mills.owassops.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 52:82:ee:03:30:d6:46:cb:11:82:cc:30:1b:07:9a:39 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mills.owassops.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:82:ee:03:30:d6:46:cb:11:82:cc:30:1b:07:9a:39
Serial Number (int): 109676521712257110718601792825206479417
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a4:c2:ed:3f:0e:4d:f7:aa:ad:c9:7c:9d:ff:3f:af:72:fe:db:76:6e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): c7:32:4a:e9:de:36:4b:59:7c:65:45:71:0a:6e:53:d7:4d:b8:c0:ea
Fingerprint (sha256): 52:04:e3:73:1a:27:1c:8c:f0:f1:b8:81:46:87:f1:09:75:b4:84:52:20:61:bd:26:c1:09:61:49:a5:fb:93:55

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/iSQ3wQPAYBk
CRL Distribution Point: http://crls.pki.goog/gts1p5/et-Lsmj_QTM.crl

Check the revocation status for certificate mills.owassops.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mills.owassops.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mills.owassops.org

Other certificates including the domain name owassops.org

(limited to 100 certificates)
kahuluischool.k12.hi.us
stonecanyon.owassops.org
aceroschools.org
admin.mills.owassops.org
admin.akinseagles.org
www.cbchs.org
admin.7gc.owassops.org
owassops.org
admin.aceacademycharter.org
admin.rvs.monroe.k12.tn.us
7gc.owassops.org
admin.hudson.ucboe.us
admin.barnes.owassops.org
aceroschools.org
6gc.owassops.org
6gc.owassops.org
admin.akinseagles.org
admin.lesc.lakelandsd.org
adairsvillehigh.bartow.k12.ga.us
ator.owassops.org
northsidecatholic.org
admin.alvahscott.org
kahuluischool.k12.hi.us
owassops.org
admin.veritasca.org
admin.stonecanyon.owassops.org
aceroschools.org
aceroschools.org
6gc.owassops.org
admin.alvahscott.org
6gc.owassops.org
admin.ohs.owassops.org
admin.gilmore.ucboe.us
ohs.owassops.org
6gc.owassops.org
7gc.owassops.org
mills.owassops.org
owassops.org
aceroschools.org
admin.upstreamcollaborative.org
admin.akinseagles.org
centralvalley.kernhigh.org
owassops.org
admin.alvahscott.org
barnes.owassops.org
bailey.owassops.org
morrow.owassops.org
stonecanyon.owassops.org
ator.owassops.org
7gc.owassops.org
admin.alvahscott.org
admin.dulleselementary.org
admin.alvahscott.org
admin.7gc.owassops.org
admin.barnes.owassops.org
barnes.owassops.org
6gc.owassops.org
stonecanyon.owassops.org
7gc.owassops.org
www.hvrsd.org
6gc.owassops.org
admin.akinseagles.org
6gc.owassops.org
6gc.owassops.org
etc.needlesusd.org
admin.berrienschools.org
admin.akinseagles.org
*.owassops.org
8.bellevilleschools.org
ohs.owassops.org
ator.owassops.org
admin.northeast.owassops.org
smith.owassops.org
adairsvillehigh.bartow.k12.ga.us
admin.barnes.owassops.org
ohs.owassops.org
redtop.bartow.k12.ga.us
7gc.owassops.org
admin.kanoelani.org
greenwoodscharter.org
*.owassops.org
aceroschools.org
adairsvillehigh.bartow.k12.ga.us
6gc.owassops.org
admin.lemc.lakelandsd.org
6gc.owassops.org
www.rfm.rcschools.net
admin.northsidecatholic.org
8.bellevilleschools.org
owassops.org
stonecanyon.owassops.org
admin.ucboe.us
*.owassops.org
www.cpdlf.org
6gc.owassops.org
owassops.org
admin.rfm.rcschools.net
admin.barnes.owassops.org
tgg.hvrsd.org
wms.csisd.org

Certificate

The complete raw certificate details for mills.owassops.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqe5Zs9EkYuBzLWQPbfw
BtjJ4d8hzuUVA74KhxVqlzOEtttCiRX7xrgcebsachImp7RGe3PqSgQpqN86vZsE
MonXd76wKxfqF4WPpJzmLsEaoIZk/XWMnTLY2z6BXeSIY51Zoim7LrH55iIJqdNn
vndZ1zNQqotywuEwwKpDsk+23u8WGHWhlcVMDp+jTVOdqfDXkQNGJDNFd7J7iv9/
0CEwrSOQk3BCO8bmOUIHUC6R0GHsDgsL7rD/myhAwdkOec6wWu4eAzF0RR3ZvXBU
1nUbL9ujSCeVU3wKkSZ0IXkO5AZpgM4uDWH2r7mQx55knMQlLn4dFOZckzs1ILH8
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109676521712257110718601792825206479417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 07:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 07:56:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mills.owassops.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23563032621600274552125867381697776595257116765069982722658050168270134202410622808245927128607682704727138788000607315393346961902761713068532726108413585012303829355335546020568921729157321950390332188672389154703159171929617987237891679031883739785674606005727723061154826442814151947424250970530869488295065203982015942874897417918649057375916345995781078189941589841361430045870216562709026170874917922247416549781759796212194135330691472955114164684884809929690969621365799005148061068405646941648967203266000725397711273229547638462297626908160520694148849894738780260813213465740840270024273735491359763201263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4c2ed3f0e4df7aaadc97c9dff3faf72fedb766e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/iSQ3wQPAYBk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mills.owassops.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/et-Lsmj_QTM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001873c089b540000040300473045022039511dd0d199e052c072c868baa4b45c783fe369c898cc254a0e0de969c2b00f0221009f7ff43723d45dd36d397c7e2bca0fbcf95531edc810cfaa4c2e8c651b93f3830076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001873c089b950000040300473045022100e95cf91046ef888f61d2d54085e9c7bbc60a49ed1907f1eae5809ec4baa87ab40220563208adf371330bf4f3037133be01eb64dfd47f47bfbdd328166d4d5fccade5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012d3900f263bda5441c5637554e765000c9fc68a68b48895933b47e79713d95bfd7eefdd8c11f5cec35544a96b6ee0c88275895e14015dd4727edbe541d1e3f05e3d0798648eb996f40ece094dd04d8893bb255079dbbe62a82731b4b6a7145024964e52291083c58833dbcf57239f358b33a93f08d37bc2093eb1ec6dc10180589367814befa21cc36ff65eec87bcbbcb50031f8a4fca3b3e1e0bd35a1ec54cd4178ddc76464826e2bde500bf0ee61a07f26aa6d6fd48cafeaf265c173ecd5d9692d73a3bdcfc6f442088081f53f0afe8529c80e08526482dc5521cd0736664de9b16486fa01c168693fd2beca02b3c6ff1a9949ad0ef8e170d6c0303f7d6f7