kmes.fairfield1.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ef:d6:46:ab:ce:a0:70:ac:11:e3:4f:8f:20:9a:94:f7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kmes.fairfield1.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:d6:46:ab:ce:a0:70:ac:11:e3:4f:8f:20:9a:94:f7
Serial Number (int): 318798075900957264526157266723129693431
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c9:3d:6b:c9:33:39:6e:a3:4d:43:2b:c0:64:9f:eb:ae:fc:8b:d2:74
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d4:24:6c:21:8b:b4:4d:33:58:0a:8b:85:15:6c:ce:76:ea:53:10:0d
Fingerprint (sha256): 6b:2c:9c:40:f7:6a:cb:1a:f8:a5:00:09:c0:25:23:34:a4:3d:b2:f9:1a:b1:da:46:ac:99:2f:b0:8f:9c:31:59

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Q9rYwF8welU
CRL Distribution Point: http://crls.pki.goog/gts1p5/EN_brswOnIQ.crl

Check the revocation status for certificate kmes.fairfield1.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kmes.fairfield1.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kmes.fairfield1.org

Other certificates including the domain name fairfield1.org

(limited to 100 certificates)
cad.dcs.edu
webadmin.br.elanco.org
admin.cad.dcs.edu
adelphia.howell.k12.nj.us
admin.chabot.cv.k12.ca.us
cses.comalisd.org
fairfield1.org
admin.creekside.cv.k12.ca.us
canyon.cv.k12.ca.us
admin.hills.bcsd.com
www.anacondaschools.org
fairfield1.org
webadmin.nh.elanco.org
admin.bce.slvusd.org
www.bce.slvusd.org
admin.fairfield1.org
admin.sre.dcs.edu
jhe.dcs.edu
fairfield1.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
admin.bms.dcs.edu
grahames.org
admin.sre.dcs.edu
webadmin.elanco.org
newgulf.bolingisd.net
ghctk12.com
admin.thorner.bcsd.com
fairfield1.org
www.fairfield1.org
webadmin.gsms.elanco.org
fmis.anacondaschools.org
fairfield1.org
mvms.comalisd.org
proctor.cv.k12.ca.us
admin.ms.slvusd.org
admin.ajhs.dcs.edu
rbes.comalisd.org
kmes.fairfield1.org
admin.swprep.org
admin.charter.slvusd.org
webadmin.bb.elanco.org
admin.ajshs.anacondaschools.org
admin.canyon.cv.k12.ca.us
fairfield1.org
fairfield1.org
admin.ajshs.anacondaschools.org
admin.ahs.dcs.edu
admin.virtualacademy.cv.k12.ca.us
*.fairfield1.org
fmsms.fairfield1.org
fairfield1.org
fairfield1.org
admin.slvusd.org
admin.cvhs.cv.k12.ca.us
jensenranch.cv.k12.ca.us
admin.dms.dcs.edu
admin.fmis.anacondaschools.org
excel.dcs.edu
weec.dcs.edu
admin.stanton.cv.k12.ca.us
admin.alma.cv.k12.ca.us
admin.jhe.dcs.edu
adelphia.howell.k12.nj.us
creekside.cv.k12.ca.us
admin.wde.dcs.edu
admin.williampenn.bcsd.com
admin.fairfield1.org
ajshs.anacondaschools.org
admin.lsm.dcs.edu
1fairfield.org
fms.fairfield1.org
admin.excel.dcs.edu
admin.ajshs.anacondaschools.org
admin.jensenranch.cv.k12.ca.us
fairfield1.org
admin.newgulf.bolingisd.net

Certificate

The complete raw certificate details for kmes.fairfield1.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEeDCCA2CgAwIBAgIRAO/WRqvOoHCsEeNPjyCalPcwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMTMwMTA1MTA5WhcNMjQwMjI4
MTA1MTA4WjAeMRwwGgYDVQQDExNrbWVzLmZhaXJmaWVsZDEub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R+1b3LzpDRvaPW6bKGB+PEIz/wwRl4w
nH82fS07UFODn7WzeQOFl2/i39W91FQ9rZOjrfTsKXM/+MvtzRyIvmxLd/GaAaz1
lpk30MEewRhcy9zZwTskggNBxaOdnrEtqsL9dflIaHXFEA8WL0SAZX30G/sGxKWJ
Nm+Lcx7Cp5rptPaORb0Ufaoi93h3t0hKnUrixiSVQL2PqnIALJ6/U3VldB4Ja0VF
v6vFsuw70ewGMOzukTGRtiE+U7Yr87Jxrfk7vqoqZaiMIAsRq8cYHhNi89gHPRoy
dgLcArxJ92cnphowgaCBbzPQ5c4N7I9Cq8JT320/QSW9/fEVthhF2QIDAQABo4IB
hzCCAYMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFMk9a8kzOW6jTUMrwGSf6678i9J0MB8GA1UdIwQY
MBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEF
BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvUTlyWXdGOHdlbFUw
MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5k
ZXIwHgYDVR0RBBcwFYITa21lcy5mYWlyZmllbGQxLm9yZzAhBgNVHSAEGjAYMAgG
BmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9j
cmxzLnBraS5nb29nL2d0czFwNS9FTl9icnN3T25JUS5jcmwwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC1+3G7ePrIjDTdPc8sw0oXVe2bT
hjOqlGlc1MRFYcvVO2B5Caz/osA5PYEsCnw2upWeORFrPC/hh02uWle7qjmLB/Za
YsybI4QI8qDEQh3Ogq1fgolwNzRBKBU/INRPRpBJL2BxR+ARDHdPQQbd2XaFRtxj
NCJQ8P6EGkKOdbXCmxrTrZyTXP50VqWgKnAJ3tB7dsQfYNG3eAt8PUmylwaz8wTC
huvoB/E8rIEPvMp86u5PZ9ve+04qXOiPjdKJjefA8xkXkGQxBxlykJTDT4pWTfNA
6ZT7WfzhIDV8qPQ+t4u6Q7kKjFQB1YKyJ6SIeyNWcfYAFxnW12AgqZf36Pg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R+1b3LzpDRvaPW6bKGB
+PEIz/wwRl4wnH82fS07UFODn7WzeQOFl2/i39W91FQ9rZOjrfTsKXM/+MvtzRyI
vmxLd/GaAaz1lpk30MEewRhcy9zZwTskggNBxaOdnrEtqsL9dflIaHXFEA8WL0SA
ZX30G/sGxKWJNm+Lcx7Cp5rptPaORb0Ufaoi93h3t0hKnUrixiSVQL2PqnIALJ6/
U3VldB4Ja0VFv6vFsuw70ewGMOzukTGRtiE+U7Yr87Jxrfk7vqoqZaiMIAsRq8cY
HhNi89gHPRoydgLcArxJ92cnphowgaCBbzPQ5c4N7I9Cq8JT320/QSW9/fEVthhF
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318798075900957264526157266723129693431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 10:51:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 10:51:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kmes.fairfield1.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26904395116202105389297255061803696108574989137738190177123188546823448520635069157639172367357507276223267669028156472425484092003000856821154106292580197165020485524600032354271474266669840953958797494938664812128809132505296842294336593563695782129418195834458375520261849192705548163944954617198085839010368176800820812466007262512097630751719992723053233609430770220100801325453499703996436131774057242499657886963413538845613712818932237771797730610452307764974583804577034345405164902582976761131776982176143076142370874917181508268026650668971696424435069162741392716141553605920110361839704855353805325747673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c93d6bc933396ea34d432bc0649febaefc8bd274
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Q9rYwF8welU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmes.fairfield1.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/EN_brswOnIQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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