stmargaret.htcsd.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ee:4a:aa:7a:f7:58:bc:be:13:7f:79:d4:c0:2b:66:7c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stmargaret.htcsd.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ee:4a:aa:7a:f7:58:bc:be:13:7f:79:d4:c0:2b:66:7c
Serial Number (int): 316743950716360076729022042924101887612
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 17:1c:f6:fd:8c:ca:b4:63:66:fc:45:17:f0:55:de:da:cb:eb:00:24
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f8:77:96:74:0a:2e:49:2e:81:c3:fa:ba:89:1f:b9:36:be:e8:d2:c2
Fingerprint (sha256): b7:fd:c2:e0:c5:40:8a:5d:23:3d:9d:64:d4:52:f5:87:0c:fa:fd:1e:31:06:7b:e6:70:5e:92:6b:7c:48:1e:a5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/SneQM8Vh8tI
CRL Distribution Point: http://crls.pki.goog/gts1p5/K9_azhS69E0.crl

Check the revocation status for certificate stmargaret.htcsd.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stmargaret.htcsd.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stmargaret.htcsd.ca

Other certificates including the domain name htcsd.ca

(limited to 100 certificates)
citrix.htcsd.ca
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
admin.colegiogreenhills.com
christtheking.htcsd.ca
htcsd.ca
htcsd.ca
printshop.comoxvalleyschools.ca
vanier.htcsd.ca
stagnes.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
comoxvalleyschools.ca
elem.bicschools.net
*.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
*.htcsd.ca
stmichael.htcsd.ca
htcsd.ca
www.wexford.edu.mx
admin.wearedace.org
soss.sd53.bc.ca
*.htcsd.ca
stmargaret.htcsd.ca
*.htcsd.ca
adss.sd70.bc.ca
*.htcsd.ca
htcsd.ca
www.htcsd.ca
www.wearedace.org
*.htcsd.ca
phoenix.htcsd.ca
*.htcsd.ca
*.htcsd.ca
*.htcsd.ca
htcsd.ca
allsaints.htcsd.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
stmargaret.htcsd.ca
www.gpcsd.ca
stmichael.htcsd.ca
fatimaschoolwilton.com
sacredheart.htcsd.ca
www.theratnerschool.org
htcsd.ca
ined.comoxvalleyschools.ca
*.htcsd.ca
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
*.htcsd.ca
htcsd.ca
powerschool.htcsd.ca
jcsk8.org
admin.jcsk8.org

Certificate

The complete raw certificate details for stmargaret.htcsd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqwf0rnP+tv7pVgTCqqI
DCuKvF1HM04xCTvUmqUkykL413nyxXoE5GAS/ssiHo9hha13ogAGgVbeC738Z6hK
llwyjTu3xZLWZTZQjD4p64uUL+6TKO9xpzyhhQkrc+dT0iU/xxaQFcWPy2DWEGVd
lTG51GWpeiQI8a4/kSNnGmj1Gl2fqjz/9MXOH1HKfcS7AHNxwx7yalBHxFReSCEa
SoMElx4SCrIRCyGmftoNw56HuUF3W5HCnvyoCkyhGdIqttSnPehEwUtd6+wIwHpZ
nuRaZzVThq0Lx9jJx1oBw7YAfxL90uROeAWH8crBsnoAJDVku5wswnA759I8r5pk
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316743950716360076729022042924101887612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 01:26:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 01:26:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stmargaret.htcsd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23565202383972837943542905379313227903598841528638157510234170454183592152830664507295938158978482329945418505017035048585912702493769895575248839731585277328189177332686283578930649005046059488668367503479674281503297162824235454351065901551002019249670513350152815814919026936079616849530442484750925697725667045119977572218885934358013098886500535356943334525582191467474138290988745295207901029398853916112864641064583287069450363085071174642050398127186092805451056288211816481469498644710498937471337566136850179287319384890352311784409277976158797962576834026447814969696420181790512595470342090205736273077369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							171cf6fd8ccab46366fc4517f055dedacbeb0024
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/SneQM8Vh8tI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret.htcsd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/K9_azhS69E0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3cf2b13b0000040300483046022100c14a7678356767788c11411a77706aaae765c08286bda08edf805a558c6f91ff0221008cb0f5c4da5d49889214b6fad2f2ea36f1e616d0154d33ea122abf67496059bc00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3cf2b161000004030047304502210095694a84d684e7fd3a42624bb499945764b1864235730e574317a88c96a1ddf802207c05139ecdf4379e1b35b69ce0791b2a9a77fc2eb104520a1f03bedfd614a385
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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