www.ascensionoakpark.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 89:ec:d0:fc:81:53:b9:9b:13:d1:e3:48:99:51:65:3c was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ascensionoakpark.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 89:ec:d0:fc:81:53:b9:9b:13:d1:e3:48:99:51:65:3c
Serial Number (int): 183333856227866990658670381847591085372
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 24:eb:a2:d0:c3:0a:c0:58:a8:f3:8b:88:73:63:ae:cf:36:29:a2:fd
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 2d:a6:83:b2:8a:b5:64:e1:84:e2:4c:00:ec:bc:bd:00:74:10:ca:30
Fingerprint (sha256): 61:bf:31:e3:60:5f:1c:2c:66:4d:6f:59:53:7e:d6:53:5b:fe:87:53:00:dc:50:39:ae:b5:ae:a1:65:11:a0:37

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/I-utWIInJW8
CRL Distribution Point: http://crls.pki.goog/gts1p5/7LD__FSViFg.crl

Check the revocation status for certificate www.ascensionoakpark.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ascensionoakpark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ascensionoakpark.com

Other certificates including the domain name ascensionoakpark.com

(limited to 100 certificates)
ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
ascensionoakpark.com
ascensionoakpark.com
www.lacpacademy.org
ascensionoakpark.com
ascensionoakpark.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
school.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
www.ascensionoakpark.com
admin.school.ascensionoakpark.com
ascensionoakpark.com
dev601.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
school.ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.tekoacharterschool.org
ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
school.ascensionoakpark.com

Certificate

The complete raw certificate details for www.ascensionoakpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRfi/gBlAKtEmhJuLNyH
8E+f0gm9SCXwM5lhmd/5aeVX9UgGBAPaCpoC1fnbBD9R18WG07mNoZfCmvw7ISk2
69oSWvhc9T7iQWRxq7JwpfmtAPK3mJejEUHPKsPmHE8UOpJvEyziAPl4GtO+Z5+u
ArR+OVa7ta8xuhukPkdbCehIDhUuZBRro1pIbuyZzZ6n+jIHGZ49kDVrhU5oJzf9
R8edcYaI0z0OYsodZj4GUywCC//drcBLzk75dhbLjagQzxGUtQegIbTiFq0ZsFAc
y5kvyX+WVC1lzbNVRBLh41LanOAzsQK/uxXkjjIuaZyYjsr43e+ttIE14Hrz2A4E
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183333856227866990658670381847591085372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 05:50:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 05:50:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ascensionoakpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18316333185065540541320131298043511333992945018248214580052199695151463982908513637805379123933694102005904661649970802766519507261654513615620860657611816144978632495875921162760135300318140952431870467809644824204100181838709492218405190024471779472301668507370988197983233865541912104823836845518262140199888395766219531037241170343808255840924188245454956142386139244794906515038669041924660722425023025928117628508372366644285237362407944495873821538507770413651449094441163240238286565094607519076575208467240275920554953315880641176330738748861513633734156229399271007081912129674218324814854395188211866272803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24eba2d0c30ac058a8f38b887363aecf3629a2fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/I-utWIInJW8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7LD__FSViFg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9d92ab8c000004030047304502205d1df6e00aa9dfc052e55d33eb11de77e951c5b9770a51d379b083f88c05a621022100bad86ff952de83b367435392ab5315b3986912319e0ee8683b52d941233f4e65007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e9d92abc900000403004630440220447ea107ff3304a92663c20b1a3733c6b74c25dffc8d27a7efcbb6588dc0cfab022045e292b20aa5d5b7f40832deb2c3ce6b34a64e54224a6d996f01c83326a3c3b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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