kanuhawaii.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number de:0f:7f:96:04:66:6a:e8:0e:8c:fa:42:cb:d6:db:8a was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kanuhawaii.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): de:0f:7f:96:04:66:6a:e8:0e:8c:fa:42:cb:d6:db:8a
Serial Number (int): 295169087268735142425293974871473576842
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b7:af:48:ac:31:54:a4:a9:80:f5:82:b1:ab:75:7d:a4:ff:c9:b8:bb
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 7b:83:9e:e8:6e:8c:67:b3:d3:99:fa:7c:0a:c3:63:a2:4b:a3:fb:20
Fingerprint (sha256): 20:bb:c8:b3:7a:51:0d:21:5d:2e:87:1d:ed:94:82:83:aa:9b:f9:81:cd:39:1e:df:99:70:7e:06:82:cd:d5:78

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/dXbPRoydnx4
CRL Distribution Point: http://crls.pki.goog/gts1p5/5YU6IEGMGb4.crl

Check the revocation status for certificate kanuhawaii.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kanuhawaii.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kanuhawaii.org
*.kanuhawaii.org

Other certificates including the domain name kanuhawaii.org

(limited to 100 certificates)
kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
www.kanuhawaii.org
www.kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
www.kanuhawaii.org
www.kanuhawaii.org
www.kanuhawaii.org
www.kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
www.kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
www.kanuhawaii.org
kanuhawaii.org
kanuhawaii.org
kanuhawaii.org

Certificate

The complete raw certificate details for kanuhawaii.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ERG/FkLlCpYsj6UF59
q5NDAs3pI31BZxxaS8JRl55aHj+ivs9HKlnDemzlDczCsw2Y/ZXhlm24h2V2Z8xr
NnzG4a0ExlJEhroMAu8ylsKNdX363CP/h5N8SW1gWEIImWlTa4lpFK0NjypPh9tU
zbQ7i9bDi6P2eFACFsK30yHOKNQNa96DqtPgdUHiingFf1G3EcMkkALpGWx/aMGL
4zQqiDA+zJ7ApmzY+D8md0fNcZuWhqWFVemNf5Dc6ue2lRHDvKnirCwORl+b87b+
91f4cSzAYHvET4GxGBOdaD9rsNTl5Iea/idQth9mbIM2L8F6KCfm3t5ej/6/zYm0
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295169087268735142425293974871473576842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 08:10:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 08:10:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanuhawaii.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22636632134001021789924043997743856889942884317103273312845752055848657667103193943643961489206742132667048365434369342069408317453303416360355291381406978876917992061056972738435513503115014991636884923858947717517706823603589461881648467895287830867867755228803355487684981297141299699141462393628060707942924278470773856737274117907415948991557692837128706254887270509243018320025307795613065127365461254981041893687591434242480553101642431035391920969337740879153321193275355863779361417646296267702651739837054453535889373177302826175983724094898926704580510943722223188087677059999553167674371918663530698093719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7af48ac3154a4a980f582b1ab757da4ffc9b8bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/dXbPRoydnx4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanuhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanuhawaii.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/5YU6IEGMGb4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf2a2dfee0000040300473045022000a62426a07a1c5cdc4fb5a29aec065831eab2307855923dcb04aeb5871a6aeb022100aafc10336d4b83d9d3502672aebf0b34b162876fd963f5318643bbf2b5adef6500760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cf2a2e1100000040300473045022100e87a0c9d180f86b344c50e9dd3376f1d0503ade2f08cda36564582100547587502204f9d72e7f6c8007b80c853fd3b3bd443e31a7117661205e5345d0fb6194d9bf7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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