des.tipton-county.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d0:8c:f0:22:d3:c9:55:4a:0d:e4:9b:a1:93:55:37:22 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=des.tipton-county.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): d0:8c:f0:22:d3:c9:55:4a:0d:e4:9b:a1:93:55:37:22
Serial Number (int): 277211215221064513247132915020047136546
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:89:95:6d:84:20:1f:31:57:d0:84:fa:e4:e2:41:a1:80:90:68:42
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 76:ba:9a:77:f3:bd:a0:c6:48:99:cb:b1:55:c5:32:09:dd:14:ac:6c
Fingerprint (sha256): 72:22:33:04:16:95:44:bf:c7:cf:c1:4d:13:65:24:31:ef:97:ba:2d:18:af:c2:b9:41:be:20:b3:e8:6d:7a:92

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/eMszI2L4I8w
CRL Distribution Point: http://crls.pki.goog/gts1p5/tc1RyyvmF50.crl

Check the revocation status for certificate des.tipton-county.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for des.tipton-county.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

des.tipton-county.com

Other certificates including the domain name tipton-county.com

(limited to 100 certificates)
tipton-county.com
cms.tipton-county.com
admin.annasmithelementary.tooeleschools.org
des.tipton-county.com
www.peachtreeridge.org
admin.cms.tipton-county.com
tipton-county.com
admin.annasmithelementary.tooeleschools.org
admin.bes.tipton-county.com
chsbdc1.tcs.tipton-county.com
admin.annasmithelementary.tooeleschools.org
admin.des.tipton-county.com
admin.tipton-county.com
admin.jcles.org
ciaa.tipton-county.com
helpdesk.tipton-county.com
tipton-county.com
admin.aechs.mcallenisd.org
admin.annasmithelementary.tooeleschools.org
ces.tipton-county.com
webchancery.tcs.tipton-county.com
admin.mozart-secondary.vanguardacademy.education
pdc.tcs.tipton-county.com
bes.tipton-county.com
*.tipton-county.com
CHSBDC1.tcs.tipton-county.com
*.tipton-county.com
tipton-county.com
ces.tipton-county.com
admin.annasmithelementary.tooeleschools.org
*.tipton-county.com
admin.annasmithelementary.tooeleschools.org
des.tipton-county.com
ces.tipton-county.com
aes.alcoaschools.net
des.tipton-county.com
wiki.tipton-county.com
admin.arcatapreschool.org
admin.ig.mcallenisd.org
des.tipton-county.com
admin.collegeachievecentralcharterschool.org
travis.hcisd.org
des.tipton-county.com
WSUS2.tcs.tipton-county.com
admin.annasmithelementary.tooeleschools.org
admin.morseschool.net
admin.mainlandregional.net
admin.aechs.mcallenisd.org
admin.chesterfielddayschool.org
admin.burney.hattiesburgpsd.com
ates.tipton-county.com
des.tipton-county.com
admin.ates.tipton-county.com
tipton-county.com
tipton-county.com
ces.tipton-county.com
admin.annasmithelementary.tooeleschools.org
ates.tipton-county.com
des.tipton-county.com
colegiomm.edu.mx
admin.mhs.tipton-county.com
www.thorneschools.com
admin.ates.tipton-county.com
admin.edlio.mx
ces.tipton-county.com
tipton-county.com
admin.annasmithelementary.tooeleschools.org
admin.annasmithelementary.tooeleschools.org
des.tipton-county.com
bishopmacdonell.wellingtoncdsb.ca
chs.tipton-county.com
des.tipton-county.com
admin.arcatapreschool.org
*.tipton-county.com
mes.tipton-county.com
mail.tipton-county.com
BHSBDC3.tcs.tipton-county.com
admin.arcatapreschool.org
ates.tipton-county.com
WSUS2.tcs.tipton-county.com
admin.arcatapreschool.org
webchancery.tcs.tipton-county.com
abchandler.henderson.k12.ky.us
cms.tipton-county.com
ates.tipton-county.com
admin.ates.tipton-county.com
helpdesk.tipton-county.com
mms.tipton-county.com
*.tipton-county.com
*.tipton-county.com
CHSBDC1.tcs.tipton-county.com
*.tipton-county.com
www.hoffmanelc.org
BHSBDC3.tcs.tipton-county.com
helpdesk.tipton-county.com
wiki.tipton-county.com
buhlerschools.org
www.sycamoreprep.org
tipton-county.com
ces.tipton-county.com

Certificate

The complete raw certificate details for des.tipton-county.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu15trVc8UjlmGJwLLAoV
1qZjXptwkQYGzPsMCFCrjyBntEMTooX+1R03lSFxR1ibVOzzIE2mKLEdLe2hc9Uk
lygI2ASGAMHwQPPBUhXbDkH5PN0BDhWfElJl0Y+RcQJ6n21Tz4kirirJExuih0Cl
ajPgIFaoC4zZX2oyGXtInO0AmAtcaHPMVG2ffUONgjuwgaQ2hB4sffRGB2zuogzk
c5Drik+du+R9iYJjeCsN0Lfic/JS7oWc9nREw8deJup71ljm5iT0Pun2c39vrjOf
13pfsdXABmO7r7zyOPOCNAM2lcTvRtRumOSP0i1YLKoHh+b+sgf3+SrTLqDp9Qvj
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277211215221064513247132915020047136546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 21:58:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 21:58:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'des.tipton-county.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23653127421100794732088409042348645116779186403556284675903861546072116432514210898421217973982197826556606929023378059913506134058395966505667470962713618839961847112954401193563198363778651536178172054955066922572286592769670062360793716130715738839578966412674144823400566260076785765449067755847876705030326177308945958709582958077112709121233295229716711031753042422788937384274988711357003538135291733554652972278323935357742458141183918844212331706344805554965290068397421689290171179263461725093279367897116377421140765457685367447693431524070694465695573203363926138868909417141911431969048429580653255451557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f689956d84201f3157d084fae4e241a180906842
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/eMszI2L4I8w'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.tipton-county.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/tc1RyyvmF50.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018fd0e00cba0000040300473045022100e7737057278214f0d5d3d43fdd851a6bec5f90d8afc7faec24ca2bbb88464eea02207bf0103f4119a01480b32b8b6b6a813ae6b5c0b59be29d2f855c860cce3594c700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fd0e00cb9000004030047304502206d450f986a76c672f309c1b0198ef6f0d37c2f1ebc5efc9e9a617f48319c9ee4022100c506fcf6573c454965da28f1d5f5224823219137710302fd7cb2d28b4146eee6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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