bakersfield.kernhigh.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 96:21:65:71:85:2f:6a:0b:0d:a9:05:91:b7:17:4d:ae was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bakersfield.kernhigh.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 96:21:65:71:85:2f:6a:0b:0d:a9:05:91:b7:17:4d:ae
Serial Number (int): 199557602681440189772402006985524333998
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 25:21:72:ca:70:d4:84:b8:76:10:b1:e0:67:f4:2e:29:8d:09:d2:89
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): ad:9e:f9:fc:34:06:53:2a:90:25:23:1f:53:1e:38:a2:a0:15:11:bd
Fingerprint (sha256): 16:27:0c:fc:bd:cc:97:8d:5a:dc:85:f0:05:1b:a4:3c:4f:ae:92:e8:4a:27:56:79:6b:25:4c:2f:6a:80:97:66

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/q0ecUiMabP8
CRL Distribution Point: http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl

Check the revocation status for certificate bakersfield.kernhigh.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bakersfield.kernhigh.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bakersfield.kernhigh.org

Other certificates including the domain name kernhigh.org

(limited to 100 certificates)
admin.arvin.kernhigh.org
www.chms.mx
kernhigh.org
kahuluischool.k12.hi.us
www.cerratosd.org
admin.aes.fentressboe.com
admin.annasmithelementary.tooeleschools.org
centralvalley.kernhigh.org
studentsupport.kernhigh.org
mail.kernhigh.org
webmail.kernhigh.org
www.peachtreeridge.org
arvin.kernhigh.org
staffconnect.kernhigh.org
stockdale.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.annasmithelementary.tooeleschools.org
fin.kernhigh.org
highland.kernhigh.org
cte.kernhigh.org
vdicb.kernhigh.org
miramonte.kernhigh.org
foothill.kernhigh.org
admin.annasmithelementary.tooeleschools.org
gvhshelp.kernhigh.org
fs.kernhigh.org
bakersfield.kernhigh.org
centennial.kernhigh.org
admin.mozart-secondary.vanguardacademy.education
kernhigh.org
nuhshelp.kernhigh.org
vdi.kernhigh.org
webmail.kernhigh.org
fin.kernhigh.org
shafter.kernhigh.org
admin.arvin.kernhigh.org
staffconnect.kernhigh.org
filetransfer.kernhigh.org
filetransfer.kernhigh.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
liberty.kernhigh.org
www.ps086.com
north.kernhigh.org
staffconnect.kernhigh.org
admin.aes.fentressboe.com
icecube.kernhigh.org
cerratosd.org
goldenvalley.kernhigh.org
admin.ivelem.apluscharterschools.org
rhshelp.kernhigh.org
admin.cca-denver.org
admin.annasmithelementary.tooeleschools.org
admin.apluscharterschools.org
miramonte.kernhigh.org
vdi.kernhigh.org
fs.kernhigh.org
dohelp.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
ventureacademy.pylusd.org
filetransfer.kernhigh.org
admin.apluscharterschools.org
bakersfield.kernhigh.org
admin.bas.kernhigh.org
centralvalley.kernhigh.org
admin.akinseagles.org
kvhshelp.kernhigh.org
south.legacyprep.org
admin.cca-denver.org
filetransfer.kernhigh.org
whshelp.kernhigh.org
admin.cca-denver.org
admin.spxtulsa.org
www.sfrschool.org
admin.arvin.kernhigh.org
lib.kernhigh.org
independence.kernhigh.org
airwatchserver.kernhigh.org
shafter.kernhigh.org
kernhigh.org
webhelp.kernhigh.org
*.kernhigh.org
frontier.kernhigh.org
shhshelp.kernhigh.org
foothill.kernhigh.org
shshelp.kernhigh.org
vwhshelp.kernhigh.org
kahuluischool.k12.hi.us
admin.veritasca.org
icecube.kernhigh.org
hcm.kernhigh.org
staffconnect.kernhigh.org
vdicb.kernhigh.org
admin.apluscharterschools.org
filetransfer.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.church.spxtulsa.org

Certificate

The complete raw certificate details for bakersfield.kernhigh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQVlGv2FjJsyAutfwEzS
tZYwdFpVnbwWTzcI4RNrqJCBgxtI/QACykoZuuoZcVYXmSRuapfyH1W8QLCHwHkW
Ka4MrihV2GWLGzo7YVTbvxICfImqbfAv+44Y5zEzgFfI9psKTjWpJ95geypdrO52
fIpd+GCmKR7A7+i+KxU3h7uFwhw0DJZ3iZOHRIsbTSQ7HTfcvTg7hHB7qrx24Ja3
QQZ4mOAwe67bC8hWWLxOCFFQmeytN6MCCjmg5bJ46b4aGFh8vuWUpB2W8jwCrzhe
IadVl46pNQhIEiq7ceE7/tkSOhf4AhBoDLSV0v1aQw7Yq6fP8Rx/RXMxZwBQCGA3
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199557602681440189772402006985524333998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 05:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 05:47:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bakersfield.kernhigh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21841887104718054056979168739756749900897149512337823072653098709432027195103540550720002029404488730300910149255392208887272192109653081553771547300902244672187346234032055441991958943241735199812368145430453802192586079710667253469203819101292381304621101173167770709198824628197259227279374825171885084809461192969054497807346758360700464746389362620328635478940756734791741221140976820734455483876985310067197601475620190447763259394634214612842806970304264805075344789209943956626679968141195541468198584215528508514299702950590856222118285600453311236956049852625877988089873906945316360940997928000546884564857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							252172ca70d484b87610b1e067f42e298d09d289
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/q0ecUiMabP8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfield.kernhigh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001888f75f552000004030046304402207363b0eb7d2dc2f5c717cb1d1534eabfb5779f43445c35b8b5da1f76e3dca19202200af7d44b8a8ed352e47e02fef8a0a1be6f199b41b94ace9e5c21f3c58b688963007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001888f75f5770000040300483046022100d52154e9c42dd834afa7796e8d0b678ed92d7ab38f3feeff87c73f02ba577cd8022100dd141b95a8e7e1980ee866ec58d1c6d288be74e815246b710fbae252b8c1db9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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