddb22f808b294c322b47a0a685766e88c10bb0c5451bbd6d6128516004258c1fc069480722ca9fbc579628dc8a822990655cbf7af52ab3e8dc28a50f2ff4dc9d6e1f2fbaf398b795422f98cbf84ced305b847b