www.vanguardacademy.education

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ef:5d:9c:d4:3e:73:fc:5d:0d:90:90:33:48:5c:e1:82 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.vanguardacademy.education

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:5d:9c:d4:3e:73:fc:5d:0d:90:90:33:48:5c:e1:82
Serial Number (int): 318171555472035544109146327458818875778
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c5:a0:e3:65:bb:91:96:a6:46:de:b2:18:79:92:a1:5d:c8:38:8d:0b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 52:65:f1:d2:70:22:66:29:6b:ee:99:79:8c:d1:71:ce:f1:49:ad:31
Fingerprint (sha256): 78:3a:6f:05:bd:62:ad:8c:f3:f4:0d:f0:31:8e:a7:7e:5b:7a:e2:08:56:eb:42:dc:2d:ff:9e:8d:d8:d4:b0:79

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/qPs5eM30fsQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/SXudXWKHu8M.crl

Check the revocation status for certificate www.vanguardacademy.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vanguardacademy.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vanguardacademy.education

Other certificates including the domain name vanguardacademy.education

(limited to 100 certificates)
admin.arvin.kernhigh.org
admin.almadinah-school.com
admin.beethoven-elementary.vanguardacademy.education
admin.beafriar.com
admin.annasmithelementary.tooeleschools.org
fhs.frenship.us
admin.facs.fentoncharter.net
10.bellevilleschools.org
admin.antonian.org
flcobras.net
admin.annasmithelementary.tooeleschools.org
sphstigers.org
www.beethoven-elementary.vanguardacademy.education
acecharterhigh.com
ahs.oc-sd.com
aahs.aasdcat.com
admin.allsaintsjupiter.org
hs.somervilleisd.org
admin.beafriar.com
admin.es.somervilleisd.org
admin.mozart-secondary.vanguardacademy.education
delevandriveelementary.org
admin.beafriar.com
www.vanguardacademy.education
admin.fulton.northbergen.k12.nj.us
www.ps086.com
walkerjonescampus.org
admin.bgisd.org
aahs.aasdcat.com
pechs.net
www.giddings.txed.net
admin.annasmithelementary.tooeleschools.org
acecharterhigh.com
wolcs.org
ventureacademy.pylusd.org
acecharterhigh.com
admin.bas.kernhigh.org
lorenaisd.net
admin.rembrandt-elementary.vanguardacademy.education
www.sfrschool.org
admin.arvin.kernhigh.org
www.avoyellespsb.com
admin.almadinah-school.com
admin.allsaintsjupiter.org
aahs.aasdcat.com
www.vanguardacademy.education
www.westfieldfriends.org
flacsms.flacsnyc.com
www.gaparish.org
admin.beafriar.com
acecharterhigh.com
bcsdk12.org
admin.schillingfarmses.colliervilleschools.org
rembrandt-elementary.vanguardacademy.education
admin.allsaintsjupiter.org
admin.church.spxtulsa.org
admin.beafriar.com
rembrandt-secondary.vanguardacademy.education
acecharterhigh.com
admin.ajshs.asd.k12.pa.us
admin.rembrandt-secondary.vanguardacademy.education
aahs.aasdcat.com
admin.rembrandt-elementary.vanguardacademy.education
gpa.gonzalesisd.net
saintpatrickhawaii.org
admin.mozart-secondary.vanguardacademy.education
www.lincolnparkhs.org
admin.annasmithelementary.tooeleschools.org
beethoven-elementary.vanguardacademy.education
admin.westportschools.org
admin.mozart-secondary.vanguardacademy.education
admin.bfes.wilkescountyschools.org
admin.stem.fentoncharter.net
admin.beafriar.com
oce.lifeschools.net
baxterjh.eisd.org
aahs.aasdcat.com
admin.cfh.edu.mx
admin.annasmithelementary.tooeleschools.org
acecharterhigh.com
www.jisd.org
rembrandt-secondary.vanguardacademy.education
admin.allsaintsjupiter.org
adairsvillehigh.bartow.k12.ga.us
10.bellevilleschools.org
www.vanguardacademy.education
10.bellevilleschools.org
admin.arvin.kernhigh.org
bfcsd.org
bennett.frenship.us
www.vanguardacademy.education
jisd.org
admin.beafriar.com
admin.vanguardacademy.education
stvfschool.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
www.vanguardacademy.education
admin.arvin.kernhigh.org
ninth.frenship.us

Certificate

The complete raw certificate details for www.vanguardacademy.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04wKlgumtMzQSOejhoh9
bNsfdDy7Ud0XerLea1o1quxMM8lc7q+fgIBoxWccc+Su1FrQ+NakH59Hyg3Giprd
1bIFaXaTz9aDhK7G31Q40byaPvtdbIkzIy5TzTYGfoREFzj+qUwLEh/7ZUlK9nfz
tGaiq6Uev5R2N626SHGCPQ3UaDIzd3d0ZwKoT1o1hGQTcHndbdwcre9evWqW65ey
kb/5mkPdrb5SYdJU/06j96QiZc+dk+WDi1Lyx9CyfOqOMxYmgUiHEFPY5W6blUcw
VhTORzywsLDHIVR8Pgtb69acVsbmESCCc5jLkt+EYsVlKJUCuebMky1RjEwhhTDc
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318171555472035544109146327458818875778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 04:56:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 04:56:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vanguardacademy.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26705339312304205796524674307989755894494564260150404292877902110908331148224240684215991059636548574500361347389776507849983129132247811287741344140148421271809879454240805221290722138915390434306566030351574170531299504434877334320704986123070994923975846232301763343881126916308161751420271847056899940910070549994621740097425348545379500450409778146483062486079647229500644014102257511980362882359739543999594276302086847480773382683295012264519174344481275542335635529425458920020401672974076830220789267383152186939323928785960082543258574800116022438453524051459703141676742250161379513279148126339167868214349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5a0e365bb9196a646deb2187992a15dc8388d0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/qPs5eM30fsQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanguardacademy.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/SXudXWKHu8M.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bffe6cd970000040300463044022062bb1fb83e05ae336e54260d29989130919f76dc3b8419c26e75a4112edfb9b402204afb4038f5ffa9744c17175fd0c3b094c733643edf5fbfbf955bc57e8d3bd2b7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bffe6cd9b0000040300473045022100f45517bc2017596ad0e73a8dc53f5a347c5c25d2a747fc5d786e3332fb154f3002206a23943c335f4c287371689c8296174dfdc9b0d2627beafec8c059bd907014a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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