rowlettacademy.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f9:e6:39:91:e8:23:84:70:0d:f5:17:2e:01:25:8a:b0 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rowlettacademy.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f9:e6:39:91:e8:23:84:70:0d:f5:17:2e:01:25:8a:b0
Serial Number (int): 332173166885181495522808466814766779056
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 17:b4:23:8a:09:90:1a:10:e3:64:1c:18:90:6f:fe:5a:20:6a:b0:3f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): bb:d6:ab:f2:52:fe:bf:38:77:4a:7e:e9:56:b1:e6:2f:b8:ad:1b:e0
Fingerprint (sha256): 1e:e6:5b:29:ae:40:97:0f:5b:70:e1:68:27:1a:a3:3f:bd:9d:79:52:fa:66:b6:1a:5c:ab:e0:49:53:98:06:d8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Me6KTCWpm5c
CRL Distribution Point: http://crls.pki.goog/gts1p5/OEZ-zGIkVNM.crl

Check the revocation status for certificate rowlettacademy.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rowlettacademy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rowlettacademy.org

Other certificates including the domain name rowlettacademy.org

(limited to 100 certificates)
icacristoreyworkstudy.org
rowlettacademy.org
admin.veca.gocats.org
admin.rowlettacademy.org
rowlettacademy.org
www.rowlettacademy.org
www.huntingtonisd.com
admin.allison.pusd.org
www.shulamithhighschool.org
www.hilltopprep.org
rowlettacademy.org
admin.independent.cv.k12.ca.us
okf.sd53.bc.ca
morelandpreschool.moreland.org
ms.moodyisd.org
edwhite.org
es.kilimanjaroism.com
admin.echs.hcisd.org
ngc.lancasterisd.org
admin.soar.southredford.org
www.morseschool.net
www.ohds.org
bbes.comalisd.org
admin.alma.cv.k12.ca.us
pueblonuevo.org
www.ghschools.org
burney.hattiesburgpsd.com
rowlettacademy.org
www.ps287bkinnovators.org
www.frederic.k12.wi.us
admin.allison.pusd.org
inglesdurkheim.edu.mx
academy.comalisd.org
painesville-city.k12.oh.us
academy.comalisd.org
huntingtonisd.com
www.rivercrestcolts.org
admin.woodley.hattiesburgpsd.com
frederic.k12.wi.us
www.glcsd.org
academy.comalisd.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
rowlettacademy.org
admin.pueblonuevo.org
admin.allison.pusd.org
rowlettacademy.org
www.bromleyeastcs.org
admin.milam.hcisd.org
alma.cv.k12.ca.us
admin.lng.otsegops.org
highschool.homercenter.org
mishpms.hpisd.org
admin.athletics.hattiesburgpsd.com
admin.creekside.cv.k12.ca.us
academy.comalisd.org
admin.mlfa581.com
admin.allison.pusd.org
academy.comalisd.org
rowlettacademy.org
academy.comalisd.org
www.pueblonuevo.org
rowlettacademy.org
www.lvsd.k12.pa.us
www.rsdeaf.org
portacres.paisd.org
www.youngachieversschool.org
admin.allison.pusd.org
admin.allison.pusd.org
www.coahomak12.org
admin.painesville-city.k12.oh.us
vannoy.cv.k12.ca.us
admin.ahs.cherokee.k12.nc.us
admin.wilmer.goldenruledallas.org
admin.huntingtonisd.com
bellamy.dover.k12.nh.us
admin.msd120.org
www.gocats.org
admin.hhs.hattiesburgpsd.com
admin.milam.hcisd.org
academy.comalisd.org
admin.travisranchschool.org
gp.goldenruledallas.org
www.mlfa581.com
cms.comalisd.org
admin.palomares.pusd.org
www.benedictineacad.org
www.irlandesmexico.com
cad.dcs.edu
admin.marshall.cv.k12.ca.us
hhs.uinta1.com
mechs.comalisd.org
www.kellyhighschool.org
bde.dcs.edu
admin.palomares.cv.k12.ca.us
www.edwhite.org
www.hokulani-elementary.com
admin.inglesdurkheim.edu.mx
admin.vannoy.cv.k12.ca.us
stanton.cv.k12.ca.us

Certificate

The complete raw certificate details for rowlettacademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoB1JoAJQc//hWAh7Dcb
aG5gQymk9lYS1X3jrT0Rl6bDlkZ5HlZZ93vCxc7LR1QAAyVofC0/hg2y3RrZHwyW
HwFK3jYrf22TutjBEfuYLMYQvaOTZznMwIXkzU1CivZQbbSO2HFxA4L9Pp8CwSQ6
KKQ2d+bC0/lW27NOqBBRFoAj/x1iIlQWu5JvV5biJ9yTiGHgQ4kvgtjd73rAnCiI
APxmvWs4vsEw7Iz7uD+5EBnsxCiY3qJmy1mP1qn0uxAbnL7LZ4pddzE65r81OwJa
7v9kwnlOWdVsDpYoCQZFn1uihwmvy0/1p/r7HovgJo1ZRbZJthvZhkS0ujXnf69d
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332173166885181495522808466814766779056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 21:35:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 21:35:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rowlettacademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23543669536369033784249847144290825858527202092726616659468514747548135326423979212708621750730169707680027564242209157308720532442030352707069014386793459737621510353162611109275690694113920339293195379538919537979638265997953629275915742612871625814412615375283349743143606173399930537560858912558226665892821237086972920379920280200576193475969577986278769597645670970945100013909004774954882850648453811584216684118572819666362498931228355191978640645473269759039374707992117296703106115065534393077711914950839466487378816413742445722187103524971347746123461779374290837659887541026685759415601290149032558026121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17b4238a09901a10e3641c18906ffe5a206ab03f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Me6KTCWpm5c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowlettacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/OEZ-zGIkVNM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f88b2a1690000040300483046022100b190ee1ad45d2b62bb421d587c0d1aab8c0f35db3321e8b4fe6cea3906b85f18022100a83b531a3649d34477a3ff2b35b67a8bf8050aaf68325cc9fa1fd0c43b58097b007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f88b2a19e0000040300473045022077369ac5386b6c11158c58724fcd6449de0fda6dd949560287f4cdc3694f3a10022100f30db52153a3cee2dff47d9dab2b9a0dc574e79940e94abde543dd020cf5876b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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