charterschoolofeducationalexcellence.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d9:20:26:53:14:44:7a:39:13:af:29:51:5c:35:db:d4 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=charterschoolofeducationalexcellence.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d9:20:26:53:14:44:7a:39:13:af:29:51:5c:35:db:d4
Serial Number (int): 288609405898574770685409654516663835604
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 72:79:b9:f7:e3:f9:dd:91:0e:a3:a4:8c:e6:c1:88:fa:74:04:49:1f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 79:08:48:97:c9:f3:dc:55:43:16:86:83:4c:dc:9a:a3:68:af:ae:94
Fingerprint (sha256): 79:d1:70:5d:1d:05:b1:4d:78:90:cc:11:3b:87:f3:96:a2:7f:07:65:e9:a6:a5:3e:4a:38:9b:8d:8b:e3:0d:80

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/NuBu-fN6QnM
CRL Distribution Point: http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl

Check the revocation status for certificate charterschoolofeducationalexcellence.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for charterschoolofeducationalexcellence.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

charterschoolofeducationalexcellence.org

Other certificates including the domain name charterschoolofeducationalexcellence.org

(limited to 100 certificates)
admin.apr298.com
cespk2.cliftonisd.org
charterschoolofeducationalexcellence.org
admin.charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
admin.charterschoolofeducationalexcellence.org
admin.afantis.org
admin.afantis.org
charterschoolofeducationalexcellence.org
ces35.cliftonisd.org
mhs.molineschools.org
admin.apr298.com
admin.apr298.com
admin.apr298.com
admin.tamura.fvsd.us
admin.apr298.com
charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
admin.apr298.com
admin.apr298.com
admin.charterschoolofeducationalexcellence.org
charterschoolofeducationalexcellence.org
admin.apr298.com
www.charterschoolofeducationalexcellence.org
bes.bayfield.k12.co.us
admin.apr298.com
fless.sd91.bc.ca
admin.apr298.com
admin.mhs.molineschools.org
admin.caes.iwcs.k12.va.us
highschool.otsegoknights.org
cespk2.cliftonisd.org
admin.apr298.com

Certificate

The complete raw certificate details for charterschoolofeducationalexcellence.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NJLCZYEfkWpRQIF5Rcu
+qLr3J3qu1m6N3rSDCL2XHfLCbaZDC1zr28KUZKghmBFzCCxVyzHlVT7+lNwnWSP
CTIZcd7eTdrKhxNvVin/YsxYAv1G91j2EV/I0W606ZMiwfbOPLhVZlRafAqtS2Jf
qohhYiHCoksYHXV8R6y1DkGBi0dUFUQxn2/50vLTT4x6YDIQLom5jAklrY3V4F5l
31vGX8rEQDz9onjokIvtsgczByEwRhy9Qz6r7f+8iqMbZrqrsp7LAbXHwnPRPaD6
0jNrSIxedmI1Zsl7W6BXv6qkzp1siSeA3gT46mLIrwUIYni+YXGJjfN/XCr+xi5R
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288609405898574770685409654516663835604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 22:55:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 22:55:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'charterschoolofeducationalexcellence.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29895939371936177841204681821346244779486100215845895289208168438573495196013757368559443451013018786775015382536899941097159422995008514165163206298370077579697802246917481699161639436558083649918994510523864581434820231871396575137933363051804018691661670930997204092980386929207723177126466926419042048835091104063329535653929161467157603318758379158823697830678042674356458436998333873660845245607913345393125590775075306035781005674520921011188311301788306129906643219745966063481763076140513834604466219440512135127629120132591509605117391376800853542064658165216728895755107561488001446419288660609846165262691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7279b9f7e3f9dd910ea3a48ce6c188fa7404491f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/NuBu-fN6QnM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6719a74e0000040300483046022100c36071e2debc8582e2c616f62bb40e98c0c9f13034836b06b59eb3d73424be2d0221009583db8399dbaf1be7c8f24a317bd94f93c739cbc7347f86e95a0e80396c37bf00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6719a765000004030046304402207c7176b95bdd19c25afca3cdff3a88be38e8860ba71ea08de8aa200da294053f022043e0e3344f68a0ded9e9e513c712bd26584fe97862cd3ba7e50a93131669b9f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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