tierrabonita.eastsideusd.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 86:b4:94:2c:fa:90:49:0b:0d:ec:97:57:24:46:7d:62 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tierrabonita.eastsideusd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 86:b4:94:2c:fa:90:49:0b:0d:ec:97:57:24:46:7d:62
Serial Number (int): 179054170229921169727130785020731882850
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a9:a0:e5:2e:c2:68:9e:af:a1:a0:36:ab:b4:46:c4:b2:e9:3a:17:9b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 16:d7:4d:60:3e:c5:09:5a:3f:60:f0:71:ea:e4:82:2e:48:d0:54:80
Fingerprint (sha256): 17:08:7d:d7:04:06:6b:ce:f9:77:85:3f:ca:93:5d:d9:3c:75:95:e0:b9:1f:d4:44:56:39:77:0e:41:ac:01:21

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/WAEJ07G_QlA
CRL Distribution Point: http://crls.pki.goog/gts1p5/F2PfRkIFgBM.crl

Check the revocation status for certificate tierrabonita.eastsideusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tierrabonita.eastsideusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tierrabonita.eastsideusd.org

Other certificates including the domain name eastsideusd.org

(limited to 100 certificates)
webmail.eastside.k12.ca.us
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.beafriar.com
admin.beafriar.com
tierrabonita.eastsideusd.org
admin.bhs.bcsdk12.org
admin.agbumds.org
admin.beafriar.com
www.eastsideusd.org
admin.agu.ealas.org
admin.agu.ealas.org
www.eastsideusd.org
admin.burtontechnology.org
admin.eastsideusd.org
admin.burtontechnology.org
admin.burtontechnology.org
preschool.stpaulsorange.org
admin.agu.ealas.org
admin.agu.ealas.org
webmail.eastside.k12.ca.us
www.canyonhighcowboys.org
admin.keillerleaders.org
admin.beafriar.com
admin.burtontechnology.org
rembrandt-elementary.vanguardacademy.education
www.gvipreschools.org
admin.aes.pgsd.ms
admin.cole.eastsideusd.org
admin.beafriar.com
blandford.rowlandschools.org
www.eastsideusd.org
admin.agu.ealas.org
admin.beafriar.com
admin.beafriar.com
admin.enterprise.eastsideusd.org
webmail.eastside.k12.ca.us
admin.aes.pgsd.ms
admin.burtontechnology.org
admin.rsu14.org
wbms.bibbed.org
admin.beafriar.com
baxterjh.eisd.org
webmail.eastside.k12.ca.us
cole.eastsideusd.org
www.jisd.org
admin.rowlandschools.org
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.rowlandschools.org
admin.burtontechnology.org
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.aes.pgsd.ms
admin.agu.ealas.org
admin.wms.csisd.org
cole.eastside.k12.ca.us
alvarado.rowlandschools.org
admin.agu.ealas.org
admin.aes.pgsd.ms
admin.agu.ealas.org
aes.pgsd.ms
admin.beafriar.com
web.upedregal.edu.mx
enterprise.eastsideusd.org
eastsideelementary.eastsideusd.org
admin.corey.bpsd.k12.ca.us
admin.aes.pgsd.ms
admin.aes.pgsd.ms
admin.aes.pgsd.ms
church.stpaulsorange.org
admin.northside.wisd.org
admin.beafriar.com
admin.agu.ealas.org
admin.bhs.bcsdk12.org
admin.beafriar.com
columbia.eastsideusd.org
www.eastsideusd.org
webmail.eastside.k12.ca.us
www.eastsideusd.org
admin.agu.ealas.org
admin.agu.ealas.org
bgh4.org
admin.burtontechnology.org
webmail.eastside.k12.ca.us
admin.beafriar.com
admin.burtontechnology.org
admin.burtontechnology.org
ovhs.info
admin.beafriar.com
southprimary.kiskiarea.com
admin.agbumds.org
www.ranchoalamitoshs.com

Certificate

The complete raw certificate details for tierrabonita.eastsideusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WLGb506kBdeHOBJ+1Xy
A4dNyCLxqWG0w4TYVrrIZOwhyRH5hMtKpbxqGtAsHSnT/F8Sa19TEiPBuv5rioOZ
whvhiP1R8chtDd7yzdwaEkp/vrFJLMNUQwuIaFgXC6dX6LdAP1bajQrJo4mKudFP
L8dkVU3U1zJvpZ1SWClgGVYjj7UXRXKu+AxGmQFhAm1mefrxlXEv3f+vrcsrnyB+
7dZiBUNGaXaQOrOKvalSeGtVuZcT2zKpnZ+VZOGsvRLaIBKwpQ0VWWDMWZv/oXrn
KFSxNANc8V1IUuTjBgGRcagTGgGcraSZtn90e3HeC6mE9QUR2tbXG2DgRpvOUnGd
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 179054170229921169727130785020731882850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 02:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 02:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tierrabonita.eastsideusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27442420014829128803008857279042554789184331068736243809861094549949896905762785399079060178608827786604309330727186833950382745820306573588463535904569150885765620973002796439288914276607994781763863466618375054601431738325728407616330168585120191240526875177435740387636353047243434889786709321135984892325759890059284904910314152284726029080656707136874451052613254272042141102691247683805857625696247241118584450161172113117504572609296110291477638275199317891011486793195606304597642850483109202446533486469250694611367059090776915642969249475784729068266034518149877530807993787964178762633482862774920819088861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9a0e52ec2689eafa1a036abb446c4b2e93a179b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/WAEJ07G_QlA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierrabonita.eastsideusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/F2PfRkIFgBM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bfa25fac90000040300473045022100ad62d7a1fce4a9fd4b8b2d12398433deff0c7e99b9be5e41aea92c05f307e798022013148c27bdc987478c81dd5a00cbbcefd47acac3085461397a9bb56f22b678790077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfa25faa80000040300483046022100a6212172b78c4a54f29c0b7425fa420a85eeccfad9fd6baac7bf270c435d3c77022100f6de1d360e99964cdc13ed8a555ac01dad3bcef283378b9e5afbe3d5707f6505
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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