calmecaacademy.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 0b:45:41:cd:86:4d:85:dc:11:3a:df:b1:87:ad:1b:d2 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=calmecaacademy.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:45:41:cd:86:4d:85:dc:11:3a:df:b1:87:ad:1b:d2
Serial Number (int): 14981111076835241229515279293003668434
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e4:d2:28:35:2c:46:b4:1e:64:3c:3b:15:e5:26:e4:04:a2:b2:54:bd
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 04:ea:f2:bc:2f:0d:e9:3b:42:e2:2f:ab:a2:1c:08:59:49:12:f9:08
Fingerprint (sha256): 78:07:1d:b8:53:4c:5f:12:e0:05:d7:ce:86:de:08:8d:17:47:6b:62:ae:f5:1b:12:de:b5:7a:96:0d:df:7b:6e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/zIMjc2PH0YQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/WG5wH53YbGk.crl

Check the revocation status for certificate calmecaacademy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for calmecaacademy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calmecaacademy.com

Other certificates including the domain name calmecaacademy.com

(limited to 100 certificates)
admin.allenparkschools.com
admin.calmecaacademy.com
admin.missionprep.org
www.calmecaacademy.com
admin.mckitrick.lskysd.ca
calmecaacademy.com
www.kaumanaelementary.org
dimensions.org
calmecaacademy.com
fernhill.fgsdk12.org
calmecaacademy.com
www.missionprep.org
www.siths.org
admin.omardblaircharterschool.com
www.hilohs.k12.hi.us
cathedralschoolny.org
admin.kauffmanschool.org
admin.bcs.lskysd.ca
calmecaacademy.com
northregionselpa.org
www.garvanzaelementary.org
www.calmecaacademy.com
admin.hamlincharter.org
admin.dimensions.org
calmecaacademy.com
admin.bennie.allenparkschools.com
www.dcsocal.org
admin.allenparkschools.com
admin.allenparkschools.com
admin.calmecaacademy.com
admin.dimensions.org
admin.calmecaacademy.com
www.ryderschool.org
hamlincharter.org
admin.bcs.lskysd.ca
lskysd.ca
calmecaacademy.com
pal.ldcsb.ca
admin.calmecaacademy.com
www.calmecaacademy.com
edtechteam.mx
admin.allenparkschools.com
www.northregionselpa.org
admin.bcs.lskysd.ca
admin.apcs.allenparkschools.com
www.sunrisewaldorfschool.org
www.ccoe.k12.ca.us
mai.mcdowell.k12.nc.us
admin.allenparkschools.com
admin.bcs.lskysd.ca

Certificate

The complete raw certificate details for calmecaacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIQC0VBzYZNhdwROt+xh60b0jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA1MzAwNDAwNDRaFw0yNDA4Mjgw
NDAwNDNaMB0xGzAZBgNVBAMTEmNhbG1lY2FhY2FkZW15LmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALbspDd7kQEqu1fxmaR324hNvOpnpeJmyYDL
p6cL+qSM55SnBkg1mlSiqrQ42P3YqYk4hsduCTvYTrHp1oGyjJrItTxC3Got46la
lq29rqpEypIzdnHsE8w2h7mpRE0QStWMUukiO9Y6JcJlc4u3ghqg+PMYfgz8YnM6
wN5zUtWQkSnnZu/2DZw9zCaNc6xF/RNhpGG22EVBjjYlDDg7t09Yj9Fx3mqmZmlT
luj/EZ1jnizdjkhgIgjoEP3ZNgmXxW6V7lsEBPAvtBxMdydqd5OxhMfaQcUDuc+S
QveIyKOwBamSU+Oh1EB/H+wow7lLabwvEN98c4WXRkvzkf4F8JsCAwEAAaOCAngw
ggJ0MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTk0ig1LEa0HmQ8OxXlJuQEorJUvTAfBgNVHSMEGDAW
gBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L3pJTWpjMlBIMFlRMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVy
MB0GA1UdEQQWMBSCEmNhbG1lY2FhY2FkZW15LmNvbTAhBgNVHSAEGjAYMAgGBmeB
DAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz
LnBraS5nb29nL2d0czFwNS9XRzV3SDUzWWJHay5jcmwwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdQDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY/H
3zOtAAAEAwBGMEQCIE9KI0PIq5DqC7ZlZxWpuMfuKqIeRpyVP8At66Y51fnLAiAY
GZqgEupRjXhaJhi01oe6GTYtylxvIHiaPfz0Js5jqQB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABj8ffMuEAAAQDAEcwRQIhAKXQEzTEVBMG8iwM
1ItwnHrnzLa2nwa4IjF/poQEQSOpAiBdZFNgoBLrxiytnmK+1/yRqNRCpape4Nro
nRFfp0sCeDANBgkqhkiG9w0BAQsFAAOCAQEAIEVgJOXc8Hx6Z/bWQpfSIOTFXYVi
UZcVSwariE/1RDpmlvU9vXLGO5fz+eNf1ujbFq5KbHdoGDsABlmXRi91BhosUbW9
53fC720m283wZgv6NsT8GSn0qBUEwxtE/zHfM/g4f5ExH03Vz8o68Ls/C/amwILi
HUh8hU4gsIsXW0nXkHJ4G8/TVOP+KSgcEttTLQ7/nOdKcO0LU1GHyxOBwfLJ6vow
Z/NH7xvY/oTTFNuPRPCJwMBojbETEmqelPreM0tHKb5WUYT/kFU1Wy+wN7VzLjGS
uwHrne0GcNJDxJluOnBLnTKAz944ejTrnTOX2Z1INPCRdvmGT9/nA3u1vQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuykN3uRASq7V/GZpHfb
iE286mel4mbJgMunpwv6pIznlKcGSDWaVKKqtDjY/dipiTiGx24JO9hOsenWgbKM
msi1PELcai3jqVqWrb2uqkTKkjN2cewTzDaHualETRBK1YxS6SI71jolwmVzi7eC
GqD48xh+DPxiczrA3nNS1ZCRKedm7/YNnD3MJo1zrEX9E2GkYbbYRUGONiUMODu3
T1iP0XHeaqZmaVOW6P8RnWOeLN2OSGAiCOgQ/dk2CZfFbpXuWwQE8C+0HEx3J2p3
k7GEx9pBxQO5z5JC94jIo7AFqZJT46HUQH8f7CjDuUtpvC8Q33xzhZdGS/OR/gXw
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14981111076835241229515279293003668434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 04:00:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 04:00:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calmecaacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23092063762647951627279224720656526435318527333392895813331823510471622396074947957562879292699275665319304143213739598463667868776315068149368433493727263208493937542641120724097183903408399006929412858360273498223133483363665918018494168905515988931129775926347033131774968595402643784148882672199925931446847183917418054248564848689465191032718279656553500136397353871162128827309347141440071684868140191399391204402726919663043368519165880640881806990340741076584155221527440794631762735469059591899758022748942453111286232169731899282581512882482247192227917471574585199307498529132739097914426666490112491516059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4d228352c46b41e643c3b15e526e404a2b254bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zIMjc2PH0YQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/WG5wH53YbGk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fc7df33ad000004030046304402204f4a2343c8ab90ea0bb6656715a9b8c7ee2aa21e469c953fc02deba639d5f9cb022018199aa012ea518d785a2618b4d687ba19362dca5c6f20789a3dfcf426ce63a9007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fc7df32e10000040300473045022100a5d01334c4541306f22c0cd48b709c7ae7ccb6b69f06b822317fa684044123a902205d645360a012ebc62cad9e62bed7fc91a8d442a5aa5ee0dae89d115fa74b0278
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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