d124.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number b9:b2:a2:19:9c:6e:10:35:0d:fa:83:79:51:77:e9:b9 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=d124.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b9:b2:a2:19:9c:6e:10:35:0d:fa:83:79:51:77:e9:b9
Serial Number (int): 246834695840501210141135717566737017273
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0d:ac:05:da:8f:03:91:51:a2:47:4a:dd:c6:dc:98:13:69:16:40:ab
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d0:6a:2a:e4:7b:1c:bb:7c:fa:22:cc:f5:63:b5:2c:81:44:11:7a:05
Fingerprint (sha256): 69:69:d5:a5:76:a4:f7:5b:49:71:98:1f:97:5f:19:0f:49:47:f5:64:59:2a:3d:12:ed:c8:80:10:85:41:61:d1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/WI6M7nRNReE
CRL Distribution Point: http://crls.pki.goog/gts1p5/lGqL8Gx3mx4.crl

Check the revocation status for certificate d124.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for d124.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

d124.org

Other certificates including the domain name d124.org

(limited to 100 certificates)
admin.argyleisd.com
admin.argyleisd.com
academywest.hamadyhawks.net
admin.argyleisd.com
hphs.flo2.k12.sc.us
centralmiddleschool.d124.org
dc1.d124.org
cms.wvsd.org
www.granths.org
admin.d124.org
d124.org
www.sgisd.net
admin.altavista.unionsd.org
www.d124.org
admin.centralmiddleschool.d124.org
adfs.d124.org
admin.altavista.unionsd.org
www.ekhla.org
admin.sd44.org
southeastelementaryschool.d124.org
admin.altavista.unionsd.org
www.cristoreyorangecounty.org
qhs.burnetcisd.net
d124.org
admin.argyleisd.com
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.eastvalleycentral.evsd90.org
helpdesk.d124.org
admin.argyleisd.com
southwestelementaryschool.d124.org
admin.argyleisd.com
admin.griggscountycentral.org
saspasadena.org
admin.bes.burnetcisd.net
sgisd.net
d124.org
admin.argyleisd.com
admin.argyleisd.com
powerschool.d124.org
admin.argyleisd.com
admin.altavista.unionsd.org
d124.org
www.arapaho.k12.ok.us
admin.d124.org
admin.altavista.unionsd.org
admin.argyleisd.com
northeastelementaryschool.d124.org
md.sd44.org
admin.argyleisd.com
www.theirvingtonschool.org
admin.argyleisd.com
admin.argyleisd.com
admin.altavista.unionsd.org
admin.argyleisd.com
admin.altavista.unionsd.org
owa.d124.org
admin.argyleisd.com
admin.altavista.unionsd.org
d124.org
d124.org
admin.argyleisd.com
admin.altavista.unionsd.org
admin.athenour.unionsd.org
admin.altavista.unionsd.org
southwestelementaryschool.d124.org
athenour.unionsd.org
d124.org
admin.carlton.unionsd.org
admin.bes.burnetcisd.net
svts.wvsd.org
www.d124.org
admin.bes.burnetcisd.net
earlylearning.wvsd.org
d124.org
admin.argyleisd.com
admin.altavista.unionsd.org
admin.burnetcisd.net
*.d124.org
mealmagic.d124.org
admin.argyleisd.com
admin.north.legacyprep.org
dc1.d124.org
admin.argyleisd.com
lisbahamas.com
uci.edu.mx
northeastelementaryschool.d124.org
northeastelementaryschool.d124.org
www.socialjusticemclc.org
taylor.ogsd.net
admin.altavista.unionsd.org
northwestelementaryschool.d124.org

Certificate

The complete raw certificate details for d124.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc+N7Rk9ZTuktSI4bcMg
MQkeETKsKcHsvKL7wHplKgx2AJzgXc3r9fkyakD0KQY+iDTbCo0eGY/yNvZkqMPL
XrUVVb3hgMObnS847tgxoV+ZGoDQHdWLqqk8z93KIN7owKiURvsrQeTN8NppUmca
8Xk0oUWlvHAylTnUTiuIQGT3kvtxiczgztIGdzQxOFYybgcNtGdMEDzK0N54WgvQ
kZPPZjzLR1J88YApQv2+zluN+MCrkxe+XcX79hxFwQLRGHfDBrVZST2ozNSKdLFE
hU/aD3AqX6kbqjtwmh7cNrERHxtoRi2gEqxbLpRgFjHICQOoCANpXwynWizWI3j+
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246834695840501210141135717566737017273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 09:43:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 09:43:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'd124.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24971294967098879046723617844248382350833172089526681471141023650894768935031559235508520564295906956446294243068161415374002036822031514227051424169232142012485394996255992779135724249199783564958810379572319582379399148874846383909791550381912825952795564464252651305312044842951830355344197293562646534318410393428618435283315215025203709645360881738406998489901354531405967941555538652015554935631104395986903332980536640435024710867445445994197696351382050555247543450948938978973672220664105327826236323541363308478397947248012051861035243400752430510342543230508500884988608768069259042136846449813807447998003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0dac05da8f039151a2474addc6dc9813691640ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/WI6M7nRNReE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd124.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/lGqL8Gx3mx4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aeffc47b30000040300463044022008179d78eb97d758b9370380c44dfc61c0894d468845ab9da4e70a212077842d02200d3ad17d18b3928114ae88eb538ff2f684584c5b2a554e81172bc6f42c88e3760075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aeffc47ed000004030046304402203c09abd5657dcd90892dcb3dcf8371c7d611b627cc9aa00934233c443635d3ba02205cf3a34c2d5fabecd81c39013d41166eceefb563b3017a89ac4699dbf36241a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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