krumisd.net

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d6:f2:f6:b3:0d:4d:df:2e:13:74:51:4f:aa:94:b7:36 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=krumisd.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d6:f2:f6:b3:0d:4d:df:2e:13:74:51:4f:aa:94:b7:36
Serial Number (int): 285716330596458459805225365727870236470
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3e:1a:78:91:60:ce:60:7e:3c:94:fd:ca:52:13:65:c1:6c:cc:c1:fc
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 79:62:89:2f:40:36:6e:94:01:c8:1b:39:fd:0d:1e:95:df:f2:4b:bf
Fingerprint (sha256): 9f:6f:59:d2:1a:a7:fd:a6:f6:af:a2:15:89:9e:14:7f:51:74:e2:74:d3:2c:4a:d4:c7:3b:02:85:2b:2a:3c:db

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/aYMC7NdXQmo
CRL Distribution Point: http://crls.pki.goog/gts1p5/Y8_e_qsPdPQ.crl

Check the revocation status for certificate krumisd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for krumisd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

krumisd.net

Other certificates including the domain name krumisd.net

(limited to 100 certificates)
acsaregion14.org
admin.argyleisd.com
admin.argyleisd.com
acsaregion14.org
admin.argyleisd.com
*.krumisd.net
www.granths.org
sfrschool.org
acsaregion14.org
acsaregion14.org
admin.krumisd.net
acsaregion14.org
krumisd.net
acsaregion14.org
acsaregion14.org
ptech.visd.net
krumisd.net
acsaregion14.org
admin.lisbahamas.com
admin.argyleisd.com
acsaregion14.org
dodd.krumisd.net
acsaregion14.org
admin.elementary.mypagosaschools.com
admin.argyleisd.com
eec.krumisd.net
admin.argyleisd.com
admin.griggscountycentral.org
acsaregion14.org
saspasadena.org
acsaregion14.org
krumisd.net
admin.argyleisd.com
dyer.krumisd.net
admin.argyleisd.com
www.krumisd.net
admin.moxee.evsd90.org
admin.aquaticscenter.visd.net
acsaregion14.org
vickers.visd.net
acsaregion14.org
acsaregion14.org
acsaregion14.org
mail.krumisd.net
admin.bisd-tx.org
acsaregion14.org
admin.argyleisd.com
acsaregion14.org
acsaregion14.org
admin.argyleisd.com
admin.hs.notredameacademy.org
www.theirvingtonschool.org
admin.argyleisd.com
admin.argyleisd.com
acsaregion14.org
krumisd.net
admin.argyleisd.com
admin.argyleisd.com
khs.krumisd.net
krumisd.net
sgisd.net
admin.argyleisd.com
admin.hs.somervilleisd.org
eec.krumisd.net
www.cienegaelementary.org
kms.krumisd.net
admin.argyleisd.com
acsaregion14.org
krumisd.net
acsaregion14.org
eagles.lucernevalleyunified.org
admin.argyleisd.com
admin.argyleisd.com
lisbahamas.com
uci.edu.mx
admin.krumisd.net
admin.williamwood.visd.net
taylor.ogsd.net
acsaregion14.org
admin.aloe.visd.net
acsaregion14.org

Certificate

The complete raw certificate details for krumisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsefsPwe1Lj9cV4rIBlu
tFouCNAMO73RidXXOmetaQDR7rIv1NTFBeTcvtcAD/3pHsjJksHrrEIjjZzoVt+I
13oHK1s+lX0TkHcvYRBDfJpR/jb/hU3NHsiL/IJf3IOXyrd4PkEmSR0C68LzIRUg
2XhGMtbwkhMJZVubGF5AkwtfW1siU+bz44XsTxN3GE+fuDtVNx0EbGKLCvfymbYA
a8UYAQ7HwH7x7Ox2rcccHZQvyYBwTdta79/alaBoBaQS5oO2QaTTUDTzW/h/9nMr
kh/tnweAbnAX5g23mD7N54Px+aqs8XNFIk0cbwMYr/MrCG740MuleTVmxPtfMvCu
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285716330596458459805225365727870236470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 19:56:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 19:56:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krumisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25093622545101514956008396184048766715041844943116023717370425944714135356964023611691079257533816658340354885820857312950730004642496064927661164562739341956255798805400406705916665904164813965172755993643974489821321288689923022106415964571440350805904218329389798522514955484016821882383984314131717281544033219205003160909292235300716080625667900517486859385171725561142432899355049993731894181521970623389638555774215095977577551824737836386248943567840433275431131387191679087881548781332860318975945264462524307930010128073394325593167498414991247558575650722224502879840732809268668286898375369915439296589341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e1a789160ce607e3c94fdca521365c16cccc1fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/aYMC7NdXQmo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Y8_e_qsPdPQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018864262f830000040300473045022003bafa770f5ff45c3f74b642a75dda6928c34aad5cf4a3908080e29aacc8acfa022100a837e0226d947f1639e841b52b314bec8255616b6f1f5bf799e05e77a662e2ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018864262e7d000004030047304502210081504ed3ddbf422a217c64b8405852b54455e176a3d30f960ff95235e6c12a690220113f31d3bc2d884beded40901d7acfed9980faa6713d8702b1d7384a0c3ebff5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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