berrienschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a1:bd:7f:a9:6a:43:be:b6:0d:6d:75:91:dc:b7:03:2b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=berrienschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a1:bd:7f:a9:6a:43:be:b6:0d:6d:75:91:dc:b7:03:2b
Serial Number (int): 214989640716100976311005577972748321579
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 38:b3:d6:64:24:11:34:1e:79:22:de:65:ca:29:fc:96:18:66:5d:7e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 46:b1:0e:80:79:66:54:79:32:2b:72:5c:3b:47:68:ed:a0:97:58:46
Fingerprint (sha256): 54:e6:ba:b0:e0:c0:e5:c8:38:21:0b:38:da:32:2b:61:46:0a:1e:df:56:d4:c6:e1:1f:c5:eb:a7:7b:e3:d2:ab

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/2ExhIMmACws
CRL Distribution Point: http://crls.pki.goog/gts1p5/xivxcwEVN5Q.crl

Check the revocation status for certificate berrienschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berrienschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berrienschools.org

Other certificates including the domain name berrienschools.org

(limited to 100 certificates)
kahuluischool.k12.hi.us
admin.mills.owassops.org
admin.akinseagles.org
www.cbchs.org
admin.aceacademycharter.org
sv.gvusd.k12.ca.us
admin.adulted.erusd.org
bps.berrienschools.org
admin.jww.jubileeacademies.org
admin.akinseagles.org
admin.lesc.lakelandsd.org
adairsvillehigh.bartow.k12.ga.us
admin.berrienschools.org
aak.potsdam.k12.ny.us
kahuluischool.k12.hi.us
admin.veritasca.org
centerpreschool.centerusd.org
adairsvillehigh.bartow.k12.ga.us
berrienschools.org
admin.akinseagles.org
landrum.sbcisd.net
centralvalley.kernhigh.org
barnes.owassops.org
berrienschools.org
bps.berrienschools.org
aak.potsdam.k12.ny.us
stonecanyon.owassops.org
dudley.centerusd.org
admin.dulleselementary.org
admin.bes.berrienschools.org
admin.bps.berrienschools.org
aak.potsdam.k12.ny.us
admin.centerpreschool.centerusd.org
www.hvrsd.org
admin.akinseagles.org
instructionaltech.sbcisd.net
admin.berrienschools.org
aak.potsdam.k12.ny.us
admin.akinseagles.org
8.bellevilleschools.org
ochoaprep.erusd.org
aak.potsdam.k12.ny.us
berrienschools.org
adairsvillehigh.bartow.k12.ga.us
aak.potsdam.k12.ny.us
redtop.bartow.k12.ga.us
adairsvillehigh.bartow.k12.ga.us
aak.potsdam.k12.ny.us
admin.lemc.lakelandsd.org
8.bellevilleschools.org
admin.elementary.alexandercsd.org
aak.potsdam.k12.ny.us
www.cpdlf.org
www.curiehs.org
admin.erusd.org
bes.berrienschools.org
admin.bps.berrienschools.org
aak.potsdam.k12.ny.us
tgg.hvrsd.org
admin.akcs.org
aak.potsdam.k12.ny.us
www.centerusd.org
www.berrienschools.com
8.bellevilleschools.org
erhs.erusd.org
admin.millburn.org
8.bellevilleschools.org
aak.potsdam.k12.ny.us
adairsvillehigh.bartow.k12.ga.us
aak.potsdam.k12.ny.us
adairsvillehigh.bartow.k12.ga.us
jlw.jubileeacademies.org
middlehigh.alexandercsd.org
7gc.owassops.org
berrienschools.org
admin.akinseagles.org
berrienschools.org
8.bellevilleschools.org
aak.potsdam.k12.ny.us
bps.berrienschools.org
admin.cve.cv.k12.ca.us

Certificate

The complete raw certificate details for berrienschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPqiFO6Nowfu2wk90PU
bzNSnDqi9pLwQvQ58zITo23/l+dS8jRZAf4RL2/b4VnmFLeNA7wpofHGF17VAAWf
Q+28YDzIX42Nv9ZfaEG5XaSIYDjoqP0q72d/rdiDwd2Jd05r4fWiR4WjuZyBxxUD
Q4G1QvOb4+IbpysWSliV2gOOCoQRFbSx0D2U8evRdQ59AnSFhbczJN86Rr8w3jXJ
6e1a5S9TUzEVMPpn/SxR7rbkhYqZAtqiv422381F1yBotHWdlhZQHy0XDfJh44F3
uagDIMj1vYevCL/JHzkqpUx6nsAwcoZgibWFjVYG2aej8X+g/c5GdzT8QstuZwz5
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 214989640716100976311005577972748321579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 16:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 16:07:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berrienschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21927946715724601694083672299799094769055061094111552555091812424827686331942411004247534609612477926231170918861320861647698377689869397144335533563236585867382045530177537341664682149589871700705335178101302294727473253534271298137835942576434112305264135418665982617767162934635335528009395239771669680454687863184887545668134343591265427498594488868792645687324305470760801235291527310343653825000607433761533985695449396130339244065964582933632353366761133028713635711938161693691423999341503408313210864452278060030095860553760545748875900460155848211569882647992285317390690697818485383206180376028723221952807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38b3d6642411341e7922de65ca29fc9618665d7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/2ExhIMmACws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/xivxcwEVN5Q.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c40191837000004030046304402206b5d02a3ef8615442d0e189b1f0d29f39b85f814ca1f7e60185437ea9a4a1000022072c7e3c3c59e0b6404bc6f7549e55a54fd6f95dec9577632e055874a7d39c7a70077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c4019181d0000040300483046022100e3898685b7886e19e002ae7a91813bc758388d051ca17a06bf7d397582285731022100d9c05d4e45b3a330ca4f632742e47845648cbbd719d4025d69e4dc76fc5256e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a31f34edb3d2e73f703ab4e0777307b4fe28875129c06e8e1bbdd0213e833e9791f5067f7c885414cabc47fc28de4ec63bd4ade058fb1a763710bbe00e2f5a72606986a50ca6b6e9668258cfa74504a1d977112996fab940926e4a6380b12aa16c4844e72c042ce12e61989a43aea0714b6b464e5b7310dfddddb563d942895c2cc15bbc5b0b560d754406a1dce03e134e1607fd0ea1054958fb80bc3bf7b22daed6f73ededf7d1e05d15e6e2064dbcfc1989d2414d8e7281c69efffb5669047206c6cbe5ac3f77ccbdf3e3b3e8d2933024d295a36ca2a853c8760f66ebc6df890763d781d54fb72bc52694cfa556c2a480766942c496a4792348ff2436533f