fulton.northbergen.k12.nj.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 20:e6:ef:fa:46:4f:00:91:13:83:74:42:f5:fc:16:3f was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fulton.northbergen.k12.nj.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:e6:ef:fa:46:4f:00:91:13:83:74:42:f5:fc:16:3f
Serial Number (int): 43734391467275678106227258406771365439
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 38:82:8b:a2:50:54:8d:cd:fb:3a:cf:92:65:5d:56:c0:7d:c8:f6:b5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): ad:8b:2e:89:f7:7c:32:88:44:6d:cc:5c:58:a9:d9:80:20:e7:8d:7b
Fingerprint (sha256): 62:ba:eb:d4:69:ed:55:07:0c:7a:16:05:f9:22:35:7a:b7:91:7e:79:f6:46:de:c3:46:4d:8c:b9:60:f2:11:45

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Qsy_R8DXaqE
CRL Distribution Point: http://crls.pki.goog/gts1p5/kDE61icPy9w.crl

Check the revocation status for certificate fulton.northbergen.k12.nj.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fulton.northbergen.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fulton.northbergen.k12.nj.us

Other certificates including the domain name northbergen.k12.nj.us

(limited to 100 certificates)
mckinley.northbergen.k12.nj.us
northbergen.k12.nj.us
cte.kernhigh.org
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
www.ps086.com
mail3.northbergen.k12.nj.us
admin.bas.kernhigh.org
mail3.northbergen.k12.nj.us
horacemann.northbergen.k12.nj.us
admin.spxtulsa.org
northbergen.k12.nj.us
cra.freeholdtwp.k12.nj.us
northbergen.k12.nj.us
admin.aes.acsc.net
northbergen.k12.nj.us
admin.church.spxtulsa.org
2.southampton.k12.nj.us
admin.es.lorenaisd.net
northbergen.k12.nj.us
www.lincolnparkhs.org
fulton.northbergen.k12.nj.us
lincoln.northbergen.k12.nj.us
admin.cfh.edu.mx
sfrschool.org
admin.franklin.northbergen.k12.nj.us
admin.acsc.net
mail3.northbergen.k12.nj.us
admin.chuckey.greenek12.org
2.southampton.k12.nj.us
admin.arvin.kernhigh.org
admin.ps17queens.com
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
harpethhighccs.net
nbhs.northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.cfh.edu.mx
northbergen.k12.nj.us
www.northbergen.k12.nj.us
ps086.com
admin.arvin.kernhigh.org
admin.cfh.edu.mx
www.mstmaatroosevelt.org
northbergen.k12.nj.us
www.ps17queens.com
admin.stockdale.kernhigh.org
lincoln.northbergen.k12.nj.us
2.southampton.k12.nj.us
westcheathamccs.net
admin.cfh.edu.mx
admin.arvin.kernhigh.org
northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.northbergen.k12.nj.us
admin.horacemann.northbergen.k12.nj.us
admin.avrlacademy.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
northbergen.k12.nj.us
franklin.northbergen.k12.nj.us
1.southampton.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
admin.arvin.kernhigh.org

Certificate

The complete raw certificate details for fulton.northbergen.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMesvh+bE8WNA8+iYkJO
54/9BbusTTstvq6HZubWWEmMtOfhiJJ3ct0JVZozrlQ1YExMCthxT6O6KvJSDtBl
NiZlCA8oIMCrK9eiyWowH+7gx9I1i1Rf5jZlOj27WHXpfqQ44w1VZpT4Fyf4Fc0K
4bfZKDHlGdWtNXObCN8I7brjbh7di5AFOhQEuP7BiU7UvxLP+oQRYWHfbvdml73h
fMIGBKcRvLKu+dUhvAWGE2z536ZHSdq3ze5Fq3e1vEAYXn+ji7S2aGzDMBQ8SP+/
UPxIwhfSxvtuiMFRB0XYtlup0gotD/mvV+J+ESMyJ2IHrFKR3a23n6q7h9ZOkSxy
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43734391467275678106227258406771365439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 07:40:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 07:40:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fulton.northbergen.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24841171075197121231236161248700071389498013000052668555540821814978521953900719772423977629281107331902886042690017850096127455154052759372723562214072837022971631987635730075625745612552863010367747886117649364394219163942707761131479414943778867430945496970978177474970901384473109229934775842400776276201971400153585958547057855782699150282530249001276326490901770668124091878300085736318742572659166757680603971397639524151401246543268810524061692488022589271907280618550901230109323669180581102177728534577467969041426840688897328121614549329034417660322860840874960103614666920005801225113549061118697440834303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38828ba250548dcdfb3acf92655d56c07dc8f6b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Qsy_R8DXaqE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kDE61icPy9w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bfb566dd400000403004630440220604c87da52df7126499c4022b2f659f36b51664778e906143d142abce35c6d8b0220282e1fca662aada0efed2d79b76f75d19f2e2ddb2d4167690b2297dcf8142b7c007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bfb566e16000004030048304602210094eb724a604c97efa3d8e15a34515fe34e864e96433c8cf34147a90b4b3f7f4702210092c7d640591c67965c783e512b729287663f139069db5bd3d736f34a8641fdf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f1f1e64ce26c8701f9bc2478dfd6c808e4cbe51b6d680e5c773c9f3b847130a07d2e21086c66c9688014f39b31b7eb90d9aa64201ea3709c08989587aca8549f997c8080b5559f5b08fb1c5fbebd68d1964602d9e5a3ed430cbc29ef52d9331406ce8b5f1cec720ead263ba5197131e81f43d41f395731dffd51bc9dc88a47d9708614fd360783de6799065e72396d359a9e438627d967373ab0b223d9c2627f4f662f9c351756b7ab1b3f2d5dff7c6fae663aa752fcbefc03cf1a827ea14bab27f094672fd546cf653528b2f1dd2d964b9a51724e8dec4c801326c5fd5a292b6d9221f70ddea6f297f6af26c4f8bd18fd1ddcc2f5f65a38a6d4566e22f596e