crawfordschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 28:bd:2a:ff:b6:61:cf:6c:0e:62:13:3d:96:c7:91:bf was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crawfordschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:bd:2a:ff:b6:61:cf:6c:0e:62:13:3d:96:c7:91:bf
Serial Number (int): 54151336058489028960642585890237419967
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e8:76:4f:e2:56:ee:1a:39:d7:eb:02:04:f3:1f:eb:45:07:2e:0e:10
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d6:08:0a:3c:56:9e:dc:3c:ab:bf:13:9b:46:48:8a:d1:e4:e4:87:61
Fingerprint (sha256): 7d:21:a9:b9:8c:24:58:c7:c3:83:a7:b8:e1:dc:a7:c4:28:28:94:7c:0c:c0:37:1a:30:69:a3:4e:0b:45:27:1f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/nzlnD1K8ihM
CRL Distribution Point: http://crls.pki.goog/gts1p5/Vav6cYDNKUw.crl

Check the revocation status for certificate crawfordschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crawfordschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crawfordschools.org

Other certificates including the domain name crawfordschools.org

(limited to 100 certificates)
admin.ljef.ljsd.org
admin.palla.gfusd.net
admin.cvlcc.org
www.vistahorizonglobal.org
admin.marquettecatholic.org
www.dms.dover.k12.nh.us
crawfordschools.org
admin.ohds.org
admin.hedgescps.org
dover.k12.nh.us
crawfordschools.org
admin.crawfordschools.org
1.southampton.k12.nj.us
admin.cvlcc.org
crawfordschools.org
www.johnotynes.org
admin.hs.crawfordschools.org
admin.dover.k12.nh.us
www.crawfordschools.org
ceca.sheldonisd.com
admin.whitmanhs.org
admin.mabelpaine.org
desoto.goldenruledallas.org
2.southampton.k12.nj.us
www.vistahorizonglobal.org
admin.coahomak12.org
adultschool.portervilleschools.org
admin.church.faithmarietta.org
kahoiwai.kalo.org
www.fpcharter.org
crawfordschools.org
creekside.cv.k12.ca.us
www.secundaria.colegiolasalle.edu.mx
mabelpaine.org
admin.marshall.cv.k12.ca.us
admin.hedgescps.org
church.faithmarietta.org
crawfordschools.org
www.cristoreysanjose.org
crawfordschools.org
admin.mpsdnow.org
admin.westsideusd.org
admin.athletics.sheldonisd.com
debusk.greenek12.org
jensenranch.cv.k12.ca.us
admin.nel.sau29.org
admin.downtown.bcsd.com
admin.dover.k12.nh.us
admin.crawfordschools.org
www.ghck12.com
malamapokii.kalo.org
sau29.org
palmlanecharterschool.org
www.leonardeulerd.edu.mx
www.westsideusd.org
cad.dcs.edu
www.crawfordschools.org
admin.vision.ecisd.us
admin.ghck12.com
hedgescps.org
westsideusd.org
admin.colegiolasalle.edu.mx
www.ps17queens.com
sunnyside.goldenruledallas.org
ms.crawfordschools.org
marquettecatholic.org
www.mabelpaine.org
admin.barrientes.ecisd.us
admin.travisranchschool.org
ghck12.com
admin.colegioedlio.org
lincoln.tiffin.k12.oh.us
admin.athletics.godleyisd.net
admin.crawfordschools.org
admin.che.sau29.org
admin.mlb.sau29.org
admin.crawfordschools.org
faithmarietta.org
whitmanhs.org
admin.bn.durand.k12.mi.us
sunnybraemiddleschool.org
crawfordschools.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.noble.tiffincityschools.org
admin.gfusd.net
chms.comalisd.org
admin.elportal.ljsd.org
www.travisranchschool.org

Certificate

The complete raw certificate details for crawfordschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwac3tyRJkN9Cbxv9j0V+
83ECPJ/nKe6vzuxVXUAq8MfuJwA5SP/e+cAMKun7FCkVIJdqfHEVb5vNVfe58u2L
De9iqIfD6KFwUlF8IXbLtJlz7vKuZb+HDn5j866zTGS/hwy2lbQzKnc/luaXIuIw
9Ppv7EFCtVLfiinJQVE1l6+Vaj33Zu0KTDpok7yyh0p04uQKLsCCU2EofIZmX/r5
wvtLM4E8Cx6pu+uNJV6/Lb8JcAyGV6ntZjQ9zMkH+02WrjKoOpnUdDl8O21beD88
5kMeD8lo2WlzQZAZ7D3/8jOVAFF9BbTDa1nW6ZCvZiMHpWbjmiMfEBUQokyw19eZ
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54151336058489028960642585890237419967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 06:04:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 06:04:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crawfordschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24446450949136016025939582091923945132994646845131888682254429650412961850424689621007925188180678110247099781136240321673944967416173911501118859040684322030542885308558972646892716967808070975088150043379131070895110477304128097867546120878602459316938273502853705931213232818314606435668511657384039540017491736776424317415338936499288575363050561030683239493094935079679196668290006467342889993414486961797424459704556211921571238979942110911052376814263325037129012783895136685337734197973043950842564657409814808378492926534208136196305271732084497864334317993414577522148655319285455052052355625232520588007931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8764fe256ee1a39d7eb0204f31feb45072e0e10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/nzlnD1K8ihM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Vav6cYDNKUw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf5d85211000004030047304502200e6b1bb109cb95be491ffee2f35fec105a8a2a6822c09a36ce9cfafbaa14783f022100c883bbd5e8965dc25732f69919c4a35a801e773a5b650e43f7df6480e1268ef60077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf5d851f00000040300483046022100973d86ecdd2fd2d0adae246e87568c5d61efe41f796a86cbbde98218850f7119022100f62eaad1ffda3c99714d7885c5881ea06099d745606404257ddacfa233015760
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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