www.assumptionschool-sl.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 11:90:4f:01:6c:1e:62:0b:11:d1:fe:fc:da:a8:a4:a7 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.assumptionschool-sl.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:90:4f:01:6c:1e:62:0b:11:d1:fe:fc:da:a8:a4:a7
Serial Number (int): 23346169099020547845508240986853647527
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 98:86:ce:e8:56:97:4b:4b:ab:72:9f:42:ae:93:02:5f:90:f2:85:7b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 05:98:cd:fa:0a:6c:d4:4c:79:55:80:44:11:23:b2:f3:14:e9:31:29
Fingerprint (sha256): a6:58:09:0e:b5:af:a9:14:bc:a1:1e:ec:e6:1b:15:0d:fb:29:44:4b:4d:67:7f:c4:04:aa:68:dc:a8:50:34:64

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/SoIYdhBTK74
CRL Distribution Point: http://crls.pki.goog/gts1p5/khbomtjPark.crl

Check the revocation status for certificate www.assumptionschool-sl.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.assumptionschool-sl.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.assumptionschool-sl.org

Other certificates including the domain name assumptionschool-sl.org

(limited to 100 certificates)
second.exteraschools.org
admin.adulteducation.pleasantonusd.net
admin.lorena.exteraschools.org
admin.adulteducation.pleasantonusd.net
www.saintpaulcatholic.org
abchandler.henderson.kyschools.us
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.adulteducation.pleasantonusd.net
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
www.trinitystelementary.com
gageparkhs.org
abchandler.henderson.kyschools.us
assumptionschool-sl.org
exteraschools.org
abchandler.henderson.kyschools.us
www.lusd.k12.ca.us
admin.assumptionschool-sl.org
admin.hsmp.org
assumptionschool-sl.org
abchandler.henderson.kyschools.us
assumptionschool-sl.org
www.exteraschools.org
assumptionschool-sl.org
admin.trinitystelementary.com
admin.assumptionschool-sl.org
second.exteraschools.org
admin.breed.exteraschools.org
admin.res.rfisd.net
assumptionschool-sl.org
www.assumptionschool-sl.org
admin.assumptionschool-sl.org
lorena.exteraschools.org
trinitystelementary.com
grandcoteauelem.slp.k12.la.us
admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
assumptionschool-sl.org
breed.exteraschools.org
abchandler.henderson.kyschools.us
eastman.exteraschools.org
hs.cumberlandacademy.com

Certificate

The complete raw certificate details for www.assumptionschool-sl.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgW/djc6anouWmTgZWqi
f5JEIMeA+t4JlOD+9s+HgdeAtndMOHhWiqQKq+tuoZG/vvxKOLqvmy7gpLjrnOoB
duVWNfZlsY9YARElKceaY7m1JnSdfX1J332GeKXJgL1HQYwEHJAYGRaiKFrxY5Sy
3FGt3mZR6d4vgeQ121S9WupfbB9Rsgu8FLZZoxkBbr/3jQ8pvrq5PLmrsso0XahH
IMTb/VQ8JiFRR/KcoriOUCR7jbBaoQrUw5c0V3T8Y6J9Gn/1qpQrIdo5fadeP4om
BKi4+vuIp7nqtlT8SJSHZW7vLpP328v0jBtEwbZBVZwaDGZSfzqrTlDGTwNIawyA
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23346169099020547845508240986853647527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 05:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 05:58:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.assumptionschool-sl.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22978205897758165978192556243183486994482997102597017941920360206381462689908089618225143311634586518718666675989415043603980549828586017373521177120506522682088291125291210799196636306723985460216927241581033969621882641019006355449648644704245891844066129023836407526879755460784938394511566977609290340918337771143225346730988803235111592603983446637331168836017612378540017582213306993797050776633416667136525487992560778418599006699691582695657514787958659270409141480025510610670053893664551396629087641280635906822470520409157577020666503687500582977388950369179349130108751255904417328331052288208589424459993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9886cee856974b4bab729f42ae93025f90f2857b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/SoIYdhBTK74'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/khbomtjPark.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018af45468660000040300473045022100ba302a6e8d66b43a7106a1bed4704ef65bff7dac684d4fe9332c651db1d0e3380220703e783109c147023b91354e7e7a11ab61ff13e438cabc06e2f7384cafdce2b000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018af4546872000004030047304502201c351263c3450842e7d90c7b7cbbb41fb520d52f105bc84c7aee0a5a5b80ec5e02210082575b7d94ae234407ba52ce64c1646f6787521fb22ed5a25b591c4e16292be1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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