stjoseph-school.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 12:e6:27:28:b4:7d:2b:b4:11:b9:19:8f:5a:0e:46:84 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stjoseph-school.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 12:e6:27:28:b4:7d:2b:b4:11:b9:19:8f:5a:0e:46:84
Serial Number (int): 25121126440551162931294296677905483396
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 37:58:ce:20:fc:7e:c6:aa:f3:79:78:63:41:be:8f:62:16:8b:a1:96
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): a6:04:ac:4a:2d:4e:a7:92:f7:f0:bc:6b:f0:3c:bf:96:af:61:a5:6a
Fingerprint (sha256): 52:20:ce:1a:9c:0a:c0:18:83:7c:86:05:df:73:ea:56:34:c7:67:57:64:13:6d:24:d5:3e:9f:e2:ba:ea:58:61

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/O_mthU0fEw0
CRL Distribution Point: http://crls.pki.goog/gts1p5/oE9rr3G5TqE.crl

Check the revocation status for certificate stjoseph-school.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjoseph-school.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stjoseph-school.org

Other certificates including the domain name stjoseph-school.org

(limited to 100 certificates)
admin.bronxbetterlearning.net
stjoseph-school.org
2.bronxbetterlearning.net
2.bronxbetterlearning.net
admin.eastprimary.kiskiarea.com
2.bronxbetterlearning.net
acldtillotsonschool.org
acldtillotsonschool.org
acldtillotsonschool.org
stjoseph-school.org
2.bronxbetterlearning.net
centroculturaljalilgibran.edu.mx
stjoseph-school.org
acldtillotsonschool.org
stbern.net
2.bronxbetterlearning.net
bronxbetterlearning.net
acldtillotsonschool.org
stjoseph-school.org
2.bronxbetterlearning.net
admin.athletics.deperek12.org
2.bronxbetterlearning.net
acldtillotsonschool.org
2.bronxbetterlearning.net
www.stnorbertschool.org
mis.edu.mx
www.madisonmonterrey.edu.mx
acldtillotsonschool.org
2.bronxbetterlearning.net
admin.centroculturaljalilgibran.edu.mx
admin.stjoseph-school.org
2.bronxbetterlearning.net
acldtillotsonschool.org
www.stbern.net
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
mcs.k12.ny.us
2.bronxbetterlearning.net
acldtillotsonschool.org
acldtillotsonschool.org
2.bronxbetterlearning.net
mcs.k12.ny.us
admin.semperaltius.edu.mx
stroseschoolwilmington.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
lennox.k12.ca.us
admin.stbern.net
admin.bes.lennox.k12.ca.us
2.bronxbetterlearning.net
admin.stbern.net
acldtillotsonschool.org

Certificate

The complete raw certificate details for stjoseph-school.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xTMRFW22IBgqfVR8wf3
/kz2dZZIy22d4XgeUVMAbQvShkw8nr7rrlSxoUhs1sMzGHeahAMI2vwjhaarTN/x
eInt24jP4rotbMSEno6jCFNvYY8lsGAoGuL3zE5bg0y+s6NAH6v+JFweJ9QG8y/H
FWYyPiWgiVV1h7DJ4GdCfh8y+PNjNtjpE3CaiD5/nmfu+qYnfQWkhVF6x22sivnL
GvILiSsY0C2FHvw+YPmYkx6fIPMSCPOqRHK6ro/Vk8IBM9daman7Zvi7fStaIGrt
Oy6B7nLBBR0Fj+56+THm2Ru08OvRFD2c4236QGMVGe8cUKmqL30BNHfq3wOJz/65
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25121126440551162931294296677905483396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 23:05:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 23:05:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjoseph-school.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27151491403163961922421348319704131512249956124641411424548747841802348919223162854024113057616465990565734085930992367438940002055538040018992248940953072690897766281128443643375176262035970800890542609234298515850094113546759333587847112785468092844448027810315745855554912763380146363750937667563283433961888593980194423158659558513137715334424066294217702497371291090787058140456660469361168363806703324713345789501384612629306430063284607403767010841606196679483930426722510198969179722274236565540924372587442129874385800111849673557311998327314139263596861265262809564302038369777970367599971388103324623354233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3758ce20fc7ec6aaf379786341be8f62168ba196
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/O_mthU0fEw0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-school.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/oE9rr3G5TqE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fcbf7acdc0000040300473045022100fedb3beff91b8bf8f3bec3d7fc2e736e98d5bb1fa4b731b55573d08015954c4a022021dd008e15bc68edcc1996447ff3ac69df07de7fe35c71205fa34026bf8dfdb7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018fcbf7acdf0000040300473045022041f58bf15980caffaa62794374361d4517d50d4d94090271c06c20e2e9d7abcc022100b76a55da5976a0471eea125d91fb285c48a2f9c97902cf36b44549413c077d58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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