phes.sanjacinto.k12.ca.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 1f:33:6c:6c:83:66:cd:cc:0e:ed:e7:72:68:aa:5b:de was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=phes.sanjacinto.k12.ca.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:33:6c:6c:83:66:cd:cc:0e:ed:e7:72:68:aa:5b:de
Serial Number (int): 41473074106663232759564766444729818078
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f2:d5:b3:77:98:54:4c:c8:1f:80:2b:da:6a:ca:8e:e0:23:cf:17:d5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): c2:81:01:1a:81:ee:4b:cb:7a:62:68:d8:4d:94:8b:d3:76:3b:81:05
Fingerprint (sha256): b1:3d:57:6a:00:79:93:67:ea:e0:0d:be:19:80:c1:13:5e:70:a2:e7:aa:9e:2a:b4:04:b1:8b:09:c6:d4:e6:9b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Cv-wtwi3OcE
CRL Distribution Point: http://crls.pki.goog/gts1p5/e8HO1MFk_io.crl

Check the revocation status for certificate phes.sanjacinto.k12.ca.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phes.sanjacinto.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

phes.sanjacinto.k12.ca.us

Other certificates including the domain name sanjacinto.k12.ca.us

(limited to 100 certificates)
kahuluischool.k12.hi.us
daes.sanjacinto.k12.ca.us
5.bellevilleschools.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
admin.akinseagles.org
admin.akinseagles.org
sjla.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
carjes.sanjacinto.k12.ca.us
sjhs.sanjacinto.k12.ca.us
whitaker.bpsd.k12.ca.us
jaees.sanjacinto.k12.ca.us
admin.lincolnparkpublicschools.com
*.sanjacinto.k12.ca.us
www.ps229q.org
5.bellevilleschools.org
admin.akinseagles.org
sanjacinto.k12.ca.us
admin.akinseagles.org
www.infinityhs.org
mvms.sanjacinto.k12.ca.us
admin.beatty.bpsd.k12.ca.us
edh.johnadamsacademy.com
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
5.bellevilleschools.org
admin.ps229q.org
adairsvillehigh.bartow.k12.ga.us
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
admin.akinseagles.org
ehes.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
nmms.sanjacinto.k12.ca.us
admin.akinseagles.org
adulted.sanjacinto.k12.ca.us
kahuluischool.k12.hi.us
mces.sanjacinto.k12.ca.us
admin.veritasca.org
dietz.crandall-isd.net
*.sanjacinto.k12.ca.us
admin.newhope-christianschool.org
5.bellevilleschools.org
admin.bpsd.k12.ca.us
ldes.tcs.k12.nc.us
sanjacinto.k12.ca.us
5.bellevilleschools.org
5.bellevilleschools.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
centralvalley.kernhigh.org
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
sanjacinto.k12.ca.us
tmsa.org
stonecanyon.owassops.org
admin.akinseagles.org
5.bellevilleschools.org
alt.crandall-isd.net
mha.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
www.lasgs.net
admin.akinseagles.org
admin.akinseagles.org
admin.tekoacharterschool.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
adairsvillemiddle.bartow.k12.ga.us
admin.akinseagles.org
*.sanjacinto.k12.ca.us
www.halb.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
admin.ddaa.arthuracademy.org
adulted.sanjacinto.k12.ca.us
adulted.sanjacinto.k12.ca.us
5.bellevilleschools.org
adulted.sanjacinto.k12.ca.us
5.bellevilleschools.org
eisner.caminonuevo.org
waa.arthuracademy.org
5.bellevilleschools.org
admin.hilohs.k12.hi.us
sanjacinto.k12.ca.us
www.kalama.k12.hi.us
webmail.sanjacinto.k12.ca.us
www.sanjacinto.k12.ca.us
www.lcelions.net
admin.komarekschool.org
phes.sanjacinto.k12.ca.us
admin.carjes.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
www.cpdlf.org
admin.bpjh.bpsd.k12.ca.us
sanjacinto.k12.ca.us
adulted.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us

Certificate

The complete raw certificate details for phes.sanjacinto.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wendh/uGsmBS5MirVOn
15sgi1C35edCOHbNzkbi/pTLNzgc5VkI6jmHgTfDAMY10Qo9J9NdVKLXLugd68+Q
Nr/6JzBvZKaGAKyYscd4s2yF1VGZIzYxuo8OJ3iiYF4dReZ+u2VejvN/7aoucZGl
JeH12GlIHKRVSbTVXGxod+oeCYqBgCvJCH61VYK0852d6UtwjEXmDsoltju2AqSN
wTKEKWqBtT0qf3cxtYSApbke/814s/qv8moibUL4jBnvVKkLjuztjVwNqL8MaCQV
dUM+u6L/b94FxIPWvFMGqss9gT9TELN4LQzDO6DvHYPev+AIrQBZQs/jdR+em/cI
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41473074106663232759564766444729818078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 06:37:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 06:37:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phes.sanjacinto.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27145009967862856928025641492216211377744555337958534957260845252599003850460847677937937386266544481489159884470668463253423052966571558878341756100307859990200741472882796662758590792495848103301449509838883374617262701508126806097695976482001104912782231841648579538930835368427233273319951215452259082621475048721265785453984707225720011606263078348540943866212111963854267421301346690549860245946305458546321749205604949722693970837794969601696475814251013298935668792646301796506974343873456625799847142007891340903144368729676951955220288261654220339013610556803127030411067582307816757078799956826311640942733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2d5b37798544cc81f802bda6aca8ee023cf17d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Cv-wtwi3OcE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/e8HO1MFk_io.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c004350b600000403004730450220485b8bfa3b07f5110afcb05a4c1cb78f783b960dcfabeaf956d7c57db67bd806022100c0b951b7e08277075dff227e969f8e21e6f9561633065a7c69ec47ba5709b419007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c004350c40000040300473045022100e760bd3a498fc1980290110e5478bec215113c81a5caa8faa2bff41cfa61144c022043917be83a7c05a31d6b96514120778ad2907cef9ba6c1985e062b3090d727c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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