oes.bartlettschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number bc:63:28:58:f4:70:13:e5:0e:c9:8b:c0:db:e0:98:d5 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oes.bartlettschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bc:63:28:58:f4:70:13:e5:0e:c9:8b:c0:db:e0:98:d5
Serial Number (int): 250409718940671415401757051677665433813
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ed:de:b3:ff:ac:61:5e:35:9f:fe:90:f6:af:b8:4d:9c:2b:01:8d:50
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): bd:60:0a:f9:71:d7:58:c6:d2:dd:ee:b8:dc:8c:a9:69:e0:82:f9:cd
Fingerprint (sha256): c1:79:48:ce:01:5f:e2:89:7c:c6:e9:ee:e8:e4:83:2c:70:dc:07:9b:5e:91:7f:55:bb:ff:5c:81:d4:18:1d:92

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/zXKHcnxUvSg
CRL Distribution Point: http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl

Check the revocation status for certificate oes.bartlettschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oes.bartlettschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oes.bartlettschools.org

Other certificates including the domain name bartlettschools.org

(limited to 100 certificates)
www.bartlettschools.org
admin.allsaintsjupiter.org
fhs.frenship.us
admin.bayhaven.org
ees.bartlettschools.org
6gc.mead354.org
admin.allsaintsjupiter.org
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.allsaintsjupiter.org
admin.allsaintsjupiter.org
stmmsa.org
admin.elmwood.mbgsd.org
adairsvillehigh.bartow.k12.ga.us
admin.bayhaven.org
walkerjonescampus.org
www.giddings.txed.net
admin.allsaintsjupiter.org
6gc.mead354.org
admin.allsaintsjupiter.org
bartlettschools.org
admin.bayhaven.org
blms.bartlettschools.org
ees.bartlettschools.org
upperallen.mbgsd.org
www.avoyellespsb.com
admin.bles.bartlettschools.org
adairsvillehigh.bartow.k12.ga.us
admin.bes.bartlettschools.org
admin.bayhaven.org
www.gaparish.org
bartlettschools.org
portrichmondhs.org
admin.portrichmondhs.org
*.bartlettschools.org
ees.bartlettschools.org
bles.bartlettschools.org
admin.bayhaven.org
bartlettschools.org
admin.bayhaven.org
rembrandt-secondary.vanguardacademy.education
nutrition.bartlettschools.org
admin.bayhaven.org
admin.bayhaven.org
admin.rembrandt-elementary.vanguardacademy.education
monroe.k12.tn.us
saintpatrickhawaii.org
admin.bayhaven.org
adairsvillehigh.bartow.k12.ga.us
admin.bayhaven.org
ams.bartlettschools.org
admin.allsaintsjupiter.org
portal.bartlettschools.org
admin.bayhaven.org
admin.highschool.mbgsd.org
admin.allsaintsjupiter.org
adairsvillehigh.bartow.k12.ga.us
admin.bayhaven.org
admin.gulfstreamschool.org
parish.gaparish.org
bles.bartlettschools.org
epms.bartlettschools.org
admin.bayhaven.org
*.bartlettschools.org
bartlettschools.org
admin.blms.bartlettschools.org
ninth.frenship.us
res.bartlettschools.org
admin.bartlettschools.org
www.usd465.com
admin.bhs.bartlettschools.org
www.zionmarengo.net
bartlettschools.org
admin.broadstreet.mbgsd.org
adairsvillehigh.bartow.k12.ga.us
www.saintpatrickhawaii.org
ba.bartlettschools.org
admin.shulamith.org
bennett.frenship.us
admin.upperallen.mbgsd.org
blms.bartlettschools.org
admin.allsaintsjupiter.org
admin.bayhaven.org
radius.bartlettschools.org
aes.bartlettschools.org
admin.bayhaven.org
nutrition.bartlettschools.org
dc.bartlettschools.org
admin.blms.bartlettschools.org
oes.bartlettschools.org
*.bartlettschools.org
www.mydehesa.org
admin.allsaintsjupiter.org
stmmsa.org
admin.vanguardacademy.education
bartlettschools.org
bhs.bartlettschools.org
bartlettschools.org
athlosaustin.org
epms.bartlettschools.org

Certificate

The complete raw certificate details for oes.bartlettschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpYbVKyE7uQA4j13yCrY
IdV31z4nhAZo8BmNgbehozapjd8av1C2MN7xE2PXrgpBHvz+p9Fura3YX+nXLyAM
mIPFVNIc2eTctI8cA4pS23/UnL792WIQl86EKOdys0awU0maTJrD4jXnr8JvLq+q
1Olgyjp0pmlqZeKDqqWsbqFBGkN0/deKqtrJGv/wczFYO5tb7SFo6YyptQm8JcK2
hibR2+v0SfpfTRqVj2nlalh11BrEJlriZXYJvbb2UFUOWablrFBlSAos3NHgbO/Q
FdF/HuDjljrPFpn/VAZNjQ9HCcNx+lBRVVpNQj0jq3GSX4jOpMppUztg2gDSUPNi
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 250409718940671415401757051677665433813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 18:22:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 18:22:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oes.bartlettschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21534532246744441849226065142847564478657076847851251320529267059367467737493710949907498345590490731064463596184381700187737532244143299760076141918924817594643782180972071658020665631863839318865023004200614917727921189406716828029794924728830493821077805530700813264440918016712186928305665378900956839486651385482310292859348255149142079656988351336780536069446007934227914432356485482932874187421414184441107273063315147335855761499166176841823466095773928636017199052718050209643341333599293983790466670461050336853848487926583380408735362323630587667411778714243840033295770305472077057916994561544327280157249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eddeb3ffac615e359ffe90f6afb84d9c2b018d50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zXKHcnxUvSg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.bartlettschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5d5046ca0000040300463044022001fca4f21ec7f72ae68058f8d30909c4362088f01e0f4a111e84a69d46792a070220064b64ca937c19746d9d59d24f984053fe52df2399cb8685df1658cdaee53188007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e5d5047dd0000040300483046022100bb97d3f1b4b6de89a7ecd2b523624da5025ebddbcde6edde352944477330e06e0221009c668c404760693d876036f6f5dc3046fa7353528166a6fe985d3ea1b38c5a71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00afcd0a8d3821b184dbdef4b9b947e62bc1e5ff5c62bbf98dd145b90c4217361855dd4a753c5e457d552d8a13c6f571b3da54527b0d99e93f265de821482366e16b516936becce16db608da32450369277459e962cfe3fd807a0b5dabe3711c8746f035c79caf98c890b85a9ad0899aa90921d6a08cc33f6251050b45ba4fb53ce3a578dfa029a1245cde24f7ca9c231c83009cac4be2f3012f5a26258e66b9d6719ec95db068404dab903de64e6f99bfac36b36150dc82a5e5a738ce0045e2cf1c068f91ab1ea3187acb15949b223f02e059b3d3ff2ea82fb47b1b738754869e6ce9017fcfb2fca4e0e3975f539243e72d8bf390e922e82279db54c28a908214