stjohnbosco.wellingtoncdsb.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 89:d2:35:5e:04:84:82:d5:0e:93:e3:f8:8c:21:46:0c was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stjohnbosco.wellingtoncdsb.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 89:d2:35:5e:04:84:82:d5:0e:93:e3:f8:8c:21:46:0c
Serial Number (int): 183195700179380194354517380359715374604
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5c:9d:e3:17:69:7c:87:92:4d:29:7a:7d:92:a7:9e:53:8e:f7:c2:82
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 0a:41:1e:89:cd:f5:13:37:84:9f:ea:01:d1:75:c0:e8:40:a0:54:e7
Fingerprint (sha256): ad:4b:c6:4a:b8:c5:13:0c:53:32:7f:03:c4:8f:53:df:43:31:df:96:55:73:57:32:38:de:53:f4:0f:b3:f4:c6

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/mhevcuJmNl8
CRL Distribution Point: http://crls.pki.goog/gts1p5/iWEb0vhbm54.crl

Check the revocation status for certificate stjohnbosco.wellingtoncdsb.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjohnbosco.wellingtoncdsb.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stjohnbosco.wellingtoncdsb.ca

Other certificates including the domain name wellingtoncdsb.ca

(limited to 100 certificates)
rdp-server2.wellingtoncdsb.ca
admin.athletics.godleyisd.net
www.wellingtoncdsb.ca
pcsd4.org
admin.athletics.godleyisd.net
stpeter.wellingtoncdsb.ca
stpatrick.wellingtoncdsb.ca
stjames.wellingtoncdsb.ca
*.wellingtoncdsb.ca
maryphelan.wellingtoncdsb.ca
elementary.troupisd.org
rdp.wellingtoncdsb.ca
wcdsbazure.wellingtoncdsb.ca
admin.athletics.godleyisd.net
sacredheartrockwood.wellingtoncdsb.ca
stjosephguelph.wellingtoncdsb.ca
wellingtoncdsb.ca
stpatrick.wellingtoncdsb.ca
stjosephguelph.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
admin.is339.org
mdm.wellingtoncdsb.ca
stjohnarthur.wellingtoncdsb.ca
admin.athletics.godleyisd.net
holytrinity.wellingtoncdsb.ca
admin.elementary.troupisd.org
wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
wellingtoncdsb.ca
*.wellingtoncdsb.ca
cfll.ldcsb.ca
wellingtoncdsb.ca
forticlient.wellingtoncdsb.ca
holyrosary.wellingtoncdsb.ca
datne001xxsv53.wellingtoncdsb.ca
wellingtoncdsb.ca
ems-server2.wellingtoncdsb.ca
stmaryelora.wellingtoncdsb.ca
admin.edlio.mx
sdsweb.wellingtoncdsb.ca
stjohnbrebeuf.wellingtoncdsb.ca
stmarymountforest.wellingtoncdsb.ca
stjosephfergus.wellingtoncdsb.ca
sdsweb.wellingtoncdsb.ca
bishopmacdonell.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
stjohnarthur.wellingtoncdsb.ca
sds-core-server.wellingtoncdsb.ca
ann.ldcsb.ca
abchandler.henderson.k12.ky.us
rdp-server.wellingtoncdsb.ca
wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
stjohnbosco.wellingtoncdsb.ca
sacredheartrockwood.wellingtoncdsb.ca
holyrosary.wellingtoncdsb.ca
wellingtoncdsb.ca
stmichael.wellingtoncdsb.ca
asu.ldcsb.ca
stpeter.wellingtoncdsb.ca
rdp-server2.wellingtoncdsb.ca
wellingtoncdsb.ca
stpaul.wellingtoncdsb.ca
abchandler.henderson.k12.ky.us
stfrancis.wellingtoncdsb.ca
middle.troupisd.org
wellingtoncdsb.ca
ourladyoflourdes.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stignatius.wellingtoncdsb.ca
sacredheartguelph.wellingtoncdsb.ca
bishopmacdonell.wellingtoncdsb.ca
stmaryelora.wellingtoncdsb.ca
wcdsbdat.wellingtoncdsb.ca
wellingtoncdsb.ca
*.wellingtoncdsb.ca
stjohnbosco.wellingtoncdsb.ca
*.wellingtoncdsb.ca
stpaul.wellingtoncdsb.ca

Certificate

The complete raw certificate details for stjohnbosco.wellingtoncdsb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviSkMqRqKJ854kNIQCAS
8vJPluIWejQq/IGB6of3LBeoMgZ1FvrDmBbulh/DmNQTmMC1JfkDEe1HJtFL03fx
P8s4Z9EdXA51yXWRngBakjE0hLZOiq1oMl92K3fKPEhou6k3H/VJsxmBiJahoClk
TDOkxQr9PWlpJGsakKQpJR9Nz8kbVLUE6v6pqMhb2qv5ZDIGknRH9mcbFWPcV1Go
qGgLrrZG2G5q93J3pYUBb1AGxi+2l2lrlCPosvluu5J61LjfoT83wjCzIPVgZKnz
cGE7bV7UXY2axZcUuTunjIaQ+hHXCfWVEKPEmBW2vOvcdVxNtbms4yvTtRcY+IkP
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183195700179380194354517380359715374604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 12:39:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 12:39:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjohnbosco.wellingtoncdsb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24003346490200358647221780452199789392106511641849959855357287274336139921805211618104485362795586617654856347666457104371418757974895938983952666760553049097376600526337026261295198752164887994601127088923623835011127936477179542374467123906248480667864692946213973399748205985903398935960927964058840484420503257144063039052932970598623600853821033163484849392318861358034705272701159113023230416718583262766637972056244964047961818390718374385372108094984851357211169061024145010281805783064851240925867808578521380795542765336058138596802605350362532946332621874367597466315939349337485615896397076832230318870493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c9de317697c87924d297a7d92a79e538ef7c282
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/mhevcuJmNl8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnbosco.wellingtoncdsb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/iWEb0vhbm54.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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