aldrich.howell.k12.nj.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 34:e7:07:8c:65:cd:df:d6:0d:18:ae:0d:55:84:fc:69 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aldrich.howell.k12.nj.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:e7:07:8c:65:cd:df:d6:0d:18:ae:0d:55:84:fc:69
Serial Number (int): 70319429455454020953138200634510867561
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 33:06:57:0d:a7:df:0b:34:19:bb:d4:92:5f:67:55:a8:62:1d:9e:e2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 01:b4:c6:2a:05:fb:7b:ef:a9:70:e4:82:b7:43:8c:16:3d:44:cd:f9
Fingerprint (sha256): 9e:67:f6:82:ea:27:45:7d:12:3a:14:07:3b:4d:3c:df:9c:38:22:26:73:a7:a5:61:45:e2:9f:f7:43:bc:24:21

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/BCwVEzy4F0w
CRL Distribution Point: http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl

Check the revocation status for certificate aldrich.howell.k12.nj.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aldrich.howell.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aldrich.howell.k12.nj.us

Other certificates including the domain name howell.k12.nj.us

(limited to 100 certificates)
duff.garvey.k12.ca.us
1fairfield.org
1fairfield.org
cad.dcs.edu
admin.cad.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
wifi.howell.k12.nj.us
cognosweb.howell.k12.nj.us
www.howell.k12.nj.us
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
admin.ardena.howell.k12.nj.us
*.howell.k12.nj.us
howell.k12.nj.us
1fairfield.org
admin.sre.dcs.edu
jhe.dcs.edu
*.howell.k12.nj.us
admin.bms.dcs.edu
grahames.org
admin.sre.dcs.edu
wifi.howell.k12.nj.us
powerschool.howell.k12.nj.us
admin.ajhs.dcs.edu
howell.k12.nj.us
aldrich.howell.k12.nj.us
admin.cad.dcs.edu
admin.ahs.dcs.edu
powerschool.howell.k12.nj.us
mss.howell.k12.nj.us
powerschool.howell.k12.nj.us
powerschool.howell.k12.nj.us
howell.k12.nj.us
howell.k12.nj.us
powerschool.howell.k12.nj.us
wifi.howell.k12.nj.us
aldrich.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
aldrich.howell.k12.nj.us
powerschool.howell.k12.nj.us
*.howell.k12.nj.us
admin.dms.dcs.edu
dhdp.dcs.edu
www.howell.k12.nj.us
excel.dcs.edu
mail.howell.k12.nj.us
weec.dcs.edu
powerschool.howell.k12.nj.us
admin.jhe.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
admin.wde.dcs.edu
wifi.howell.k12.nj.us
1fairfield.org
admin.lsm.dcs.edu
1fairfield.org
ardena.howell.k12.nj.us
admin.excel.dcs.edu
1fairfield.org
howell.k12.nj.us
admin.howell.k12.nj.us

Certificate

The complete raw certificate details for aldrich.howell.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PwWjW/Oke5cmQP3z4gK
2Rp4ycIkSL4fBhmgy4mKNK9N0xeUu97Hm3QMkecL8nkkAckGX5N9tU26wPyMqRCG
c5M4vKfkd1Z8NtV9GZ5DnTkPDeCxUm6j4mocewfwZPmNKKA5ZcAYh11qVtIMBEhb
ZSphki36rSj8Yu+e7TRStlkFXAUZenhukgSZqk/kn9/8aC4VM9mV44Z8yZ8maQig
kSfYff7qi/5Sd/warQ3wximVAKcoiNsC8L0ZkMZ/u641A/OFLYh78neIMg47DVGc
XCcD+QdFDntZsNif765yORyEmc4S/Z3mkNtUtZdxFAV088plQdlmRDp4aXlv98Wq
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70319429455454020953138200634510867561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 16:17:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 16:17:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aldrich.howell.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28401689585433911092286247769976837208957341419579251234548037820104242914759280937232881919232156631682549841540957614593182445960658185619462580535049726432860184967502795456068186531988824332345974289292066459804946950340160040039562084653008959726275736864645608428682992730182539221875537895770392350410170411473571211428466453472823460449570621671093921279320849714660509307274496904395325688745950701691846526866547663491844920708745076087118328150532404341948856263430262964925927782370655050905863035370976127467051889392838706393290551441967736791331580595263613647152954897472339991039692645394157536651823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3306570da7df0b3419bbd4925f6755a8621d9ee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/BCwVEzy4F0w'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldrich.howell.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d27e0a5b4000004030047304502201a6e8538a5e04a4d58a2e8e8348397d32e1192aa0187ac8e3fe31ecdf988682a0221009c03895bdaa6329cde44a5ed99ca8bf1d7dfbb51ff15eabde6127fe32e0ca41f0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d27e0a594000004030046304402207173bfce53c87b4be34747265170f2a021cb17adf3978f61aa96c6071972d7eb02201e667def6cc5350d434322aa1682a3ee43dbc4817ecf29e024d2ee43dc72370c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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