shirakawa.fmsd.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f1:d0:e8:fa:6e:41:4f:e9:11:5b:4d:66:c1:03:fc:04 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shirakawa.fmsd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f1:d0:e8:fa:6e:41:4f:e9:11:5b:4d:66:c1:03:fc:04
Serial Number (int): 321428670090930953895091701669951699972
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 85:e1:e4:e1:b9:74:5b:e4:0c:60:0f:09:c6:35:7e:53:0e:c0:30:17
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f7:f7:46:9e:7d:dd:04:60:39:c6:a9:2c:c0:3e:2e:3a:0f:f9:a3:db
Fingerprint (sha256): 7b:c2:2d:6d:b8:0f:7a:95:3d:6d:c3:89:d4:17:88:18:f0:90:3d:07:db:8f:c3:37:fd:cc:db:36:20:60:ed:0d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/3J3iTvUgTRI
CRL Distribution Point: http://crls.pki.goog/gts1p5/et-Lsmj_QTM.crl

Check the revocation status for certificate shirakawa.fmsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shirakawa.fmsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shirakawa.fmsd.org

Other certificates including the domain name fmsd.org

(limited to 100 certificates)
admin.bridges.fmsd.org
ramblewood.fmsd.org
admin.ajh.brookhavenschools.org
admin.ascensionoakpark.com
bridges.fmsd.org
campus.fmsd.org
admin.ajh.brookhavenschools.org
santee.fmsd.org
admin.escalante.durangoschools.org
admin.arthuracademy.org
admin.ajh.brookhavenschools.org
admin.ascensionoakpark.com
www.colegiolospinos.edu.mx
admin.bme.zcs.k12.in.us
admin.arthuracademy.org
admin.franklin.fmsd.org
admin.betz.cheneysd.org
www.lacpacademy.org
hellyer.fmsd.org
admin.betz.cheneysd.org
admin.ajh.brookhavenschools.org
admin.arthuracademy.org
www.lknc.org
admin.ajh.brookhavenschools.org
www.kerrvance.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
mckinley.fmsd.org
admin.ascensionoakpark.com
admin.cjh.coloma.org
admin.ajh.brookhavenschools.org
admin.arthuracademy.org
admin.ascensionoakpark.com
lacpacademy.org
sylvandale.fmsd.org
admin.fmsd.org
admin.ascensionoakpark.com
stonegate.fmsd.org
www.fmsd.org
mail.fmsd.org
admin.ascensionoakpark.com
mckinley.fmsd.org
cca.fmsd.org
www.ascensionoakpark.com
kennedy.fmsd.org
admin.ajh.brookhavenschools.org
windmillsprings.fmsd.org
shirakawa.fmsd.org
admin.ajh.brookhavenschools.org
mhs.mtsd-vt.org
admin.arthuracademy.org
admin.arthuracademy.org
admin.betz.cheneysd.org
jrsr.otisr3.com
lairon.fmsd.org
stonegate.fmsd.org
admin.hellyer.fmsd.org
cis.cocisd.org
shirakawa.fmsd.org
admin.ascensionoakpark.com
www.nstaracademy.org
admin.ev.gatewayk12.org
admin.chestnut.painesville-city.k12.oh.us
admin.hs.goliadisd.org
hellyer.fmsd.org
admin.hw.cheneysd.org
admin.ascensionoakpark.com
admin.betz.cheneysd.org
*.fmsd.org
franklin.fmsd.org
mckinley.fmsd.org
bridges.fmsd.org
cca.fmsd.org
admin.bridges.fmsd.org
admin.ascensionoakpark.com
admin.ajh.brookhavenschools.org
admin.betz.cheneysd.org
admin.ajh.brookhavenschools.org
admin.fmsd.org
sems.fmsd.org
admin.zcs.k12.in.us
ths.mcduffie.k12.ga.us
admin.betz.cheneysd.org
admin.animasvalley.durangoschools.org
admin.betz.cheneysd.org
campus.fmsd.org
admin.arthuracademy.org
meadows.fmsd.org
admin.ajh.brookhavenschools.org
admin.arthuracademy.org
admin.betz.cheneysd.org
admin.bridges.fmsd.org
meadows.fmsd.org
www.145innovators.com
admin.bisd-tx.org
www.richlandschools.org
admin.hs.goliadisd.org
admin.betz.cheneysd.org
admin.tekoacharterschool.org
admin.ev.gatewayk12.org

Certificate

The complete raw certificate details for shirakawa.fmsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ssJaxFySTUztto7wwN1
CjKnEb1ANbcyu7/yd9ZUBvD/Pv37Q9amgGEtwS9YUwhJ8b6QRNp5Ituqu8hAgFiy
/Z+UhR59/gEqh1PkhauLANTZPlaE8YHJ0pATmMi0HXjyT3X0Ht0tMGOYnZvfQW13
NyMwQD8wCIRKscaXTpr/IOBW4d4I8+qVHTnxbqYPGWb52ZJ9Z3BCbKcnDp+fz7IR
NIRiZDHS74+bWw0KBiW2TWJurdj25hgN0w+mZqYBs3rXjXKjTeiKsJcl0OG4XuLG
AurtzGRO0ZiFaC91lNaR7o3FE1UdymqW4DM0fQaGzS4MwyRW+GszoOqQejlseKb3
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321428670090930953895091701669951699972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 04:15:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 04:15:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shirakawa.fmsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26610165215578814464367046664388577265480747602118626950219023563255745883979533964944764079982146416985524563489723731134657734279449912048089964415279559469847669910411559966771597900809562569078857610784518379043887283960919196348367244577272941466134714148300822097160860833893465818763033718637578935177610238077313698665696393696312983218297840674998659850249788900349284212011034557548256159965519464089226091832850296369131370587620328909720204902325348461747733810404723355770070720606355598597847818124509998732112975245165564175597642157565637972328751326338427119753055537155095858844058030123973479954337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85e1e4e1b9745be40c600f09c6357e530ec03017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/3J3iTvUgTRI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/et-Lsmj_QTM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1ea79b1e0000040300473045022040eaf9c599e8b78ba36c3f5ca2e42bdb742458880d820c271065ba4136ff5bd8022100a8f4640be362aa2f8f69777270b235f2942ac8ff22d21331ad15a2b732661281007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c1ea79b320000040300483046022100f4fbe960f98ef262488b43d29495ef4a739ffb9545f2dfe623b7432a0ccd8400022100d1d887faa94cf2c51898f02b96a84af7999ba1012cc61d5e1b2f86789c414acf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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