district96.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 41:27:17:c5:04:98:e0:c8:0e:dd:d7:d5:3b:11:81:d6 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=district96.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 41:27:17:c5:04:98:e0:c8:0e:dd:d7:d5:3b:11:81:d6Serial Number (int): 86602801408294047579133436039095484886
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 9b:ab:51:d2:92:2d:db:0c:01:3a:11:90:63:7b:6e:ae:6b:3d:cf:90
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 46:77:1b:6d:b6:df:d3:e5:fb:e0:3b:32:fe:a5:82:73:9c:56:15:76
Fingerprint (sha256): c0:c6:5f:25:36:42:34:66:8f:d5:17:5d:1e:9a:2b:70:02:16:8d:ba:0a:70:78:51:f9:0f:06:f3:4e:1c:ee:22
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/pb1EyLt4LHMCRL Distribution Point: http://crls.pki.goog/gts1p5/OEZ-zGIkVNM.crl
Check the revocation status for certificate district96.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for district96.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
district96.org
Other certificates including the domain name district96.org
(limited to 100 certificates)
admin.ames.district96.org
68thstreetes.com
www.risingstarisd.org
admin.aasdcat.com
district96.org
store.district96.org
admin.ames.district96.org
eastwindsorregionalschools.com
admin.newtownhighschool.org
district96.org
admin.ames.district96.org
hs.humphreyscountysd.org
6gc.mead354.org
68thstreetes.com
admin.aasdcat.com
admin.collegeachievegreaterasburyparkcharterschool.org
district96.org
crma12.org
www.regentsas.org
wright-es.weatherfordisd.com
admin.chestnut.painesville-city.k12.oh.us
68thstreetes.com
68thstreetes.com
68thstreetes.com
store.district96.org
store.district96.org
admin.ames.district96.org
www.186streetschool.com
*.schoology.com
admin.kimmel.aasdcat.com
admin.ames.district96.org
district96.org
68thstreetes.com
district96.org
blythe.district96.org
store.district96.org
admin.blythe.district96.org
admin.wilkescountyschools.org
6gc.mead354.org
central.district96.org
www.wagnerwildcats.org
district96.org
district96.org
district96.org
district96.org
district96.org
admin.ames.district96.org
68thstreetes.com
*.schoology.com
corinthschools.org
store.district96.org
district96.org
store.district96.org
admin.wagnerwildcats.org
district96.org
admin.sac.gcsd.ms
*.schoology.com
68thstreetes.com
store.district96.org
68thstreetes.com
www.risingstarisd.org
admin.aasdcat.com
district96.org
store.district96.org
admin.ames.district96.org
eastwindsorregionalschools.com
admin.newtownhighschool.org
district96.org
admin.ames.district96.org
hs.humphreyscountysd.org
6gc.mead354.org
68thstreetes.com
admin.aasdcat.com
admin.collegeachievegreaterasburyparkcharterschool.org
district96.org
crma12.org
www.regentsas.org
wright-es.weatherfordisd.com
admin.chestnut.painesville-city.k12.oh.us
68thstreetes.com
68thstreetes.com
68thstreetes.com
store.district96.org
store.district96.org
admin.ames.district96.org
www.186streetschool.com
*.schoology.com
admin.kimmel.aasdcat.com
admin.ames.district96.org
district96.org
68thstreetes.com
district96.org
blythe.district96.org
store.district96.org
admin.blythe.district96.org
admin.wilkescountyschools.org
6gc.mead354.org
central.district96.org
www.wagnerwildcats.org
district96.org
district96.org
district96.org
district96.org
district96.org
admin.ames.district96.org
68thstreetes.com
*.schoology.com
corinthschools.org
store.district96.org
district96.org
store.district96.org
admin.wagnerwildcats.org
district96.org
admin.sac.gcsd.ms
*.schoology.com
68thstreetes.com
store.district96.org
Certificate
