nstaracademy.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ae:07:80:c5:f9:08:f6:55:13:79:11:90:36:ff:e9:09 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nstaracademy.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ae:07:80:c5:f9:08:f6:55:13:79:11:90:36:ff:e9:09
Serial Number (int): 231324629178034990526153956553308236041
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 64:d1:53:cd:d7:35:e7:de:ca:ba:50:91:f1:f4:81:48:47:ed:71:74
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 6e:9b:16:c4:d7:17:f9:93:1c:71:9e:6c:42:8b:72:6f:3f:d3:02:50
Fingerprint (sha256): 39:81:ab:6e:a2:cb:bd:c5:45:a0:9a:45:df:1e:e3:b4:9a:36:24:1c:52:95:18:a6:88:0b:ae:7f:ef:7b:6d:f8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/ig0Lw1JUtu0
CRL Distribution Point: http://crls.pki.goog/gts1p5/cPaxteX-quo.crl

Check the revocation status for certificate nstaracademy.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nstaracademy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nstaracademy.org

Other certificates including the domain name nstaracademy.org

(limited to 100 certificates)
mail.nstaracademy.org
nstaracademy.org
admin.ascensionoakpark.com
nstaracademy.org
mail.nstaracademy.org
admin.ascensionoakpark.com
mail.nstaracademy.org
admin.bme.zcs.k12.in.us
admin.nstaracademy.org
www.lacpacademy.org
byod.nstaracademy.org
nstaracademy.org
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
nstaracademy.org
admin.ascensionoakpark.com
nstaracademy.org
mail.nstaracademy.org
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
www.nstaracademy.org
admin.ascensionoakpark.com
www.ascensionoakpark.com
byod.nstaracademy.org
mail.nstaracademy.org
nstaracademy.org
mail.nstaracademy.org
admin.ascensionoakpark.com
www.nstaracademy.org
mail.nstaracademy.org
byod.nstaracademy.org
admin.ascensionoakpark.com
mail.nstaracademy.org
nstaracademy.org
admin.bridges.fmsd.org
admin.ascensionoakpark.com
nstaracademy.org
nstaracademy.org
admin.tekoacharterschool.org
mail.nstaracademy.org
nstaracademy.org

Certificate

The complete raw certificate details for nstaracademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+0g3xdt8hDq+EvpcdQ6
LUge/0RXTolMCGtb9zH2RETLfzv+ZOSYhbxJae3dqPsgd9bI1wl81d3kkO+PCoUQ
0BekThYWpvvm2Nf74/0aOepGNfE4cRHfxfpSJTFNWKtws5GuknhZ+iBh/VWniX6F
HVoeHmdiuo3dKG6EmT+yZPe3jvtKGWJTEU8ZQiK16KFKsBjdB4Q5ce9aT7RW7YHF
2yZ59BIKarzV4AkIgwxMTHDWLRenYc+SrQVqjBDTtR8wTuEHqRE115k5T57U/OhA
edRj0Ua3Pt69DzsvxuFTwSQiDtjAyn7KffS9XNpZkZOIgyxSTV1STjqsrKRFzlxb
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 231324629178034990526153956553308236041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 12:31:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 12:31:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nstaracademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22208635743254426480511974345382788439176044497857506741746576863282862410352080424599310136633470773707835274484280179566681627800408901414566214714168484518360135987530243859462155932836468866803797643570495598715929562277601905812127851202015763831854687790750975660237138199947710551591046584756869068518799229249452138343762785935184658197056582162364929628868945183073559249951735052465972468471756550566142746862654562125979642742951548702211626863074184018290640361777122528185871295073042704128111366457904669443726797534620355571057842288668752496245433008752986653869838259045737195089270106450850637175601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64d153cdd735e7decaba5091f1f4814847ed7174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/ig0Lw1JUtu0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstaracademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/cPaxteX-quo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018af5bc77460000040300473045022065e0e57e3a50622b50b9248854a5b6e8c23887883b3286a65a3fd159d22534ee022100f795f6bafc2284607e2ba06c8d07718223ab127bf8a4c0f16b57b1420a1db4d30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af5bc77220000040300473045022100e9f53a37818ce2a5801b3209fa9641c804298c43c035e6d86908f22ad9a99f4a02204e5fe5123d508f0a73eedf500f9d71a0abe927894d123108a724fdced39a4873
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00582ec7e3cc0b06162f08a38d5cb8928bb11ab2e57bab2dc9f980e86cc9bbde216899f1f8e203fb8023df43e351a24e57c9c675897ce56db795a8798f3eb45ed176777e190e69769b1b693349a94f00e0f5e1512f001cbfb4596aec0213933317d9b0d1375b9ed83c8b0a026e92912054852df37938dc57a9844ad5394b3b013f192926778e1e799e39d624c4c1eb4585713cdb7e61ac9caa17f2a0bef1e30e87207e1c7774f45befac063962bcb2f3eee33c92a39d6efdf42728e0052fdf226e6dce82999e0c4166d4cb9ff4b2592760fb9b4b7d9954f01691b0fa9748208e0b66c5c35c83a4be51ea7ef7956592d2402af549758a748656a5ddbdcbef9aadbe