wpes.hermiston.k12.or.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number d1:93:db:f8:03:60:3f:78:0e:ca:a4:a9:95:39:0b:11 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wpes.hermiston.k12.or.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d1:93:db:f8:03:60:3f:78:0e:ca:a4:a9:95:39:0b:11
Serial Number (int): 278576380254584351983578820755745999633
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c9:54:a0:f0:ba:5a:cd:6c:b2:0b:4e:ee:58:35:1f:ce:93:98:6a:cb
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): bf:d9:03:50:1a:43:70:46:bb:93:ae:41:b8:50:a5:02:df:c0:cd:53
Fingerprint (sha256): bc:74:9b:c3:7b:74:32:e9:b3:09:85:cd:f3:f9:2d:25:8d:91:56:4f:9b:c9:d8:3f:94:2d:14:5c:7b:a1:a9:55

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/I2GjrYtOJh4
CRL Distribution Point: http://crls.pki.goog/gts1p5/jLygdbXX6mo.crl

Check the revocation status for certificate wpes.hermiston.k12.or.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wpes.hermiston.k12.or.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wpes.hermiston.k12.or.us

Other certificates including the domain name hermiston.k12.or.us

(limited to 100 certificates)
coloradosprings.coloradoearlycolleges.org
admin.alms.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hermiston.k12.or.us
admin-cuajimalpa.peterson.com.mx
www.plummerpanthers.org
washington.bcsd.com
mydocuments.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
admin.gsdacademy.com
windsorms.coloradoearlycolleges.org
admin.arundel.scsdk8.org
powerschool.hermiston.k12.or.us
pioneer.bcsd.com
*.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
powerschool.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hhes.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
im.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.eim-education.com
sierra.bcsd.com
*.hermiston.k12.or.us
sequoia.bcsd.com
longfellow.bcsd.com
hermiston.k12.or.us
*.hermiston.k12.or.us
sequoia.bcsd.com
conference.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
admin.casaloma.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
plummerpanthers.org
*.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sms.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.coloradoearlycolleges.org
admin.kes.rcschools.net
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sm.hermiston.k12.or.us
admin.downtown.bcsd.com
hermiston.k12.or.us
admin.cato.bcsd.com
admin.mtvernon.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
seal.bcsd.com
*.hermiston.k12.or.us
chat.hermiston.k12.or.us
mail.hermiston.k12.or.us
gsdacademy.com
hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.compton.bcsd.com
admin.bcsd.com
admin.alms.hermiston.k12.or.us
wpes.hermiston.k12.or.us
*.hermiston.k12.or.us
fcwestms.coloradoearlycolleges.org
alms.hermiston.k12.or.us
mydocuments.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.arroyo.scsdk8.org
admin-tlalpan.peterson.com.mx
admin.central.scsdk8.org
hermiston.k12.or.us
lyncpool.hermiston.k12.or.us
*.hermiston.k12.or.us
www.hermistoneducationfoundation.org
*.hermiston.k12.or.us
sip.hermiston.k12.or.us
admin.gsdacademy.com
*.hermiston.k12.or.us
admin.bcsd.com
ces.csd400.org

Certificate

The complete raw certificate details for wpes.hermiston.k12.or.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaMVtLVvBTEpaMT2QXev
pt6Lt15gBsQGmEDb9Fu2S3uAZM1rOX6Hx3r1qChq9eu6LUnI0u9WzIld1an72X9q
XC/YbTrj2C4Wlu/dmwDcj1zkBOP7NgpiWsh4bqu/oZqD7wIMh/w0pZJZgCDDXpW0
1ASOT2ZTSMFGbflQ3bhuL/ErzbVIJu7iJJd483MwY1z5kIcEGf704czOU5GrA619
0zyo+VlKvK3Jy5/y7ZY60O72hJed8gbb5FuuJ6SS7rjomhfjy6pN4yB6jp9vptdR
obwYPeswWBWqZ4T6wTt08GGW1BFAnHb0zhP2hSIRQ2IRWVbvQzsucKFagNiIDaj3
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278576380254584351983578820755745999633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:34:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:34:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wpes.hermiston.k12.or.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18889927546522654521514984827853077411380674261729647760221019121257908909289969187018332905579770726820235434133489105679461542126799560453497741887127270974198428199892097763521829266005270709618805903101807474261643528315156139189007720501065271506346999335137612517731045870814415875927417476685231587364123584874187130228253020879871412686190560286335877448090869767350349920644947181191441152558217739402563303814551095122908016131200261278784367319369971230271179053695468258226501580716485461691356623565777960305607096740777929027643461498731282835137808413713168055366693493589866984960042958358630715946919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c954a0f0ba5acd6cb20b4eee58351fce93986acb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/I2GjrYtOJh4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jLygdbXX6mo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001899a21b66a0000040300473045022100aff338818ffe35459e54ea10b5b4f986c418c80042d977e4ec115843cee8043202207b755d4ebb1c9f861eece4b4a63f7c310df04dbd299c9024e749d21633c23c820076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899a21b67a000004030047304502201b839fc404fef7d807f26440f845fe0c4bf8855e859cf77ecad55cde353e8628022100d18887781f1166c65de29346301c34985a8744472e61f4699264b1c053d71412
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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