sau29.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number e9:10:14:5f:ec:8b:1c:19:0e:b6:79:89:fb:32:77:7e was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sau29.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e9:10:14:5f:ec:8b:1c:19:0e:b6:79:89:fb:32:77:7e
Serial Number (int): 309793613015696103212418243581250271102
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:bf:60:ea:f0:25:f8:1c:7d:0f:22:b6:ac:e3:32:c0:97:4e:30:12
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 0b:76:15:e9:e2:bb:1c:9e:b2:40:d5:90:78:4a:88:08:8d:eb:21:59
Fingerprint (sha256): 61:33:87:6f:cd:7c:a1:70:d1:c5:c8:8d:4d:14:b9:48:1b:fb:4a:d2:9e:d9:69:67:7c:10:ff:b6:f7:26:29:7b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/wem9mWwT8GY
CRL Distribution Point: http://crls.pki.goog/gts1p5/v5VT_64JizM.crl

Check the revocation status for certificate sau29.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sau29.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sau29.org

Other certificates including the domain name sau29.org

(limited to 100 certificates)
sau29.org
ghck12.com
jacksoncoschools.com
webadmin.br.elanco.org
bufordhs.org
admin.sunnyside.goldenruledallas.org
gfes.comalisd.org
admin.proctor.cv.k12.ca.us
admin.crps.coltsneckschools.org
wes.sau29.org
nel.sau29.org
admin.alohaes.us
admin.ahs.alcoaschools.net
www.ps149dannykaye.com
admin.illinois.goldenruledallas.org
admin.wps.dover.k12.nh.us
ps.sau29.org
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
bhs.ballingerisd.net
sau29.org
camden.cuhsd.org
ocs.lifeschools.net
ps.sau29.org
tpes.comalisd.org
svms.comalisd.org
www.wherelifehappens.org
admin.sym.keeneschoolsnh.org
admin.har.sau29.org
admin.crma5.org
thecije.org
mlw.sau29.org
admin.creekside.cv.k12.ca.us
www.mountalvernia.org
ps.sau29.org
canyon.cv.k12.ca.us
www.sau29.org
admin.compton.bcsd.com
raak6.richardallenschools.com
reed.crandall-isd.net
admin.hills.bcsd.com
sym.keeneschoolsnh.org
sle.slvusd.org
www.anacondaschools.org
ps.sau29.org
ballingerisd.net
www.crsd.k12.pa.us
sau29.org
chs.comalisd.org
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
cumbresbogota.edu.co
www.bce.slvusd.org
admin.fairfield1.org
pcoe.k12.ca.us
admin.avila.ecisd.us
admin.wes.sau29.org
admin.lunadabay.pvpusd.net
msd120.org
cses.comalisd.org
admin.ae.gonzalesusd.net
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
admin.che.sau29.org
www.whitmanhs.org
ps.sau29.org
sau29.org
ps.sau29.org
www.alarqamislamicschool.org
academy.comalisd.org
cdc.comalisd.org
svhs.comalisd.org
webadmin.elanco.org
newgulf.bolingisd.net
gctech.edu
ghctk12.com
admin.thorner.bcsd.com
secundaria.colegiolasalle.edu.mx
admin.alarqamislamicschool.org
www.swprep.org
lincoln.anacondaschools.org
mlb.sau29.org
ajshs.anacondaschools.org
admin.ljef.ljsd.org
che.sau29.org
dkies.org
sau29.org
webadmin.gsms.elanco.org
admin.creekside.cv.k12.ca.us
admin.anacondaschools.org
wes.sau29.org
mvms.comalisd.org
proctor.cv.k12.ca.us
admin.ms.slvusd.org
admin.jacksoncoschools.com
admin.amsschools.org
rbes.comalisd.org
admin.cte.mpsdnow.org
admin.williampenn.bcsd.com

Certificate

The complete raw certificate details for sau29.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoCUZEb1+2CziIcV2VPa
yO6Yp5xVHnBYrGSCR/QFyPnSUVIff+hFMmD+xBN30KRnnRpudxYps7vPilFBQJOY
LcJbqGgh1y4UnWGn8Oo5WEWJNU5efFjNCZL6DGor5SkyQdVSpuRrG57a96lyYOc/
QDJfYkbrIE+nm9aon1GhVoV3TUpMvsGi8LS/XXpubyhCG++w3YCZ7PeMHJtJBJyH
ZjYr4R+CnxHqlRvMtBl1xM+/6/Bh/4YtiD+CAgJs8xvMjwdYS79VjrE5ibXun98I
0PS2EJ2jSQMdBt97qdueYg84xTJE8geSOrGy0RVTHweMYfWePazPlRRXEKWI6LNP
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309793613015696103212418243581250271102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-11 19:51:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-11 19:51:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sau29.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23543729714757286181940979147705918578123526627806372155512954844453124818752747394635320365213494938188810825827426078967048520571459786663302261902456583323094494922204357203267114835662316689093101308070772005033686812359610870836535872664035064403144388270786411022502400127430347819534747320391873217769681566524387086527981617261810393020812065889968904623526854517732768117418674925449118557354470205015067175315515435364143584111103938180725615614794288638258373981093839048568194520264916672751216249090294392766421942245119077251044950834001967340377065948427449058624999629863631933751446940703905599934351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6bf60eaf025f81c7d0f22b6ace332c0974e3012
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/wem9mWwT8GY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sau29.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/v5VT_64JizM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018502f5782c0000040300473045022016b4356ed04af22dade2f157614f710520aca1a554704acb854e55bf2943ccdb02210085bb08e66ace6b5fa4815d8ab1f04c8339e45c9bdd682cc2fcae04c6fb2e724c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018502f5782b0000040300473045022004b1862429359c5ec9b7e6093c7d5e55bd562b9053c2543c8515a68c6fd24d38022100f1ce47b7d744cb37feb42aeb1724da1487351498035cdf370ba1ca3a6f243322
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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