crosswindes.colliervilleschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 4f:1b:33:9a:f0:c5:d0:82:11:1e:8c:ea:a4:95:43:84 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crosswindes.colliervilleschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:1b:33:9a:f0:c5:d0:82:11:1e:8c:ea:a4:95:43:84
Serial Number (int): 105150250360731153132396335075788407684
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cd:3b:d4:b2:28:01:ab:7b:ae:ad:2f:78:50:80:8c:24:b2:b0:f9:28
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 4a:c8:f9:7b:c5:3e:f3:d3:53:40:c9:ea:72:8e:91:3e:a8:e5:e2:9b
Fingerprint (sha256): 92:49:97:d4:22:9f:20:a9:07:50:bd:63:ce:18:c8:92:d2:e1:dc:0e:ba:88:61:8f:ad:b8:16:37:61:f2:17:f8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/NOMQK2gS1i8
CRL Distribution Point: http://crls.pki.goog/gts1p5/7UCuXZuLUIg.crl

Check the revocation status for certificate crosswindes.colliervilleschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crosswindes.colliervilleschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crosswindes.colliervilleschools.org

Other certificates including the domain name colliervilleschools.org

(limited to 100 certificates)
colliervilleschools.org
admin.facs.fentoncharter.net
colliervilleschools.org
colliervillees.colliervilleschools.org
acecharterhigh.com
sphstigers.org
www.beethoven-elementary.vanguardacademy.education
acecharterhigh.com
admin.allenparkschools.com
admin.colliervillems.colliervilleschools.org
acecharterhigh.com
westcolliervillems.colliervilleschools.org
admin.colliervilleschools.org
colliervillehs.colliervilleschools.org
admin.missionprep.org
acecharterhigh.com
nac.colliervilleschools.org
sycamorees.colliervilleschools.org
crosswindes.colliervilleschools.org
colliervillehs.colliervilleschools.org
acecharterhigh.com
acecharterhigh.com
colliervilleschools.org
colliervillems.colliervilleschools.org
dimensions.org
mshs.manorisd.net
admin.colliervillehs.colliervilleschools.org
schillingfarmses.colliervilleschools.org
remote.colliervilleschools.org
sycamorees.colliervilleschools.org
www.westfieldfriends.org
www.utmcs.org
sycamorees.colliervilleschools.org
southernchristianacademy.org
flacsms.flacsnyc.com
baileystationes.colliervilleschools.org
acsaregion16.com
schillingfarmses.colliervilleschools.org
taraoakses.colliervilleschools.org
acecharterhigh.com
admin.schillingfarmses.colliervilleschools.org
westcolliervillems.colliervilleschools.org
*.filewave.colliervilleschools.org
nac.colliervilleschools.org
colliervilleva.colliervilleschools.org
stvfschool.org
acecharterhigh.com
colliervilleschools.org
admin.omardblaircharterschool.com
admin.westfieldfriends.org
colliervillees.colliervilleschools.org
remote.colliervilleschools.org
gpa.gonzalesisd.net
schillingfarmses.colliervilleschools.org
colliervillems.colliervilleschools.org
acecharterhigh.com
admin.westportschools.org
admin.stem.fentoncharter.net
oce.lifeschools.net
colliervilleschools.org
colliervillehs.colliervilleschools.org
acecharterhigh.com
*.filewave.colliervilleschools.org
acecharterhigh.com
admin.kauffmanschool.org
bennett.frenship.us
colliervillehs.colliervilleschools.org
colliervilleschools.org
admin.beatty.bpsd.k12.ca.us
www.dcsocal.org
nac.colliervilleschools.org
admin.colliervilleva.colliervilleschools.org
admin.allenparkschools.com
crosswindes.colliervilleschools.org
nutrition.colliervilleschools.org
acecharterhigh.com
admin.allenparkschools.com
acecharterhigh.com
www.vanguardacademy.education
baileystationes.colliervilleschools.org
admin.colliervillees.colliervilleschools.org
admin.dimensions.org
acecharterhigh.com
hamlincharter.org
colliervilleschools.org
westcolliervillems.colliervilleschools.org
gpa.gonzalesisd.net
nutrition.colliervilleschools.org
baileystationes.colliervilleschools.org
acsaregion16.com
colliervilleschools.org
colliervillems.colliervilleschools.org
www.colliervilleschools.org
www.moscowcharterschool.org
edtechteam.mx
taraoakses.colliervilleschools.org
acsaregion16.com
crosswindes.colliervilleschools.org
admin.allenparkschools.com
acecharterhigh.com

Certificate

The complete raw certificate details for crosswindes.colliervilleschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGEm+UyyTcgF8kq8onaN
7ntNfQAst3OoVGnIWIYKrqA7agLsZTcnwDlGs5uKslclE/qZz65EMrvBlZ/ZZVga
pfAowaqXgZ2HSqjqzZ8t+5W+EbGfeQFnZOUj/4W9/+wY2HZACVBmlSPFA/BHzGQ+
yxbou9DRRhV442i+KniAKBSGpv1O3yty7kpw1/ek7Zzch0b9fp269uS5nrGrl3hs
Y7xIcJLRlcdUVkPcCYcRLrNIP+T9go/hYEu1a0KPy4HYgRfQi3IO/65KrorgDTmt
jyqzhIOwn69CnPgfTzMN+5+PmPplokP4MnXOnZsXkUJ6F/s97MKavNGyjFiXT6Fk
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105150250360731153132396335075788407684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 08:59:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 08:59:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crosswindes.colliervilleschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23275755669582397867284473901854497667723662435299154116733625642415624222130556008793630069630826045689316795232858280565237387424678691665174519271360830993924449262727507307626672928358652737380360553124313210326884476710985104710513543963617548116201737478578230779692425399792197603949547112094608892867906063727528629922421389935321373664621150077793167566003066916640856297786478909555150110571755776781859889482749543674034083550964666823856025494656693932900354233592959343952594419475857586222348776118104825507936810312570725056311812326691514635099572631705456242936998646295988209057383969205368341488813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd3bd4b22801ab7baead2f7850808c24b2b0f928
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/NOMQK2gS1i8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosswindes.colliervilleschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7UCuXZuLUIg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d2b760ff200000403004830460221009a630cb4a565bd92fa489cc13b969cb52171e5b111cf24c6ce26ee6978a79440022100e0785b1a403d6becb730a4c6745816bd0b4017f3b464755e408f3500e8b5a30d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d2b760fd80000040300473045022069a040cfbbf88d68831c55390387366b503d194a37e6495f67cba864e13f0137022100dc1acebc4ca5fa4de39656f89046e7e4eaa56f8dc0a585c745a8393a9e3ae07e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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