seafordbluejays.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f4:d6:16:07:98:0d:b9:aa:11:4e:be:b8:e8:23:61:f8 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seafordbluejays.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f4:d6:16:07:98:0d:b9:aa:11:4e:be:b8:e8:23:61:f8
Serial Number (int): 325443229313912658341126546805825430008
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 29:71:56:64:88:a8:1e:5d:12:c9:41:5b:71:d6:3d:66:45:e4:ca:d5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): e5:d5:e3:ab:37:21:1d:12:a0:d9:35:58:62:26:95:6d:b5:0f:d6:c4
Fingerprint (sha256): 24:af:16:02:94:6a:90:37:17:94:f2:d1:89:d7:76:21:83:7d:1d:0e:ad:44:84:04:f3:66:d1:39:12:d7:1f:3f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/O4yZDBkhRAc
CRL Distribution Point: http://crls.pki.goog/gts1p5/fN7laufJw1Y.crl

Check the revocation status for certificate seafordbluejays.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seafordbluejays.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seafordbluejays.org

Other certificates including the domain name seafordbluejays.org

(limited to 100 certificates)
sms.seafordbluejays.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
www.seafordbluejays.org
bes.seafordbluejays.org
sms.seafordbluejays.org
shs.seafordbluejays.org
sms.seafordbluejays.org
www.escuelamexico.com.mx
admin.clift.wisd.org
ces.seafordbluejays.org
sms.seafordbluejays.org
admin.bes.seafordbluejays.org
admin.hartsacademy.org
seafordbluejays.org
wses.seafordbluejays.org
ces.seafordbluejays.org
seafordbluejays.org
seafordbluejays.org
www.infinityhs.org
admin.delta-summit.chsd218.org
admin.sms.seafordbluejays.org
shs.seafordbluejays.org
admin.ces.seafordbluejays.org
admin.bes.seafordbluejays.org
wses.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
bes.seafordbluejays.org
fdes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
tmsa.org
bes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
admin.llesat.org
seafordbluejays.org
wses.seafordbluejays.org
admin.finley.wisd.org
seafordbluejays.org
ces.seafordbluejays.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
fdes.seafordbluejays.org
delta-summit.chsd218.org
bes.seafordbluejays.org
admin.shackelford.wisd.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
admin.seafordbluejays.org
northernheights.adsb.on.ca
ces.seafordbluejays.org
catonschool.com
seafordbluejays.org
www.seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
seafordbluejays.org
fdes.seafordbluejays.org
wses.seafordbluejays.org
punxsy.k12.pa.us
seafordbluejays.org
shs.seafordbluejays.org
www.hartsacademy.org
sms.seafordbluejays.org
goldenvalleyhighschool.com
wses.seafordbluejays.org
bes.seafordbluejays.org
bes.seafordbluejays.org
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
shs.seafordbluejays.org
seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
sms.seafordbluejays.org
seafordbluejays.org
www.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
ces.seafordbluejays.org
wses.seafordbluejays.org
fdes.seafordbluejays.org
northside.wisd.org
seafordbluejays.org
seafordbluejays.org
admin.northside.wisd.org

Certificate

The complete raw certificate details for seafordbluejays.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKMDf6Kgs1l8E7jV8qVe
WkwbgjqvFEscDehpHvcZo62HFxPBnxPiBrnt24UfMl5MvqJGvquv4/zRwy1mID1X
pm9IxXo+cQbiQrBj6S7+k6I4u15BfmmCPtrSckL5uYUvwClRNOGtjVXueIBlUgTJ
7CC5zFBMlH6PqcCAfDUAGEhIgAg/5/BcZzJ0MiptUmSe4sW+AszTre+Zuce/USY7
EpyOOksuojqqfgkFILSwnkPjMf3wVIypUxmEpX4M586hiHrDQIbh0wQGMuWyZVQQ
CGv7MwUrVUDzoZX+ZrlKZx/khWMB+cz33MorFKHJRpCr4aU2sZdwfdPIRUQ9zrN6
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325443229313912658341126546805825430008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 04:10:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 04:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seafordbluejays.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19773560609553676330728521048392262650486846105144934852375063886405148032025631269916366765205994620721280595730819463469710428180944633036880208925914069987973412938178615244831574488080546634186168301954440219898522064775076525688541435577514160445145188588983026300841866762431526987431302503611419526054956836638793822962634586084038378983501181713135901411130086701705770101278340016017395543309911879032482858163981585589650513368366518713214066849972123410312780353758190337680984509992305204752599318907678034121978945094527508606354332936669967616509639101164972698860209755596325442272388974778845676927737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2971566488a81e5d12c9415b71d63d6645e4cad5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/O4yZDBkhRAc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordbluejays.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/fN7laufJw1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018acabf2fa60000040300483046022100d4352aa53013f4692dac99fc6a262cc54b71226a8e6c108843af0cfd7d04380b022100e65e2af42084993eaf1aeb17b308be1aa5a93da26e50cce06c3aefd9e62f46a10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acabf2fdc000004030047304502204fb2b7c0c1e83336d6e43fbb2e99f4ba53f8a0ceb07eadf05fc0d63d9e2d0a1c022100df9dc9959429155a6036afa9b1339e512cf1be4dda9fd7376e4e8f6eb3b877ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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