eastprimary.kiskiarea.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 1f:d4:aa:44:b2:10:a5:1b:11:88:4d:a6:0b:22:b0:9d was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eastprimary.kiskiarea.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1f:d4:aa:44:b2:10:a5:1b:11:88:4d:a6:0b:22:b0:9d
Serial Number (int): 42310288255597901522321876336641224861
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 0b:65:6d:0f:d4:1a:9f:bb:66:eb:46:31:e1:14:82:86:44:af:47:d4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 1b:74:77:cc:71:e6:9f:ea:9a:55:b8:e3:6d:25:9f:af:7f:82:f5:6f
Fingerprint (sha256): 8a:4f:15:39:22:da:09:65:1f:a3:7c:ed:02:f7:b3:99:52:a0:31:c6:35:0b:31:dc:eb:13:07:f8:cb:49:40:91

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/zmwvXAL3Ykc
CRL Distribution Point: http://crls.pki.goog/gts1p5/3xN0q5OQxns.crl

Check the revocation status for certificate eastprimary.kiskiarea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eastprimary.kiskiarea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eastprimary.kiskiarea.com

Other certificates including the domain name kiskiarea.com

(limited to 100 certificates)
acldtillotsonschool.org
northprimary.kiskiarea.com
kiskiarea.com
admin.preescolar.semperaltius.edu.mx
highschool.kiskiarea.com
admin.eastprimary.kiskiarea.com
www.bonnydoon.santacruz.k12.ca.us
acldtillotsonschool.org
admin.bhs.bcsdk12.org
admin.agu.ealas.org
admin.agu.ealas.org
acldtillotsonschool.org
kiskiarea.com
www.colegioverdi.edu.mx
admin.adultschool.uusd.net
acldtillotsonschool.org
admin.burtontechnology.org
wclark.k12.in.us
admin.agu.ealas.org
admin.agu.ealas.org
centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
www.movalleyelementary.org
acldtillotsonschool.org
kiskiarea.com
admin.cds.pusdschools.net
admin.adultschool.uusd.net
admin.northprimary.kiskiarea.com
acldtillotsonschool.org
kiskiarea.com
acldtillotsonschool.org
kiskiarea.com
kernhighnetwork.net
admin.agu.ealas.org
admin.barringeracademiccenter.wearecms.com
acldtillotsonschool.org
admin.rsu14.org
acldtillotsonschool.org
roosevelt.pusdschools.net
davidsonk8.wearecms.com
www.stnorbertschool.org
admin.southprimary.kiskiarea.com
acldtillotsonschool.org
mis.edu.mx
admin.southprimary.kiskiarea.com
koepsell.solake.org
fhs.frankfortschools.org
acldtillotsonschool.org
www.madisonmonterrey.edu.mx
www.kernhighnetwork.net
acldtillotsonschool.org
acldtillotsonschool.org
admin.centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
eastprimary.kiskiarea.com
elementary.stjosephhillacademy.com
kiskiarea.com
dchs.davidson.k12.nc.us
acldtillotsonschool.org
admin.agu.ealas.org
admin.adultschool.uusd.net
admin.chapmanelementary.org
admin.agu.ealas.org
acldtillotsonschool.org
www.jaselu.com.mx
admin.agu.ealas.org
admin.dchs.davidson.k12.nc.us
admin.adultschool.uusd.net
kiskiarea.com
admin.adultschool.uusd.net
acldtillotsonschool.org
admin.bces.davidson.k12.nc.us
acldtillotsonschool.org
acldtillotsonschool.org
acldtillotsonschool.org
acldtillotsonschool.org
admin.semperaltius.edu.mx
admin.northside.wisd.org
admin.adultschool.uusd.net
www.kiskiarea.com
admin.agu.ealas.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
admin.adultschool.uusd.net
www.kiskiarea.com
admin.adultschool.uusd.net
admin.bces.davidson.k12.nc.us
acldtillotsonschool.org
admin.agu.ealas.org
northprimary.kiskiarea.com
acldtillotsonschool.org
admin.agu.ealas.org
oasishigh.org
admin.mmatrailblazers.com
southprimary.kiskiarea.com
kiskiarea.com
admin.davidson.k12.nc.us
admin.adultschool.uusd.net
intermediate.kiskiarea.com
admin.burtontechnology.org

Certificate

The complete raw certificate details for eastprimary.kiskiarea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngDp/69/OsWiN8InNxJR
kl8OF1ewArHUijDmmoZ6r4+++94aIkVOYo6vrW9TGj/BF0+jXMsPQQbI23qdR0eb
jeHx7BHZOFEK0++smbCv42favKwnOY09FWPtRdLlbiaGbZdZyuwO127GBxaFV6xd
9vlGK8gNliDuPsLI3EyhlPAGwAZmUx8xf1zXYXhMZZ8+YZB2oKpg+Cdu5XrCuj59
9MvW0nHa+bH66Tju6e8ngZ9BaxvYLEjz+FVZUa6RD196f0dxZv9q6ow/qvvuWAqU
aaOUCzaeNOXOT9kwIm7G5HBM8OH/4Jy6P9wApSAmiYT6cv9yD7xvgAjJ9jXtzW4b
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42310288255597901522321876336641224861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 05:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 05:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eastprimary.kiskiarea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19946102923289203931620366904299355080542935106335082678596527577129811148491931752575851650990270349997637732893831940795453897748618341742714400739228154174530944947876503693188974865532686165424234425897962738783314923776249481407201824029111232283703046366268938889113810316467572089445334076618377430795161180569852464127335638464990334276333298868487315415156586024706683598408461389984775673440695945209928768828284366276404987222020887566931244419811746078558103702680867339925469303131689908962138313211955923713688979946259244514277435345151430483123153866131349646713635396507741193825426418706432366877673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b656d0fd41a9fbb66eb4631e114828644af47d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zmwvXAL3Ykc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/3xN0q5OQxns.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e83cd28a200000403004730450220542c7d6011a235ef09eb24f4659b1f738b60831d41bc6792a70c4618feeda346022100d7601967b4d721eeadc8b8621b4115daad7f8d147a4e1dddb178468398cef789007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e83cd292900000403004630440220533e268f54a012fc130f077eef2469e11c30d2815acaae3f4ed334cbcb800f7702205456cf0f53292573cdd21a1b090895d4469ebc412cc65d9ee066d275f47b2c40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024daa497fd01adebc27e8cf41f72a9408a1cf816866bcd8cb6bcfd9e81d9a158029a46f12907cad39f6ba4a2f0a6e072279f86c2d9a286b446235dcefd0f2fbbc1a507cbf735e8f31c897be62d1a80b70826970b66ab1b58e0994df9f967c50d414c78f8e86e4eadc87c7251a20e410ff407bd4fa2b626f970e90fbb2295743ca75b9443683861e541daf173bbd86fe7ca1a5868e62497ba18d29a03bdf4ba7db4a073bea8b5b5ff6652eaba484768f02d494b508d76d0da0fd881a18c416740697e0dffd1d414828a56b1cf43014e52a8e5f414f8bb131e85c59783edc79f5e619cf0d4b7c86c392901e2d714fcd53b9361f5aec1a45944a4b291290a9cd064