monessenschooldistrict.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 9b:24:22:02:f0:1c:13:83:11:0e:b1:7a:42:6f:eb:9d was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=monessenschooldistrict.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:24:22:02:f0:1c:13:83:11:0e:b1:7a:42:6f:eb:9d
Serial Number (int): 206217951868262407702828070781963987869
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 96:83:46:8a:76:b7:03:2f:33:74:7b:67:f4:57:dd:7d:84:c6:31:ee
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 6f:20:bc:e7:df:37:bf:17:d7:36:aa:00:5c:4d:79:cd:8d:cd:d3:6c
Fingerprint (sha256): 9f:93:1f:41:a8:6d:08:2b:87:28:57:e2:85:ee:8f:e9:43:bb:ce:18:86:6d:7c:e9:a1:f6:03:9e:81:af:7a:e5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/JY3KJQwvSqI
CRL Distribution Point: http://crls.pki.goog/gts1p5/58Kow7l5APk.crl

Check the revocation status for certificate monessenschooldistrict.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monessenschooldistrict.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monessenschooldistrict.com

Other certificates including the domain name monessenschooldistrict.com

(limited to 100 certificates)
admin.mshs.monessenschooldistrict.com
bce.slvusd.org
sl.losd.ca
monessenschooldistrict.com
monessenschooldistrict.com
www.lighthousecs.org
admin.andersononline.org
admin.canyon.cv.k12.ca.us
admin.mshs.monessenschooldistrict.com
sunnyside.goldenruledallas.org
admin.aplusarts.com
www.monessenschooldistrict.com
admin.illinois.goldenruledallas.org
admin.bclc.burke.k12.ga.us
admin.monessenschooldistrict.com
careerprograms.comoxvalleyschools.ca
desoto.goldenruledallas.org
admin.fuesd.org
www.richgrove.org
svms.comalisd.org
admin.crma5.org
www.monessenschooldistrict.com
admin.evanshs.ccboe.net
monessenschooldistrict.com
pg.goldenruledallas.org
monessenschooldistrict.com
admin.nohum.org
ballingerisd.net
admin.andersononline.org
sses.rcsnc.org
www.monessenschooldistrict.com
indio.rcea.us
chs.comalisd.org
admin.cornerstone.pvpusd.net
admin.llc.lex3.org
admin.aplusarts.com
admin.lunadabay.pvpusd.net
lighthousecs.org
cses.comalisd.org
slvusd.org
admin.sle.slvusd.org
admin.harding.bcsd.com
academy.comalisd.org
cdc.comalisd.org
mckinley.bcsd.com
www.fairfield.k12.sc.us
admin.elem.monessenschooldistrict.com
gp.goldenruledallas.org
charter.slvusd.org
admin.blms.lex3.org
admin.whhsny.org
monessenschooldistrict.com
www.athlosprep.org
admin.l2ic.lex2.org
franklin.bcsd.com
ruggleselementary.org
admin.mshs.monessenschooldistrict.com
admin.brhs.bordentown.k12.nj.us
monessenschooldistrict.com
www.tulsalegacy.org
leavittms.net
admin.aes.pgsd.ms
elem.monessenschooldistrict.com
admin.asd4.org
cdc.comalisd.org
admin.monessenschooldistrict.com
admin.mtvernon.bcsd.com
www.rmcacs.org
admin.aplusarts.com
l2ic.lex2.org
www.rcaschool.org
richgrove.org
wilmer.goldenruledallas.org
admin.andersononline.org
lunadabay.pvpusd.net
admin.hs.slvusd.org
monessenschooldistrict.com
mshs.monessenschooldistrict.com
admin.rmcacs.org
cv.k12.ca.us
chms.comalisd.org
admin.goldenruledallas.org
monessenschooldistrict.com
admin.bce.slvusd.org
monessenschooldistrict.com
bbes.comalisd.org
www.adsb.on.ca
www.monessenschooldistrict.com
admin.aplusarts.com
bes.ballingerisd.net
monessenschooldistrict.com
admin.slvusd.org
ses.comalisd.org
admin.ccboe.net
admin.andersononline.org
www.asd4.org
www.lex3.org
admin.cve.cv.k12.ca.us
admin.lincoln.district75.org
www.slvusd.org

Certificate

The complete raw certificate details for monessenschooldistrict.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJBZ7b4uxcCbLocb2Oog
t3hjxyYS66hb2FPh5kchbONJgrYgT97RKJsLs83uNMHDHpepC0jZiHHoTYhX+z7a
pUWkfxQNrtO6KDx0ULDlgyD9IlNQ56ex+QSC+Sbbrxl6Y8IY6SrsJYWwypVH1MOf
Kik0aNDueNCstQntu/xT7fZhbWjtrDSZH+1qaDS6+ypplqoZVd9aQjX4qREha26E
TJcbkjPpCjpCUmiBGp1FQ43ZQvsV30BTIyKrpogf3EWfGeLmaunLP2bQD3Omm3+j
ynnTT9HhQor6CMn0g+mZQzEdpbQbiXmEpzC05MB9Lz5E7vr3cMIu0XnSivzIBvmA
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206217951868262407702828070781963987869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 13:35:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 13:35:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monessenschooldistrict.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23299030384854712715789125749130898510512306028691122265765313403825600389174634926732522829786489374368250937536486519352641079306332366613330167554386536221408253956467816527085802947381063861257013624883201444382644139179436569902689929834214826330205311768369716979126165835209499941021983129425844494353308272335737899898731542815003358346190775517216466582512092947153684937311964421948218909833266830277985721358928686473454363400329327061308410882300616279732701686344572356420998299280854500340737293041593026916514434632614695009708589128383729463552826666872193089860416929565912600842819392763163609497753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9683468a76b7032f33747b67f457dd7d84c631ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/JY3KJQwvSqI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monessenschooldistrict.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/58Kow7l5APk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018af5f79a7b00000403004630440220418ef045e2a0a954a96c767f2d8e349c97aba8e50651b668a55eb812607ed3ad02206fad2f7d8667b2f049b42905dada6e224b98e134d64e4539b99dbd5926baf394007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018af5f79a410000040300473045022100ba32240d70b65df7e31c6267309ad329808b98ce259bd5eeb955e542f6e445d1022024c3633ecead660c197214d08c90c977ccd7150a18c5e214133e2ff4dcb6ffd1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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