crhs.slvusd.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number bf:49:36:30:39:9c:c7:0a:12:fc:f0:ba:38:4c:fa:7b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crhs.slvusd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bf:49:36:30:39:9c:c7:0a:12:fc:f0:ba:38:4c:fa:7b
Serial Number (int): 254262683936492549940843288321730607739
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ba:20:23:e5:9f:60:97:fe:00:8d:a7:de:40:24:af:22:22:15:6f:a1
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): e1:84:82:c0:f4:98:10:81:33:9f:5d:fd:91:3c:e0:21:31:f3:72:1a
Fingerprint (sha256): 3d:bc:a7:e1:92:ef:94:c7:e9:7b:a8:76:df:47:1f:2a:05:3e:68:35:08:30:81:8f:67:ae:1a:7e:7c:24:f7:0b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/mQkB6-qb6MQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/AsPhGEt1lbU.crl

Check the revocation status for certificate crhs.slvusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crhs.slvusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crhs.slvusd.org

Other certificates including the domain name slvusd.org

(limited to 100 certificates)
bce.slvusd.org
palomares.cv.k12.ca.us
slvusd.org
webadmin.br.elanco.org
www.cv.k12.ca.us
www.leavittms.net
admin.proctor.cv.k12.ca.us
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.aplusarts.com
firstodessaacademy.com
admin.illinois.goldenruledallas.org
admin.chabot.cv.k12.ca.us
admin.bclc.burke.k12.ga.us
www.ps149dannykaye.com
chs.comalisd.org
hles.comalisd.org
fes.comalisd.org
desoto.goldenruledallas.org
admin.fuesd.org
www.hilltopprep.org
tpes.comalisd.org
leonardeulerd.edu.mx
www.wherelifehappens.org
redwood.cv.k12.ca.us
admin.evanshs.ccboe.net
admin.creekside.cv.k12.ca.us
canyon.cv.k12.ca.us
slvusd.org
admin.compton.bcsd.com
mvms.comalisd.org
reed.crandall-isd.net
pg.goldenruledallas.org
admin.hills.bcsd.com
admin.alma.cv.k12.ca.us
voorhies.bcsd.com
sle.slvusd.org
burney.hattiesburgpsd.com
www.anacondaschools.org
sses.rcsnc.org
www.glendorahigh.net
webadmin.nh.elanco.org
www.leavittms.net
admin.bce.slvusd.org
crhs.slvusd.org
www.jonescollegeprep.org
www.bce.slvusd.org
admin.fairfield1.org
www.comalisd.org
admin.llc.lex3.org
admin.aplusarts.com
glendorahigh.net
grades.slvusd.org
grades.slvusd.org
charter.slvusd.org
msd120.org
jonescollegeprep.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
painesville-city.k12.oh.us
slvusd.org
admin.sle.slvusd.org
admin.harding.bcsd.com
admin.woodley.hattiesburgpsd.com
mckinley.bcsd.com
www.fairfield.k12.sc.us
webadmin.elanco.org
newgulf.bolingisd.net
admin.stanton.cv.k12.ca.us
gp.goldenruledallas.org
slvusd.org
charter.slvusd.org
chabot.cv.k12.ca.us
ghctk12.com
admin.thorner.bcsd.com
admin.cvhs.cv.k12.ca.us
bce.slvusd.org
admin.cve.cv.k12.ca.us
admin.blms.lex3.org
canyon.cv.k12.ca.us
webadmin.gsms.elanco.org
fmis.anacondaschools.org
admin.creekside.cv.k12.ca.us
mvms.comalisd.org
proctor.cv.k12.ca.us
admin.smithfieldelementaryschool.wearecms.com
admin.ms.slvusd.org
rbes.comalisd.org
creekside.cv.k12.ca.us
slvusd.org
admin.williampenn.bcsd.com
admin.bles.lex3.org
www.qes.edu.mx
admin.creekside.cv.k12.ca.us
admin.swprep.org
admin.charter.slvusd.org
mabelpaine.org
webadmin.bb.elanco.org
ruggleselementary.org
www.yeshivatnoam.org

Certificate

The complete raw certificate details for crhs.slvusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYixuf5xgEoSTClluCE
q9NOqA9unNNQoSg6UTLD2mawavyb4wGSmRN1EMYovr9ZAnRUSMaFzn45vhIgSNpr
xcszvm5cPNXeoDwnSlFeU/9tNNItuv3+7H5nDtD//9VTdit1A/VG8bymF93MljIl
80grQ398yJ00IbGUeReDHx0Icn3TTYTDjRaNpDATJdeFe7I3zdMWNjjj3ZrbD6uw
iQPIKXjH83WgbLG7lUgl5wkklAVzWBtOWgmu/j7Sb7Nm/2kLMxs+Q7uzhv03Qf9W
Dx29jjTGqeuY044w0HIIb9lZ7GWTAziIyDObdfnHm1tOAyt8yvut+bNYSBWxA4wR
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254262683936492549940843288321730607739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 07:35:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 08:26:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crhs.slvusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19017670384717252053140337758157532167582761729570635589062913719033288991925227146528681839972462446671728531196879716367055559964896802251160612781640658196763460322103652215513482575961251623210089079944475773859104064247965985792376024454188710866108831687945469378973200157547084086226724022168946093466547041478291905716163604665800152563470516228084023122565960374376166383568770438976838213914878631668458978836098825363178696043153529174067702326997065900786517814975329074808951891006125594141261069280121493978124727051257970301741774768687143129935286588156637461498924917451783148278056334498483516739969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba2023e59f6097fe008da7de4024af2222156fa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/mQkB6-qb6MQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crhs.slvusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/AsPhGEt1lbU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018de9b44cd2000004030046304402203ae5754f2a5cdd806a9e02f7aeca495c597ab186fa05ac9bec27284e784787c702205e49820373ad3282d6fdd4a1994b45ec151a6871ea0acb6d5c4d39950ad8138100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018de9b44c060000040300473045022100ca856a0c8287178b0e68b49545b808eab0ffea3afaebf8aef0ea9f7958eec8940220164c8decc117aeb34794364ebd2940c951bc9ab5f3c90edb400d13890ebd6a32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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