ki.cypsd.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number fe:71:af:91:ba:b1:32:9a:13:b5:64:c3:7a:41:7c:db was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ki.cypsd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fe:71:af:91:ba:b1:32:9a:13:b5:64:c3:7a:41:7c:db
Serial Number (int): 338214201441925701507628936257758919899
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 09:4f:a7:7f:ee:07:d4:a3:3a:bb:bb:42:2e:9f:de:94:b3:98:45:c5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 8e:f4:40:15:ca:35:2d:dc:2e:05:f0:7f:42:ba:26:42:46:da:f1:21
Fingerprint (sha256): c2:dd:44:44:ae:4b:a4:46:3f:4e:ee:e1:6c:c8:e9:7e:47:a8:82:90:4a:98:f9:66:ca:20:a9:7e:74:65:10:67

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/YqSjJnHHH94
CRL Distribution Point: http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl

Check the revocation status for certificate ki.cypsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ki.cypsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ki.cypsd.org

Other certificates including the domain name cypsd.org

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.beethoven-elementary.vanguardacademy.education
www.holynamesf.com
10.bellevilleschools.org
www.leavittms.net
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.eagleridgeacademy.net
la.cypsd.org
activities.madrid.k12.ia.us
10.bellevilleschools.org
admin.ajshs.asd.k12.pa.us
abs.lockhartisd.org
admin.cornellsd.org
anacondaschools.org
www.btaallday.org
admin.ajshs.asd.k12.pa.us
admin.union.kyschools.us
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
activities.madrid.k12.ia.us
admin.ajshs.asd.k12.pa.us
activities.madrid.k12.ia.us
admin.kpe.mpsdnow.org
gulfelementary.org
admin.eue.mpsdnow.org
owensintermediate.bcsd.com
www.olsorrows.com
www.cornell.k12.pa.us
admin.ajshs.asd.k12.pa.us
10.bellevilleschools.org
admin.ajshs.asd.k12.pa.us
activities.madrid.k12.ia.us
admin.ajshs.asd.k12.pa.us
givetokids.csisd.org
admin.ajshs.asd.k12.pa.us
admin.kes.pullmanschools.org
admin.el.madrid.k12.ia.us
activities.madrid.k12.ia.us
10.bellevilleschools.org
la.cypsd.org
admin.ajshs.asd.k12.pa.us
www.mpsdnow.org
admin.ar.cypsd.org
www.campacharter.org
bellevilleschools.org
www.hancockhs.org
admin.ajshs.asd.k12.pa.us
admin.olaclaremont.org
activities.madrid.k12.ia.us
admin.btaallday.org
admin.ajshs.asd.k12.pa.us
activities.madrid.k12.ia.us
admin.fdes.mobridge-pollock.k12.sd.us
admin.ajshs.asd.k12.pa.us
www.ms-ap.org
www.grandville.k12.mi.us
lincolnparkpublicschools.com
admin.mphs.mpsdnow.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
mms.mpsdnow.org
activities.madrid.k12.ia.us
cte.mpsdnow.org
admin.mms.mpsdnow.org
admin.dimensions.org
cses.comalisd.org
3.bellevilleschools.org
bayheadschool.org
activities.madrid.k12.ia.us
admin.hillcity.k12.sd.us
activities.madrid.k12.ia.us
admin.ajshs.asd.k12.pa.us
calaps.org
ms.mobridge-pollock.k12.sd.us
ki.cypsd.org
activities.madrid.k12.ia.us
hles.comalisd.org
admin.cypsd.org
admin.leavittms.net
mentalhealth.lexnyc.org
mphs.mpsdnow.org
dms.dover.k12.nh.us
activities.madrid.k12.ia.us
admin.ajshs.asd.k12.pa.us
www.btaallday.org
admin.stmarysspokane.com
activities.madrid.k12.ia.us
mpsdnow.org
10.bellevilleschools.org
activities.madrid.k12.ia.us
www.pullmanschools.org
www.colegiocipres.edu.mx
admin.washington.bcsd.com
admin.goldenvalley.kernhigh.org
admin.ajshs.asd.k12.pa.us

Certificate

The complete raw certificate details for ki.cypsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppbU6M1giMqiVw4ghoWM
vcWdhUqa0P/WJUlzZMv+Jye9K26uoMt7jAFXgOorUxzfl1qYnykFZF+Rzhy9wtmC
OJbfzXe7gWGQhZAVKDRouINCnMafFiqoCtfKK5nTWNx5cG8AxXGkLohWTO3pGP1i
EI7EOkGGVdUYzaluaVlE5UXapYai7xkliE2kEu0b/FJSGjfHYlOWyusFvUW8m5BN
eTVmZ0dg2rmSh7XQXN8bz9sDru9K3GKtDzNTwmmJMhwcgVNYiPennDBMzVi3F/0Y
QmlJBl52Fu7zCc44swEOGK+V47fRRqJxXsIxgj7BR+ig6e+nT/txCD9tUOJD6HBI
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338214201441925701507628936257758919899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-31 03:07:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 03:07:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ki.cypsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21029936496533999801471209651838370895504953244365015506721201749046332730929858368101502067687920169116295916088330848533262832746443178824966314914184985580052350930001233317947901175175879332621579917444271311978211385036191612864547554208150198783941418315426777008491290034174603168128735924236519044212774893998638929994979815914359308092712832243775319353985004541777722796230561006107061636672239508140623786702190504095603771433599423631777924606569348544129553253419684302734766627518406097304904180882910058116323071799521701556540126809026266606391234852002642819195253106228920491017562179864709599086621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							094fa77fee07d4a33abbbb422e9fde94b39845c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/YqSjJnHHH94'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ki.cypsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018735d98fb90000040300473045022100ce01aebc60ba58a065cc3636e2b032c5484ac4098775677b9e5e949f35de465902204b78d8a3c032a66b81e94e02205aaf0b15c839537134223194c2b21ecf45145f0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018735d98fbc000004030046304402200f7204881efd07483b52adbb5a08e9757acc03d736e7ec8222c44d9d7e97b33e02206840157b4cb9bdf6734a968b0a652f95da58cc9ab053f9bfedc26abd4ad1a76e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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