arcataschooldistrict.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 03:fa:9f:78:fa:62:c5:54:0d:e5:26:96:5a:a8:a4:62 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arcataschooldistrict.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:9f:78:fa:62:c5:54:0d:e5:26:96:5a:a8:a4:62
Serial Number (int): 5288992689985595895545341372768232546
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 19:7e:5c:90:33:b6:69:64:6d:fe:c1:41:0e:69:bb:82:ea:7c:83:0e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 1f:7b:83:5f:a9:b4:eb:ed:54:71:66:ab:d2:f0:ec:3c:e9:b2:1e:5c
Fingerprint (sha256): 93:ea:c8:d4:6e:10:0e:bb:7b:ec:bc:9e:72:8c:ac:ae:e4:5e:63:22:74:44:2e:fd:72:48:71:b0:d8:02:72:da

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/t_Rk3MgOab0
CRL Distribution Point: http://crls.pki.goog/gts1p5/kPtajCim2Js.crl

Check the revocation status for certificate arcataschooldistrict.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arcataschooldistrict.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arcataschooldistrict.org

Other certificates including the domain name arcataschooldistrict.org

(limited to 100 certificates)
ms.bsd29j.com
arcataschooldistrict.org
www.cranburyschool.org
admin.adultlearning.sunrisesd.ca
www.phacs.org
admin.hs.wvsd208.org
arcataschooldistrict.org
admin.wjh.wintersisd.org
www.bronxdalehs.org
arcataschooldistrict.org
www.healthystartacademy.com
ps.bsd29j.com
debusk.greenek12.org
admin.hpiam.marquezhs.net
hhs.hattiesburgpsd.com
admin.adultlearning.sunrisesd.ca
woodsboro.pylusd.org
www.holynamesf.com
admin.ashlandcityccs.net
admin.westcheathamccs.net
summer.materdeicatholic.org
admin.arcataschooldistrict.org
ljef.ljsd.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
admin.riverviewschools.com
bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
www.grandcenterartsacademy.org
arcataschooldistrict.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
www.sttheresaschoolpalmsprings.org
balloustay.com
lacountycharterselpa.org
arcataschooldistrict.org
arcataschooldistrict.org
www.colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
admin.glenknoll.org
admin.jh.iasd.cc
is.bsd29j.com
admin.elportal.ljsd.org
preschool.shelbycs.org
msdurham.org
admin.arcataschooldistrict.org
healthystartacademy.com
admin.elportal.ljsd.org
sachs.org
admin.arcataschooldistrict.org
arcataschooldistrict.org
www.healthystartacademy.org
admin.arcataschooldistrict.org
admin.wintersisd.org
bcsdk12.org
www.ourladyofgrace.co
admin.arcataschooldistrict.org
admin.aes.lammersvilleschooldistrict.net
sainte-school.org
admin.ike.iasd.cc
www.arcataschooldistrict.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
www.wintersisd.org
admin.arcataschooldistrict.org
bronxdalehs.org
cranburyschool.org
flacsms.flacsnyc.com
www.afsenyc.org
admin.kauffmanschool.org
admin.arcataschooldistrict.org
admin.aes.lammersvilleschooldistrict.net
sh.iasd.cc
www.lacountycharterselpa.org
admin.marquezhs.net
arcataschooldistrict.org
grandcenterartsacademy.org
www.sainte-school.org
colonies.sunrisesd.ca
ri.jcboe.org
ps17.jcboe.org
admin.bronxdalehs.org
admin.mhs.molineschools.org
www.bsd29j.com
admin.bbel.bbrook.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
admin.chuckey.greenek12.org
admin.sainte-school.org
bbcms.bbrook.org
arcataschooldistrict.org
cm.dekalbcentral.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org

Certificate

The complete raw certificate details for arcataschooldistrict.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KdMR6xarLl+/pyEhGWT
Si9Y3W35ZwBFKuokTxQcdgkYSE54V0POo27O4zMcHF1bP2QXvdNuITswr3NuSZY2
3cqlzE9UnqJ5z+Jv1EpID/dWo6e8TzPNTELNtAvi0d4J+aijqzY8HjTkjpngufpX
e/Jp7FsPMgy+IMf5RwCViW16JlXM0SgC5q0aNLyb0NJ4Cet7942M7T6UrLvwo5RV
Gt4svfCcg8b+CySDj7MsS9MLDm1DQsLYzrTyHpf5go0IlxuFXzKjIEMaf6S/BjWZ
d87l0oKmjUoQzsxdm947HYiSEKm4AOGJWLVUQTg9vwlfwBCyWEr8m7Qo9T3aq0m7
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5288992689985595895545341372768232546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 20:08:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 20:08:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arcataschooldistrict.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27349971575740064908285219573814265085196773787037786898791776093033991340570267623087338320002708137372370584208577536696289531433394975081998113352362270486099416789879337778777616500643582198028373899215957674416063378411058485408574525965341897656401017461477482727471751516868857936103706058044831984994081321870925281438104941212836668172639048245543028523449944977805715757417615786664697690588803372268011590267974908423993794475298786924695466945305108340318969726820366885028522670574557983664350493443391361985487995429176496180549167524288889011641207124072698532578319161594615695648767526556705655208737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							197e5c9033b669646dfec1410e69bb82ea7c830e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/t_Rk3MgOab0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kPtajCim2Js.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001877c733f8f00000403004730450220009101850fc674e2caffdc5ffa6dae968a91d34299b6eadd9aafd8a7d378d2d4022100d08808140a522e3c6a8e4f1b5fa6125304c84ac0fd2844e3bb745aa19b54bcc8007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001877c733fa10000040300483046022100bc133163e80d51d2b9308453456cf4c32f340cd6afa076e64a2cfd96059f199702210086b3b292bb292f5d3a0db870417495d5e4037a5fbc27d260a4b10e198e27b398
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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