fosterstars.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 0e:79:b4:34:72:70:06:4f:11:67:6d:14:1e:8e:43:14 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fosterstars.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:79:b4:34:72:70:06:4f:11:67:6d:14:1e:8e:43:14
Serial Number (int): 19241114849881365010303300566820733716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:e4:8f:c4:f8:28:75:12:8f:87:7e:30:e2:1f:44:f2:ae:7e:39:d8
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 8f:07:a9:9e:8e:70:e9:c6:0a:34:24:b8:8f:d6:88:cd:50:8e:b3:a7
Fingerprint (sha256): 1f:a4:b4:bf:63:7c:53:9c:26:28:f4:8e:f3:be:51:82:35:71:b5:9d:63:17:29:3a:20:37:90:fc:dc:0d:c8:ce

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/SXjh97jEZak
CRL Distribution Point: http://crls.pki.goog/gts1p5/lyHNLHo1elk.crl

Check the revocation status for certificate fosterstars.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fosterstars.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fosterstars.org

Other certificates including the domain name fosterstars.org

(limited to 100 certificates)
www.san-saba.net
admin.mtsd-vt.org
www.fosterstars.org
admin.lcisd.net
fosterstars.org
admin.aerostem.org
admin.bentonms.org
admin.bentonms.org
www.bsd100.org
admin.bentonms.org
www.nuview.k12.ca.us
bis.bayfield.k12.co.us
san-saba.net
admin.bentonms.org
admin.aerostem.org
admin.san-saba.net
admin.bentonms.org
admin.aerostem.org
admin.bentonms.org
admin.aerostem.org
mes.mtsd-vt.org
admin.aerostem.org
www.mammothusd.org
www.rbuhsd.k12.ca.us
admin.aerostem.org
cusd1.com
nes.nuview.k12.ca.us
nha.lcisd.net
fosterstars.org
nuviewusd.org
admin.aerostem.org
admin.mhs.mtsd-vt.org
admin.stischoolcypress.org
admin.bentonms.org
admin.aerostem.org
nlmas.org
admin.aerostem.org

Certificate

The complete raw certificate details for fosterstars.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHsOxhb3C4EFpcUDlwQ
YcjgprPtuRMAPIsQ2CBrXN+TDF+29A8lyUo1gOyyXon9Xmd4k/NEVCeQIFk3iebF
Xff4fwqXF2l4ZV48kZM16Z1CnquedZyc9i+HVKUDNf7CrDm+AfX1EhK50pbD7jQw
S09QjPeodY8A2r65NceRNy/5hQ07nAjhRmOnoXSIaFUwu3Ry2bU6JaByOrw8I3bN
EE2QvvL0KkvZfPpVVEENelpFZeOOqK0kNembAMnenjueHxWUEzYO8vR/OjaCWQnv
WcZV8doT0wmIT2jEXoyDqC0MVbuYSCjPZOxLMjnlZ0Me5CRWOd9/F0hhHTeZrub/
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19241114849881365010303300566820733716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 21:15:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 21:15:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fosterstars.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20956506780904865321861790466816959327142390341045064775678261515748547427994721957068181228754386095195242416207883572242261015411182322908236291753817081874326210032923144729783212556509382853522982111455235900504640170893568625343605709861369096936123668875035877880671514274623255054438449826016940615303373072448880194231571669219256328248429195050935940226385919932106218047464264031119022177438109276883225344126827227963864573989488218505867706926111776173177712686352552810451519233248840159173406782443909392393534767617935409213374127150073680091729601901247793198573864447120390794307046654748681048620859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60e48fc4f82875128f877e30e21f44f2ae7e39d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/SXjh97jEZak'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosterstars.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/lyHNLHo1elk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d66be3ac20000040300473045022100e30b631a58672823ad2caaba368dc7ececd157781156ff662c08a8edf3d72aa20220488213d0c5482deb8d8da9060bbdc0c3e76d66903754467aa689294755bd53d600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d66be3ac10000040300473045022100c34bb2b2f758d2065de5fd5a0edb3a0e85d052437d85fdbd46a23fb9f75baec702207849ccb7ad167065f1e661ccd8cb346989516fc7db136a50ed42d25d8b27e37b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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