nelsondiocese.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number cf:18:01:dc:8a:72:c4:33:11:ce:65:e6:a9:a2:0b:eb was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nelsondiocese.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cf:18:01:dc:8a:72:c4:33:11:ce:65:e6:a9:a2:0b:eb
Serial Number (int): 275274848007535453768676840321648298987
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:47:c8:8f:ff:6d:74:0d:25:8f:ee:2a:eb:ec:68:c9:a0:fd:0b:5f
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 39:c1:34:16:52:d5:cb:80:06:75:29:83:07:fc:ba:3e:1d:b7:ab:8a
Fingerprint (sha256): 99:c2:8c:3f:ca:e8:0d:cd:e7:86:6e:f3:52:ad:63:de:ac:ac:e5:03:56:39:dc:2a:91:f1:ac:8c:7b:1c:6c:fc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/87BPWLQCpgU
CRL Distribution Point: http://crls.pki.goog/gts1p5/iT4M4gA1Yb4.crl

Check the revocation status for certificate nelsondiocese.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nelsondiocese.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nelsondiocese.org

Other certificates including the domain name nelsondiocese.org

(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
remote.nelsondiocese.org
admin.colegiogreenhills.com
www.ranchitoelementary.org
okf.sd53.bc.ca
nelsondiocese.org
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
stmary.htcsd.ca
nelsondiocese.org
sess.sd53.bc.ca
quickbooks.nelsondiocese.org
nelsondiocese.org
www.wexford.edu.mx
admin.wearedace.org
www.sd53.bc.ca
soss.sd53.bc.ca
nelsondiocese.org
adss.sd70.bc.ca
remote.nelsondiocese.org
htcsd.ca
www.wearedace.org
robinsonelementary.org
www.nelsondiocese.org
nelsondiocese.org
www.nelsondiocese.org
www.nelsondiocese.org
remote.nelsondiocese.org
quickbooks.nelsondiocese.org
nelsondiocese.org
ined.sd70.bc.ca
awnes.sd70.bc.ca
quickbooks.nelsondiocese.org
www.gpcsd.ca
remote.nelsondiocese.org
www.nelsondiocese.org
fatimaschoolwilton.com
*.nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
www.theratnerschool.org
ined.comoxvalleyschools.ca
nelsondiocese.org
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
www.comoxvalleyschools.ca
remote.nelsondiocese.org
remote.nelsondiocese.org
jcsk8.org
admin.jcsk8.org
nelsondiocese.org

Certificate

The complete raw certificate details for nelsondiocese.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sHbl8Ne16cz3E8j7VPT
w730d+e0ZId0pMvkzAG/3i9YLP+cNGKeRvt2pKL2LAyvlGDQU8ZaWzeRkEan1kKr
2L70G3dTJ7L8Of2/G4/OGUoR98kYnwG8RABQ8AqPMwXaK2kGnAH0agNBU7j0nvf1
Hy/ajVWm0Vdu5189/yKTxEPKHQ0Ef/xE5Hx0b2KkDrH4REYHgLiAFlOMYqsqzLxi
rXiIK/WhZK9M6fRYpNFS4//FHD4hhPQbb2EF4zLwu+wjGqRMbrEIfpgV03D7a6mc
BPZMAgTNlcSDHjfLpu87cSvQz+JL3ZEHGoS/OMSB8sdX4wo+KmU5P9Ikk2D2cMjR
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275274848007535453768676840321648298987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 20:04:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 20:04:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nelsondiocese.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28120498538856568896050762892322055323570240479031495803153463593908167948545980240706945172049292313072303097797576680628992588212377375414228908364431046552962839520598814267909312272586809743872734096662501552172129559358488256160119973601234981947603602411288571007395920923772257667710386129159588950519451760440425471366335924806422873304928284674069422383119607108568939012250469185440046388309888371725618803210512091577423423476044986945293233025535281547302551714842324433977989334645557501990607650224348025191691429928270904073756503562052172432334342960352558667494692450597562218297870180793455575880057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc47c88fff6d740d258fee2aebec68c9a0fd0b5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/87BPWLQCpgU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/iT4M4gA1Yb4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001877c6f4a9f00000403004730450221008248d2e89c6a37e72daeb2c0204d2cfa0e57c9dfe8b3b54c73515db29f9237b402205bd82cc88413b81d91f2a99eca3dc2f1a71094d79712e4d606e390146b513c37007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001877c6f4abc0000040300483046022100e1e3942eac2b0e02fc4b352f69112d516c7a4dba83fab11364e1c67d14c56f1c02210095e277fe21a7e1e20da2f7fde602f91b8bcc5d2944fbef09888e36ff899cd472
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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