rocklinacademy.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 26:0c:16:02:63:67:3f:af:0d:c4:d5:1f:ae:c2:8c:e6 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rocklinacademy.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:0c:16:02:63:67:3f:af:0d:c4:d5:1f:ae:c2:8c:e6
Serial Number (int): 50573417804360662537159290718769024230
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ef:5e:7c:b2:f2:b6:42:45:66:77:0b:e6:93:55:90:c6:6c:4e:43:81
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 59:35:d1:d8:fe:5a:4e:50:c2:d3:e1:4b:d2:67:26:ea:14:cf:c4:f7
Fingerprint (sha256): 3f:8a:9e:e4:bb:bf:5a:67:dd:8a:42:8f:2f:0e:c1:c6:a6:c5:1a:e8:90:74:00:a4:0f:53:63:78:76:5b:79:dc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/MK30gXX3AyA
CRL Distribution Point: http://crls.pki.goog/gts1p5/v5VT_64JizM.crl

Check the revocation status for certificate rocklinacademy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rocklinacademy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rocklinacademy.com

Other certificates including the domain name rocklinacademy.com

(limited to 100 certificates)
academy.swartzcreek.org
gateway.rocklinacademy.com
admin.smithcoedu.com
admin.kernhighnetwork.com
www.oahornets.org
admin.carthage.smithcoedu.com
cchs.ccusd.org
academy.swartzcreek.org
ccas.ccusd.org
www.livingstonusd.org
cphs.ccusd.org
edwhite.org
academy.ndasla.org
admin.alessandrohighschool.org
admin.tla.pgsd.ms
admin.athlosbrooklynpark.org
admin.garvyschool.org
academy.swartzcreek.org
admin.aspirepacificacademy.org
oc.pgsd.ms
academy.swartzcreek.org
admin.acc.ausdk12.org
admin.aspirepacificacademy.org
pjh.petroliaisd.org
admin.almaacademy.org
academy.ndasla.org
icacademy.org
admin.almaacademy.org
academy.ndasla.org
heritagevalley.fillmoreusd.org
rocklinacademy.com
admin.smithcountymiddle.smithcoedu.com
admin.smithcountyhigh.smithcoedu.com
admin.wes.bibbed.org
admin.southeast.varnett.org
admin.ei.themethighschool.org
academy.swartzcreek.org
lms.lexingtonisd.net
lhs.lexingtonisd.net
admin.acc.ausdk12.org
preschool.rocklinacademy.com
admin.acc.ausdk12.org
admin.aspirepacificacademy.org
admin.nes.davidson.k12.nc.us
admin.phs.pgsd.ms
academy.ndasla.org
www.fremontelementary.us
www.garvyschool.org
www.windhamraymondschools.org
admin.athlosbrooklynpark.org
academy.swartzcreek.org
admin.almaacademy.org
www.chinaspringisd.net
academy.ndasla.org
admin.athlosbrooklynpark.org
wclark.k12.in.us
wes.leusd.k12.ca.us
academy.swartzcreek.org
admin.acc.ausdk12.org
admin.acc.ausdk12.org
ocd.ccusd.org
hokulani-elementary.com
academy.ndasla.org
rocklinacademy.com
admin.acc.ausdk12.org
admin.almaacademy.org
rocklinacademy.com
gateway.rocklinacademy.com
admin.bhhs.bhusd.org
turner.wisd.org
academy.swartzcreek.org
obh.ealas.org
admin.athlosbrooklynpark.org
crockett-es.weatherfordisd.com
pes.petroliacisd.org
meyers.rocklinacademy.com
admin.aspirepacificacademy.org
admin.almaacademy.org
academy.swartzcreek.org
academy.swartzcreek.org
admin.athlosbrooklynpark.org
jms.jarrellisd.org
admin.athlosbrooklynpark.org
admin.acc.ausdk12.org
admin.athlosbrooklynpark.org
colonies.sunrisesd.ca
admin.acc.ausdk12.org
admin.aes.pgsd.ms
cphs.ccusd.org
admin.athlosbrooklynpark.org
admin.unionheights.smithcoedu.com
admin.almaacademy.org
admin.ccti.pgsd.ms
admin.bes.pgsd.ms
admin.acc.ausdk12.org
admin.acc.ausdk12.org
vms.monroe.k12.tn.us
www.lasfloreseducationalcenter.org
gateway.rocklinacademy.com
admin.aspirepacificacademy.org

Certificate

The complete raw certificate details for rocklinacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7hyLFd3H6kvxUaq5nAG
oRlHkB8OhxqqClsL+OjuTp7kL3EnLUZlUkz+HNwslarA09CePc6zqqt+pjkmcvSL
6ESQWtBGCEIRqqhCYId536bcPkBLrwrfuh29JFL0xyTMPMy75tNCDEXrIgRkTlTz
mP57Zs9qb2KYxWYK63BW9kBE6H7kx1vOds2h7wDA+B0MKsSw5b5ML7oERLLle+zv
z73uz0pMOO73gnIZJc/XJBS/Sn4bYPZRuLLqbaf/qom13KD4vz000pasxYB7RWCI
nY05W0t2Q8b/w/R8stID6o1v/PIca+cUlByEXGKadNhQak4a0wHf+IhjnaVoVIKJ
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50573417804360662537159290718769024230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 07:58:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 07:58:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rocklinacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19657890976855412654225156144937520925979444259212723001458820790398275922184668960403851882359612263041058397272810668773233752237284137530873458391303671502651165972238343233998530298583401815144132213583620020318234467000185978170026900897134741762814063538669006730674305651274540892935631905843893028978227563914917160453836265362759056283018643048625688681341401388335199937056513766691422473819494953229107647879613179409885119592642051723016091147226394956550789210287762043341789691409445245772661140526835344560760407893961183067137327374635953635854909488544641936393274779485795278501177223044636828928451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef5e7cb2f2b6424566770be6935590c66c4e4381
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/MK30gXX3AyA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklinacademy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/v5VT_64JizM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e84486e61000004030047304502210098ee7c40202061ae0d3dc9b34ef150978a86b2808e558763c145dc576bbf9276022079ea90470f341e7f69476047f84b6d56593b78ec30233bb824b6ac1679661bd500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e84486e4c000004030047304502205d3ebeccac9765d77c0233e09a77bf1c98c1655a30ac8f5cd96629cfc1549674022100c2b5a10783791723eed85d2221fe56750535df7814b447065c8093a6077013b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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