otsegoknights.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number e2:43:d0:16:c0:38:44:15:11:fd:84:dc:dd:8d:86:36 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=otsegoknights.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e2:43:d0:16:c0:38:44:15:11:fd:84:dc:dd:8d:86:36
Serial Number (int): 300757631480619098829831018428263925302
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 64:b4:96:fc:25:99:cf:4c:85:90:1a:07:74:5b:02:f1:f6:59:8b:d3
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): fe:00:b1:08:59:5a:b3:e0:a6:3d:f6:2d:c4:7a:1a:b4:2d:5d:af:bc
Fingerprint (sha256): 5e:80:e6:a1:49:6a:5e:6e:c0:95:e3:04:f2:9e:6c:cb:46:4e:bb:dd:2e:ee:79:45:54:db:69:50:28:8b:40:4c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/pkTz0mnV_k0
CRL Distribution Point: http://crls.pki.goog/gts1p5/xpntNK578DA.crl

Check the revocation status for certificate otsegoknights.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otsegoknights.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otsegoknights.org

Other certificates including the domain name otsegoknights.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for otsegoknights.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZdIddYkAniAU80GAD8u
Ro+U/Ahk8h3RlEKVRRjWtUwNWLBisyYWQcqhzqA340tsd6687tokNL29UD0wvEoO
zIRBK9GFrf9u3s//sRqGV5cGHYIj3GlTZxqNG9LGs/ehMvexx0nweHKLdh9ICxmi
AaMaNU0DX4d6P/Sc8XxptCoPXMaOJPPOTYoplt28w9qcQW0i+kKhw035uBocA6mi
WfmnZjHhXLR6zjY9GCj9qbyMYuJAHpkfvT1XozlzBxfSWv883KxMzJR/1B424Y9U
Nl/SVHCe6PRZN4BiIY3SMblSD+wJOkhE5RLhzxPyAEZQfGZzDdparFXlERVlGBLU
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300757631480619098829831018428263925302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 14:43:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 14:43:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otsegoknights.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23428686870107303405689337761340859231521000949246473379777893878354196293521288871520935940391016652204599336965077280221482812015532273298304683341183562299360380127981679343789046891735945047227645890465551032201312867192870742392380845426081072327398235814165190182736045920841058964382103328301904391304361607131519217067747911353042016900470360856499243637221141784148414209094110877909410388083437415806745212219638035670461939236302872243125883810103467707270492999103179828760714008012808856244851956766059840288912444971963799974263166582346283617341681116265751467736013851152955966984133999966760253707297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64b496fc2599cf4c85901a07745b02f1f6598bd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/pkTz0mnV_k0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otsegoknights.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/xpntNK578DA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018863079a5f0000040300473045022100f416aec0d2b64657548a0e8bbb22b97f085202d11ab09bfe7786cd4e2e13fbd1022022d3aaf436adafd9484f5922a4c40f81024d5aadcee871f93185c08f9e836caf007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018863079a820000040300473045022100ea3194bfe60849b233062856544a628b42adf9d4d7cc26c2d095caae17a66c4a02207e91462f179f6a95398b936d589c665583f9f45baebd50e835c7132607654549
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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