wellingtoncdsb.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number a1:db:cc:11:a6:00:4b:fc:0d:c3:6e:33:b7:29:1d:23 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wellingtoncdsb.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a1:db:cc:11:a6:00:4b:fc:0d:c3:6e:33:b7:29:1d:23
Serial Number (int): 215146959343203360928822100448602823971
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 88:50:27:5c:bd:a6:d1:d9:cc:9a:da:5b:49:40:78:57:25:57:67:66
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 7b:67:f7:b0:92:9c:4a:9c:9d:fa:a2:7b:75:3d:48:99:aa:ea:68:00
Fingerprint (sha256): a9:25:80:63:e0:5a:d4:31:d8:2f:b3:17:b8:9f:c6:30:98:8a:cb:04:b1:8a:5e:1f:2c:52:1e:d7:0a:a4:6e:48

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/jf2Ox3yGP4c
CRL Distribution Point: http://crls.pki.goog/gts1p5/tdQplg74lX8.crl

Check the revocation status for certificate wellingtoncdsb.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wellingtoncdsb.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wellingtoncdsb.ca

Other certificates including the domain name wellingtoncdsb.ca

(limited to 100 certificates)
rdp-server2.wellingtoncdsb.ca
admin.athletics.godleyisd.net
www.wellingtoncdsb.ca
pcsd4.org
admin.athletics.godleyisd.net
stpeter.wellingtoncdsb.ca
stpatrick.wellingtoncdsb.ca
stjames.wellingtoncdsb.ca
*.wellingtoncdsb.ca
maryphelan.wellingtoncdsb.ca
elementary.troupisd.org
rdp.wellingtoncdsb.ca
wcdsbazure.wellingtoncdsb.ca
admin.athletics.godleyisd.net
sacredheartrockwood.wellingtoncdsb.ca
stjosephguelph.wellingtoncdsb.ca
wellingtoncdsb.ca
stpatrick.wellingtoncdsb.ca
stjosephguelph.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
admin.is339.org
mdm.wellingtoncdsb.ca
stjohnarthur.wellingtoncdsb.ca
admin.athletics.godleyisd.net
holytrinity.wellingtoncdsb.ca
admin.elementary.troupisd.org
wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
*.wellingtoncdsb.ca
cfll.ldcsb.ca
wellingtoncdsb.ca
forticlient.wellingtoncdsb.ca
holyrosary.wellingtoncdsb.ca
datne001xxsv53.wellingtoncdsb.ca
wellingtoncdsb.ca
ems-server2.wellingtoncdsb.ca
stmaryelora.wellingtoncdsb.ca
admin.edlio.mx
sdsweb.wellingtoncdsb.ca
stjohnbrebeuf.wellingtoncdsb.ca
stmarymountforest.wellingtoncdsb.ca
stjosephfergus.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
bishopmacdonell.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
stjohnarthur.wellingtoncdsb.ca
sds-core-server.wellingtoncdsb.ca
ann.ldcsb.ca
abchandler.henderson.k12.ky.us
rdp-server.wellingtoncdsb.ca
wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
stjohnbosco.wellingtoncdsb.ca
sacredheartrockwood.wellingtoncdsb.ca
holyrosary.wellingtoncdsb.ca
wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
asu.ldcsb.ca
stpeter.wellingtoncdsb.ca
rdp-server2.wellingtoncdsb.ca
wellingtoncdsb.ca
stpaul.wellingtoncdsb.ca
abchandler.henderson.k12.ky.us
stfrancis.wellingtoncdsb.ca
middle.troupisd.org
wellingtoncdsb.ca
ourladyoflourdes.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stignatius.wellingtoncdsb.ca
sacredheartguelph.wellingtoncdsb.ca
bishopmacdonell.wellingtoncdsb.ca
stmaryelora.wellingtoncdsb.ca
wcdsbdat.wellingtoncdsb.ca
wellingtoncdsb.ca
*.wellingtoncdsb.ca
stjohnbosco.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stpaul.wellingtoncdsb.ca

Certificate

The complete raw certificate details for wellingtoncdsb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+8Tff89GX/bEJbMf9GV
yIm6x6JUSJwBHNd92lXGZUA0nnWuuysGblHmBS7umur00HYRoGlatNNQeZq6Bsfl
cGlqAE3NQbDcM5XNKsk9Xj+YOOqgsiOmMzUbuvGQZmx+v6/y+FgJRL4BHbVHecbS
O81/LU1tuv1U6unHZW2MB1EkudJmJLAyyrUU4p3ivP3eySFPm9Sv1f2Bm0k3+geO
jWTMXIEmYJRCxJBdoSnQDE/gvvwjh16m0bMBDa5SBqpnAKzYvVFzOhQaSf4qBhC8
huXjsu2nEd5cUV9XIp4y9+58iVoMgkdFYFWrLRG43n9BkAMQwag8fjlbf4cH4jex
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215146959343203360928822100448602823971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 06:45:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 06:45:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wellingtoncdsb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25239315527452924512224678317195238787163706372830096128238665650556562748622650811143261153906788555486156858272771721477388634163692194374391743191466086883371585824106446836742310125321774976172618702038480580002299710966275720689384048550817029011644543091666920005059554803740703375785066926287771467937435671551826575085754168820440429921755975191549909735626818373097514728201247616330685983207975560767277444310151834217516787120997166885527172803343181164812476508520098689369470099367568310111604335379553796115290716032820375941673821021998824536612407784121030791192185033855118548020968135089624473645381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8850275cbda6d1d9cc9ada5b4940785725576766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/jf2Ox3yGP4c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtoncdsb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/tdQplg74lX8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189de68035c0000040300483046022100e426e5e66eb3df3343e2e13d192193affbc4b8b4a522935ac25e52ce0fe03fbe022100973d68e88a176c02d89d3d3b5a1302f81070084a81842773ea48dc4403d1e7780076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189de68035b000004030047304502200138536ad8eca3e40537080f1a417a7f2a19a596347d9c3cbd58f6d5b35ee7a50221008c85f86c26dae66c26b2d12255656e2192e5d699b6553d407c6ee8a67cbc137b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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