seafordbluejays.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 1e:b5:27:9c:50:51:96:2f:11:d3:eb:72:4b:b6:ec:f3 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seafordbluejays.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:b5:27:9c:50:51:96:2f:11:d3:eb:72:4b:b6:ec:f3
Serial Number (int): 40817449003367607628611851746780048627
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 05:12:fb:23:a5:9a:6e:81:6f:97:0c:eb:6e:57:7b:14:8d:1b:98:3d
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 6f:f0:39:df:61:d4:10:50:3a:ce:9f:fb:5b:15:d7:9c:88:97:92:55
Fingerprint (sha256): 26:bf:6c:ce:7a:9d:ed:45:d1:12:bb:bb:5a:6e:1f:8c:7f:81:1d:23:46:26:ba:ab:97:19:e5:2e:37:d4:be:1b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/w7SUKWGFtsc
CRL Distribution Point: http://crls.pki.goog/gts1p5/fQi9C1q3EEc.crl

Check the revocation status for certificate seafordbluejays.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seafordbluejays.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seafordbluejays.org

Other certificates including the domain name seafordbluejays.org

(limited to 100 certificates)
sms.seafordbluejays.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
www.seafordbluejays.org
bes.seafordbluejays.org
sms.seafordbluejays.org
shs.seafordbluejays.org
sms.seafordbluejays.org
www.escuelamexico.com.mx
admin.clift.wisd.org
ces.seafordbluejays.org
sms.seafordbluejays.org
admin.bes.seafordbluejays.org
admin.hartsacademy.org
seafordbluejays.org
wses.seafordbluejays.org
ces.seafordbluejays.org
seafordbluejays.org
seafordbluejays.org
www.infinityhs.org
admin.delta-summit.chsd218.org
admin.sms.seafordbluejays.org
shs.seafordbluejays.org
admin.ces.seafordbluejays.org
admin.bes.seafordbluejays.org
wses.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
bes.seafordbluejays.org
fdes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
tmsa.org
bes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
admin.llesat.org
seafordbluejays.org
wses.seafordbluejays.org
admin.finley.wisd.org
seafordbluejays.org
ces.seafordbluejays.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
fdes.seafordbluejays.org
delta-summit.chsd218.org
bes.seafordbluejays.org
admin.shackelford.wisd.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
admin.seafordbluejays.org
northernheights.adsb.on.ca
seafordbluejays.org
ces.seafordbluejays.org
catonschool.com
seafordbluejays.org
www.seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
seafordbluejays.org
fdes.seafordbluejays.org
wses.seafordbluejays.org
punxsy.k12.pa.us
seafordbluejays.org
shs.seafordbluejays.org
www.hartsacademy.org
sms.seafordbluejays.org
goldenvalleyhighschool.com
wses.seafordbluejays.org
bes.seafordbluejays.org
bes.seafordbluejays.org
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
shs.seafordbluejays.org
seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
sms.seafordbluejays.org
seafordbluejays.org
www.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
ces.seafordbluejays.org
wses.seafordbluejays.org
fdes.seafordbluejays.org
northside.wisd.org
seafordbluejays.org
seafordbluejays.org
admin.northside.wisd.org

Certificate

The complete raw certificate details for seafordbluejays.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QToK1Eg98h+oIkwd9G
4Mw4Cz4uHOGHQvzvNYo+OPS0Aq9wTLWkvP+4+vf+k1FVD7f0q8wwSVgCDsQ3XbnH
lg8gyDLcXYkNMNjbQaMRVA6QyTQaubByzTGARyLqGE+3xjPQGK2YXPFFam+F1zIS
ntx39JbZfmStD8RJsRLfXwtqhp7o+91PBWjsh7wxEhVNGiV3Vngwx+BVIKsuyBts
Amr+1XsIHOAR/DHWh1wzjruteqaL27wILVt+YlPtfCuwZWygt3w0SouBTr3RkfoR
BmKOfYyihutLa3gMikNZLh9MQ1puV5mQb6pOj9+rD2AF36jbyhnu+Zq8EyxWMal8
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40817449003367607628611851746780048627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 05:24:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 05:24:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seafordbluejays.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26677742099280031474891680585640892253517237721132449923462130875069692802709524246545775258484944485195188893676516327124523537468736907295869243665223086416574578673846474910591765728479591895718474753267844591706413858870067690874621639603939325105387866423165815737049196463198475496661212342350432485211536234712818097665971208712512609986874256285155841568032571464427541192996141823849000590167904499919231885153558308556358727445080644869118269083693421821925339216681415816677337521607028470836466342008876350822507022131286299636449413037428179979244859685430275173200235515441698310058008453949579370003533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/w7SUKWGFtsc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordbluejays.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/fQi9C1q3EEc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d2ab0e9910000040300473045022100a944e28d5c5b461b12cb25bed0bfa7a95f6243074b06c49abac88221fff27796022062612d4e7c3e7b0952fdf7ec2eba2b3295545b759dd4f401e4f8c91d42bb0f2500770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2ab0e9b20000040300483046022100af01039db8ca96e3c20d891b26793719b0b85c436cc4230e392e476f8d0effad022100f90650d26ce67eb965d53b36670349adac6a5ac33070d78824fa9a4731e06627
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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