The complete raw certificate details for district96.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQQScXxQSY4MgO3dfVOxGB1jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA3MjgwNzA1NDZaFw0yMzEwMjYw NzA1NDVaMBkxFzAVBgNVBAMTDmRpc3RyaWN0OTYub3JnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA90VtMeP0Vig1440J2XQ0wAOok99mgOgVDqYpdIiH 1Toe5sVOcibG4XKE6dw3zZf4b+N4ceyTk0e45EjV4HlkL1i48klL1HsZXnXR9KV+ pPIXrFxikkWeq5U2tokbsxDNONESLv1SHYvKM9V/BqQaBUnde9C9w4wTlPXP17gc FIYIJcM+CADHjxMSEhp+qzoDCU1e+2d5+JC2BohR/Lsgk3yZHx6QgM0P2GuDIRS2 RD2djRflSF90+kVLIf3Do4OJSHEU7XLHcuWrOTnfn7q48uCNKyQ1ewAr9wAu+8Ml +4oZrjzJ82/2swG76y4P8khep/dtQOld4F1q5zsXmVaBJQIDAQABo4ICdTCCAnEw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFJurUdKSLdsMAToRkGN7bq5rPc+QMB8GA1UdIwQYMBaAFNX8 ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvcGIxRXlMdDRMSE0wMQYIKwYB BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwGQYD VR0RBBIwEIIOZGlzdHJpY3Q5Ni5vcmcwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYK KwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29v Zy9ndHMxcDUvT0VaLXpHSWtWTk0uY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJm4hFKQAABAMA RzBFAiEAlJJ0nY9cecFeTndNUIafR6VhVpsQcL2SB09fTs4FC5UCIHv5F/KtyU4h lvk6BG/Wqx1oeJHTjhwFVVo1OXcoCh+FAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFn DAuH3PADDnk2pZoAAAGJm4hFAgAABAMARzBFAiEAmTPR6Z41c1G4O/Ch8b3M6zcs YVWYvHRac+jRKMsGZJgCIGRyNKyg1p23Yw79nHlXM4lwWTHQvx3zzNhwILJNkYGJ MA0GCSqGSIb3DQEBCwUAA4IBAQCMnxIV9U8CTyhBeBm0U6hTgZ6susxCN/Ltpfxv IwDH6dhUcAShcMcfKt6nFMaqD0HZwFetUgt3fE0aaK5F4+yFztViUJqAchde0bm+ ofaAOZCuyDKJGG3+EDnOHrVhWop9j4Uk3hff6EZ2uv4j0amowLmjzUtW9+9234Lx oIW5HJHrZM7Omfy21Olqt6AucbG123oUS8Qt/q6w014C+TzT6FG4fy5PmWYgpBJt IXQFGYvoAcR4wGHBuO/t9jDGdfiJDSyVax6T3uE5IeqkA8ElWkTxNvEefbizlTyH Xzqr/OTMLHZYdzhFCE8f07075hTylFttm+9oZ2ytyEprpXji -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90VtMeP0Vig1440J2XQ0 wAOok99mgOgVDqYpdIiH1Toe5sVOcibG4XKE6dw3zZf4b+N4ceyTk0e45EjV4Hlk L1i48klL1HsZXnXR9KV+pPIXrFxikkWeq5U2tokbsxDNONESLv1SHYvKM9V/BqQa BUnde9C9w4wTlPXP17gcFIYIJcM+CADHjxMSEhp+qzoDCU1e+2d5+JC2BohR/Lsg k3yZHx6QgM0P2GuDIRS2RD2djRflSF90+kVLIf3Do4OJSHEU7XLHcuWrOTnfn7q4 8uCNKyQ1ewAr9wAu+8Ml+4oZrjzJ82/2swG76y4P8khep/dtQOld4F1q5zsXmVaB JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 86602801408294047579133436039095484886 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 07:05:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 07:05:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'district96.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31215096830706721942240448031795210417416448160537299284744564953558879973616879965536008812659459069000878215715471755117100641007171800362527835754553057613397968938376298205960065745298779752053054228944595194753978630120334893637525735379857046067464482393903017170395912541542731701286716425495306855874123427365859493925543660835965992943899734290072533802766823975702594856489674669130933018926247408790535906861405619319951096312967687814674662456989529278976129928416416122290288605471382471050454397278732804598920177425864449183711287427357032662297058397144518312185787384179774945270648983827437801865509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9bab51d2922ddb0c013a1190637b6eae6b3dcf90 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/pb1EyLt4LHM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'district96.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/OEZ-zGIkVNM.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899b88452900000403004730450221009492749d8f5c79c15e4e774d50869f47a561569b1070bd92074f5f4ece050b9502207bf917f2adc94e2196f93a046fd6ab1d687891d38e1c05555a353977280a1f85007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001899b88450200000403004730450221009933d1e99e357351b83bf0a1f1bdcceb372c615598bc745a73e8d128cb0664980220647234aca0d69db7630efd9c79573389705931d0bf1df3ccd87020b24d918189 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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