mesa.luciamarschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number b0:a3:f6:e7:ff:b4:20:13:11:5a:1d:9e:94:19:ea:10 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mesa.luciamarschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b0:a3:f6:e7:ff:b4:20:13:11:5a:1d:9e:94:19:ea:10
Serial Number (int): 234795479499690845259946348062342507024
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b4:94:a7:99:d1:50:5b:27:6c:d1:74:93:82:0b:e0:a5:b0:db:eb:87
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): fd:18:4a:e8:cf:4e:df:7b:49:c0:58:e8:b0:10:97:a2:cb:3a:a9:9c
Fingerprint (sha256): 71:99:c7:ee:cf:4b:c2:56:0f:01:1b:52:4b:c8:1f:60:49:11:31:05:96:d4:de:66:2f:92:b0:79:22:45:8a:24

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/QF8OBiqmjjc
CRL Distribution Point: http://crls.pki.goog/gts1p5/1iS8I0jLTkE.crl

Check the revocation status for certificate mesa.luciamarschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mesa.luciamarschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mesa.luciamarschools.org

Other certificates including the domain name luciamarschools.org

(limited to 100 certificates)
lange.luciamarschools.org
branch.luciamarschools.org
groverbeach.luciamarschools.org
oceanview.luciamarschools.org
admin.groverheights.luciamarschools.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
acatitlan.edu.mx
acatitlan.edu.mx
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
elementary.colfaxschool.org
luciamarschools.org
luciamarschools.org
admin.mhs.centerusd.org
nipomo.luciamarschools.org
excel.dcs.edu
calhanschool.org
adulted.luciamarschools.org
luciamarschools.org
admin.ahs.ardmoreschools.org
luciamarschools.org
branch.luciamarschools.org
admin.adulted.luciamarschools.org
admin.harloe.luciamarschools.org
admin.adulted.luciamarschools.org
fcctc.franklincountyschoolsms.com
luciamarschools.org
admin.adulted.luciamarschools.org
yhs.yorktown.k12.in.us
acatitlan.edu.mx
acatitlan.edu.mx
admin.adulted.luciamarschools.org
franklincountyschoolsms.com
admin.ahs.ardmoreschools.org
luciamarschools.org
admin.athletics.rimsd41.org
harloe.luciamarschools.org
admin.adulted.luciamarschools.org
mesa.luciamarschools.org
www.mountalvernia.org
oceano.luciamarschools.org
groverbeach.luciamarschools.org
admin.middlehigh.alexandercsd.org
luciamarschools.org
oceanview.luciamarschools.org
luciamarschools.org
dana.luciamarschools.org
admin.adulted.luciamarschools.org
admin.aprandolph.com
admin.branch.luciamarschools.org
dana.luciamarschools.org
luciamarschools.org
admin.ewamakai.org
luciamarschools.org
admin.lange.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
mesa.luciamarschools.org
acatitlan.edu.mx
luciamarschools.org
nipomo.luciamarschools.org
admin.adulted.luciamarschools.org
luciamarschools.org
admin.adulted.luciamarschools.org
shellbeach.luciamarschools.org
admin.adulted.luciamarschools.org
adulted.luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
athletics.rimsd41.org
admin.alt.sbcisd.net
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.fairgrove.luciamarschools.org
admin.adulted.luciamarschools.org
acatitlan.edu.mx
admin.oceanview.luciamarschools.org
l2ic.lex2.org
luciamarschools.org
admin.adulted.luciamarschools.org
admin.adulted.luciamarschools.org
el.westwoodisd.net
admin.adulted.luciamarschools.org
admin.branch.luciamarschools.org
charlottemecklenburgvirtualhighschool.wearecms.com
tiegerman.org
admin.adulted.luciamarschools.org
fairgrove.luciamarschools.org
admin.judkins.luciamarschools.org
admin.adulted.luciamarschools.org
www.rilohs.com
admin.adulted.luciamarschools.org
lange.luciamarschools.org
acatitlan.edu.mx

Certificate

The complete raw certificate details for mesa.luciamarschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WNfbikBCFE312p45D4o
ahtUdGc16Wy9cARdHJLjd1cXE4119RsUVYUZJYeuEmKN6zjbnDNNfsqj3J7taUPa
NWEAb70lE2CPsywWNVk4VFAFAYf3JXgzPuJbIXKgeVtCk+zC2M8jbbrgoJylzHuC
c5yhIKvKBt9mEZwAing83qjjI5X6hhDcPUQVo1djTHZ4+0uyd7Gi8glTgtEEIhOo
D3nx77uI2FM6ComC7QSNyhW1yOUC2YuefCZeExq2roOg4n5gPqFOXp9sIgilu39X
N13/UlTtHhAy77xAhZ5lqZvSOUCEs/uF5p4OkmawQ0wgOdulk0Wxf9oW0kQgrU0h
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 234795479499690845259946348062342507024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 01:56:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 01:56:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mesa.luciamarschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26937761499305474787757037069550074294076738865638492607583298096521508701973332494367698472229946435416528602935495292409355466120804134529684868383814344674304736649595070921972721115016774978721511119086532536775343050833033791995320890006522359635566784828485918610896484963057661466951449993959609778334765977976474073688388354841910789453543599225701805241275402325446448739129978184063317417379168860574459081355201584279798297947588193585772833845315907434559801411267584384166404805952926363212906385740248483160715397487900215939679573783131287196071795923070146523706918723401247353543358987161563780948371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b494a799d1505b276cd17493820be0a5b0dbeb87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/QF8OBiqmjjc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.luciamarschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/1iS8I0jLTkE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d29f328940000040300473045022061126d0385f9c760ed70d61fe44bc0a52ddc3931580dc60badd343fba4beb399022100ecfb2a8e1f7f08f7c46010c362017cdebd26287ff6626757b4d89b5e2a6137be0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d29f3287600000403004730450220657cb1ea5d9c61d8d61325430055568f3b5a9539dabb5ae477945b0198e83b66022100f114d5913ddbca9ed04a7a4d9e3fa41ed21334da38526da20cfcb4e5cae29036
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004bccb7082d9daa4ee6743c7ce487e47129962da06d17f8ac5906c6b4a9372def69b88bb83b0d26fca42cf455955c214d67f8f5644f12e7ee9ff23eb18fa55eb1ee4afac7928827ca407f8bb192d8430ff97fe06a43037e3b73f1fc42b91ac91b32be1c3937abec06539a1dc6c4e554281519241cb8dd22c45a10c9d05df419b351f880b9f8f924350e21698687471cd15c461f09635733c1ef6dc57a281d54c3cba0f94093ddd45722ee5db93ec28c03d78f558c1dec50627066fa132a18f2d17511b206eb2cd5fe9f6d1a05ca6b71618ceceb01fb216cfded1e6a9bb37b509a9604d48e5931d3c1b59cd2dc3057f3d25e6096ff9c5501ec0f0836510e13edd9