luciamarschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 33:9e:b3:6a:02:04:48:da:0e:f8:0e:1b:e0:3f:f7:e7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=luciamarschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:9e:b3:6a:02:04:48:da:0e:f8:0e:1b:e0:3f:f7:e7
Serial Number (int): 68614649638807642200204400928883734503
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5d:c4:09:9e:1d:3d:f1:6c:cb:08:50:96:0c:f3:41:a1:ea:a8:32:09
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 62:40:09:d0:2a:5c:d0:7a:4b:a1:19:8f:f5:7a:fa:c9:53:22:cd:51
Fingerprint (sha256): 30:ce:a7:d7:02:38:b9:3f:db:b5:70:97:c6:e5:d5:9e:d7:d8:aa:c5:28:17:b5:9e:f4:83:5c:b2:b1:96:39:ba

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/C6Vh_stG3KU
CRL Distribution Point: http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl

Check the revocation status for certificate luciamarschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luciamarschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

luciamarschools.org

Other certificates including the domain name luciamarschools.org

(limited to 100 certificates)
lange.luciamarschools.org
branch.luciamarschools.org
groverbeach.luciamarschools.org
oceanview.luciamarschools.org
admin.groverheights.luciamarschools.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
acatitlan.edu.mx
acatitlan.edu.mx
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
elementary.colfaxschool.org
luciamarschools.org
luciamarschools.org
admin.mhs.centerusd.org
nipomo.luciamarschools.org
excel.dcs.edu
calhanschool.org
adulted.luciamarschools.org
luciamarschools.org
admin.ahs.ardmoreschools.org
luciamarschools.org
branch.luciamarschools.org
admin.adulted.luciamarschools.org
admin.harloe.luciamarschools.org
admin.adulted.luciamarschools.org
fcctc.franklincountyschoolsms.com
luciamarschools.org
admin.adulted.luciamarschools.org
yhs.yorktown.k12.in.us
acatitlan.edu.mx
acatitlan.edu.mx
admin.adulted.luciamarschools.org
franklincountyschoolsms.com
admin.ahs.ardmoreschools.org
luciamarschools.org
admin.athletics.rimsd41.org
harloe.luciamarschools.org
admin.adulted.luciamarschools.org
mesa.luciamarschools.org
www.mountalvernia.org
oceano.luciamarschools.org
groverbeach.luciamarschools.org
admin.middlehigh.alexandercsd.org
luciamarschools.org
oceanview.luciamarschools.org
luciamarschools.org
dana.luciamarschools.org
admin.adulted.luciamarschools.org
admin.aprandolph.com
admin.branch.luciamarschools.org
dana.luciamarschools.org
luciamarschools.org
admin.ewamakai.org
luciamarschools.org
admin.lange.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
mesa.luciamarschools.org
acatitlan.edu.mx
luciamarschools.org
nipomo.luciamarschools.org
admin.adulted.luciamarschools.org
luciamarschools.org
admin.adulted.luciamarschools.org
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
adulted.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
athletics.rimsd41.org
admin.alt.sbcisd.net
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.fairgrove.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.oceanview.luciamarschools.org
l2ic.lex2.org
luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
el.westwoodisd.net
admin.adulted.luciamarschools.org
admin.branch.luciamarschools.org
charlottemecklenburgvirtualhighschool.wearecms.com
tiegerman.org
admin.adulted.luciamarschools.org
fairgrove.luciamarschools.org
admin.judkins.luciamarschools.org
admin.adulted.luciamarschools.org
www.rilohs.com
admin.adulted.luciamarschools.org
lange.luciamarschools.org
acatitlan.edu.mx

Certificate

The complete raw certificate details for luciamarschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNsvP8rc7r8jxxSGBUW6
we8Xc4ckD5ez3Ek4S8xvoPOa0asNlO5gzg6zt7ZNrtTGc7sndCrJ5GMLACsin6yP
NNWj2Tcg2awxS88hV0LspTlfCw/UjlTfSQ+06Yps58KuEZpa87hh7vnYexqdalta
w01I9U14nhP/lK9lTsV0Y+3OJxs1F+MaN9CLkXfO0inmygFn/lo184MjckA+1+jC
LyAv2v/DVSdRiZlhq5vgZaMVaAAIbKUIL2ClqMCqiotTLJIWznaiWOhgVeMOo+wQ
W0JffFIJHnaK4JtZ5OGpN8SPxGdmymT9vvuzu8MztMnxrutnYR59QtiOwNfags0e
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68614649638807642200204400928883734503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 11:43:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 11:43:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luciamarschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25860698151478851731051107166471485263681428844419270402804215943562195249646065822515431418492343521210471721354761212876902058919201056257256717145418128805743078661404886890287565503331397262035627457574337219660321141776747596275439783340819985221456133349703139860765003955068800522400145613683923226345892580447501670934494953919070935848544593069268128147375859495880798934931615631259021986806099032480678997647255026091340403234831047511181413384330616716239185903101119151156308932059615972427053969426882769577072083798255793513454051133363492895456477870840678713072176306805232969435875968216041662520857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dc4099e1d3df16ccb0850960cf341a1eaa83209
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/C6Vh_stG3KU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luciamarschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2c0bcc4d0000040300473045022100d1e1472601921c9ef15d4130f8270f61b5f118b786c93634f2293c1694cc8c4c0220693778ddbf9fe9119a7ff576eb9a43fbae918a5ca8c3f56a92a96061f30d7b42007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d2c0bcc290000040300473045022100d2d7005d56fc83014f44c2f14d281d5b0c9b8a00ccf730032ed633727c8572ef022006a98b95a57d3be2beb75dbb3687f4d30caee83b54aa256b92d8060015d1f601
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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