npaa.erusd.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 7d:4e:2b:90:43:82:71:15:0e:3b:c6:91:2a:6b:9f:b0 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=npaa.erusd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:4e:2b:90:43:82:71:15:0e:3b:c6:91:2a:6b:9f:b0
Serial Number (int): 166559382201441749774293947332879425456
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b2:e1:dd:14:74:13:02:a5:e4:c3:0b:c0:db:e3:09:3d:de:c6:13:19
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d2:bf:eb:67:d9:08:92:fd:88:d9:e4:9d:14:53:3e:2a:15:ef:98:71
Fingerprint (sha256): 4f:df:a1:04:4f:e4:fb:c5:fb:f1:4d:45:5e:b5:f2:11:b0:56:10:e3:73:af:ee:69:ae:ab:37:81:92:a8:42:9c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Rw-3Yz1sHNM
CRL Distribution Point: http://crls.pki.goog/gts1p5/3MHZsTKH-rY.crl

Check the revocation status for certificate npaa.erusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for npaa.erusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

npaa.erusd.org

Other certificates including the domain name erusd.org

(limited to 100 certificates)
admin.adulted.erusd.org
www.kheperacharter.org
21cli.beaumontusd.us
santafesouth.org
adulted.erusd.org
second.exteraschools.org
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
admin.ahs.ardmoreschools.org
erusd.org
admin.adulted.erusd.org
admin.ahs.ardmoreschools.org
21cli.beaumontusd.us
sea.mynhusd.org
academyofthecanyons.net
www.arschoolforthedeaf.org
bell.robla.k12.ca.us
admin.ourcommunityschool.org
www.british.edu.mx
admin.almadinah-school.com
admin.whitson.wsvsd.org
admin.stanthonyeagles.org
sv.gvusd.k12.ca.us
cce.leusd.k12.ca.us
admin.adulted.erusd.org
admin.bac.wsisd.com
admin.adulted.erusd.org
admin.be.erusd.org
www.saintpaulcatholic.org
admin.jfk.edu.mx
erusd.org
admin.jww.jubileeacademies.org
abchandler.henderson.kyschools.us
admin.adulted.erusd.org
admin.3rcs.org
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.berrienschools.org
breed.exteraschools.org
re.erusd.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.de.erusd.org
admin.mms.monroe.k12.tn.us
shagirls.com
www.grandville.k12.mi.us
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
lorena.exteraschools.org
centerpreschool.centerusd.org
admin.adulted.erusd.org
ees.edgewoodschools.com
admin.adulted.erusd.org
www.trinitystelementary.com
gageparkhs.org
admin.ecacademy.scrsd.org
admin.ahs.ardmoreschools.org
abchandler.henderson.kyschools.us
montrosechristiancdc.org
academiamaddox.com
admin.elementary.bridgeportisd.net
21cli.beaumontusd.us
abchandler.henderson.kyschools.us
admin.3rcs.org
rve.erusd.org
admin.assumptionschool-sl.org
admin.ecacademy.scrsd.org
admin.da.nksd.net
npaa.erusd.org
21cli.beaumontusd.us
admin.hlc.gocats.org
www.lisboncsd.org
www.sd925.org
admin.bac.wsisd.com
admin.3rcs.org
admin.erusd.org
admin.excel.dcs.edu
sre.erusd.org
ochoaprep.erusd.org
admin.loudoncounty.org
admin.adulted.erusd.org
admin.tphs.monroe.k12.tn.us
admin.hsmp.org
academyofthecanyons.net
www.unionsquareacademy.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.3rcs.org
rms.erusd.org
www.icabh.org
admin.bac.wsisd.com
admin.almadinah-school.com
abchandler.henderson.kyschools.us
admin.ahs.ardmoreschools.org
erhs.erusd.org
dudley.centerusd.org
ve.erusd.org
admin.bes.berrienschools.org
www.ebcacademy.com

Certificate

The complete raw certificate details for npaa.erusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f/hTKm6LTRuT2liDn33
iaCKwoIQifIYgL7EWRsZn6jnAftOMB0/ugP+SZxj3DyRYUz9R71w3yhzAkmpne0k
CCN9IhF6I0ZywbkviJo5Ba9eTxDClCm5kv7tr2Z9YvK8jTMLbDXc7SaaOzOIZ13e
+8MHYVnI49QNjL6RPjnTkHy5ECBFhQ9NOYVWAnwBwToDAyBCyCWcHfmq5L0oDbfm
NdM/s4HULhzxm4YTEPlimhZy5o7FsY8IUFTE7hgh4mgSnE1M9uLmXVhISvv9sxt2
Aog3FkIKL8UnHsCDXkweDOighAugywbyLnyXZcaEIRnDAi/PKB00MEBc/wMJHgrI
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166559382201441749774293947332879425456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 00:23:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 00:23:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'npaa.erusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28024844565753571330468352080376508839597479922219985475843156125451467471973824084971154954150703250318214168729784521347571598470147233318703902728527647094213969512838363734999074967391146132517405753395542238661806557859760614408297559147083275071763674870157116731372218516193662823956039916700450498909894320887180210680852835938319798560917505709867655339265639288200533913781070894168141765873463922646972651435109312905514319197543775760091940415062085434625233855702772992536392258486121591256996258492822142133164443771072070517454159643061749526739399293232506972587520104056642810819915818994288644769967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2e1dd14741302a5e4c30bc0dbe3093ddec61319
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Rw-3Yz1sHNM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npaa.erusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/3MHZsTKH-rY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000187783648a4000004030046304402201015e5056fc5acf52f11c05403c47af2458efadb66e2d0d96fa6c955874f5b53022015ea9831d98834b07bf4dd0467655ba8a579f09384817c3d55255319c81f0580007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187783648b90000040300483046022100ea86f33f60eeceb2b6d75874e6c9ce1263524737ce4766a0a42768c97e3197f6022100a7969f8cbb390259303dcf137c0da84e07ba2d19dd91b4f0cb1ba04d96cd66df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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