www.brooklynsteamcenter.org

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number f0:ba:60:d5:3b:de:f1:36:09:00:00:00:00:12:1c:49 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brooklynsteamcenter.org

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f0:ba:60:d5:3b:de:f1:36:09:00:00:00:00:12:1c:49
Serial Number (int): 319982450209516989732993849788204194889
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 52:44:66:f3:a5:6c:24:2c:dc:83:8a:ae:77:d1:ff:a7:c2:05:9c:29
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 11:a3:64:d3:db:47:9f:a3:a3:5f:57:3f:58:35:d1:13:b9:8b:2b:e0
Fingerprint (sha256): 49:13:9b:97:32:ea:63:05:7d:01:c7:e5:4a:31:17:fd:c9:3f:43:91:d6:59:0a:3c:72:4d:1b:6b:2b:53:8b:77

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.brooklynsteamcenter.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brooklynsteamcenter.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brooklynsteamcenter.org

Other certificates including the domain name brooklynsteamcenter.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.brooklynsteamcenter.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj64wGnan9Y8pU0ua986
wlhr4No7ka4j6m/UdX2KbqaMrvDGyq7M1jMDw5yNGV5M+NUNpsvWntUbuAxANz+q
jXS+7ampkLxZRTggXUJHm+WyB/8AotyUVg4E7hIh1SUbO86jKWWDP6aGooOzM8pl
POSHzYNrFDcM/eu/J9Tz+eVtALww5luSCCI+pTAb4mu+pUBDHu2UDZUZE2TckdNq
/r/RGytbtTolMmMpr88T4jdpV0EbiYbtqQX4wEEuQei+hyXWhux0ed9VfTFRNc9d
3fQ5Nm3ltlhnqxsLNop6kycgc0WMm+kqd0hgjYDMbJGubkr3p6vYp+QFUtzLjIZ9
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319982450209516989732993849788204194889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 08:21:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 08:21:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brooklynsteamcenter.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22501347500071172215684511562439607874624021074134520408308233038014153816145669132153246754914656054899335656689927357629893641762024934539564565406623901629354401187175361682829075045112623869401140233995574560488340083601805374581794459810267984398251367214189951679152358302635756902320841206611895224074572625281620913546908748031361636929464618095256630078595066187298727566417050002449163452323736842965571436289878942646675712733565904120360656334638471119815974540334068289644777115782552842654748697183642997024242315942763173706256190751947205933316321699141770090918107071114166514054341870310038421536151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							524466f3a56c242cdc838aae77d1ffa7c2059c29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklynsteamcenter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017120721d23000004030047304502203ef0f5b3d2db335b9ca8a13fe4488f378aa917f77c9e3a307d81257e28952ba1022100858f81b6d5ba36bd9a5189c8cfc8de69404173acad47110a5ed9197c211010c40075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017120721d530000040300463044022061a435e7413eadf88714abf07c718175b721f3d060a8814dc3db8ed40ba9dc2e02206bb7f8f620d65b9a723f04b137beefea03f86f117e0ec30b2c3c3e74e26ef0d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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