aak8.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 69:7b:e3:db:5d:38:ea:99:13:76:1e:05:5f:22:ce:9f was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aak8.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 69:7b:e3:db:5d:38:ea:99:13:76:1e:05:5f:22:ce:9fSerial Number (int): 140212213557814483623079848132219162271
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 56:2d:2c:ca:7b:2b:6d:17:aa:84:82:57:8a:e5:48:ba:b3:51:5a:60
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 43:4b:84:5a:f8:ce:79:ed:89:34:95:7a:cc:6c:d4:78:75:34:1d:f0
Fingerprint (sha256): c7:eb:54:3f:f8:58:d4:3f:82:1a:70:ab:12:0d:fc:50:e9:fc:ef:03:1d:d3:c0:7b:2b:5f:e1:fd:a0:3f:3a:bf
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/Bb3YxFE-HL8CRL Distribution Point: http://crls.pki.goog/gts1p5/sde2x9K3zZo.crl
Check the revocation status for certificate aak8.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aak8.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aak8.org
Other certificates including the domain name aak8.org
(limited to 100 certificates)
prep.warrentonschools.com
zonedirector.aak8.org
remote.aak8.org
elementary.plsd.k12.pa.us
sre.dcs.edu
cp.aak8.org
aak8.org
admin.grupocedva.com
remote.aak8.org
aak8.org
aak8.org
admin.ramaroadelementaryschool.wearecms.com
aak8.org
aak8.org
aak8.org
www.aak8.org
memphiseast.com
admin.memphiseast.com
aak8.org
aak8.org
aak8.org
www.grupocedva.com
watchguard.aak8.org
grupocedva.com
aak8.org
zonedirectormb.aak8.org
aak8.org
zonedirectorcp.aak8.org
wje.dcs.edu
adfs1.aak8.org
aak8.org
admin.bes.roaneschools.com
aak8.org
adfs1.aak8.org
admin.oshs.roaneschools.com
aak8.org
adfs1.aak8.org
aak8.org
aak8.org
admin.clearcreekelementaryschool.wearecms.com
admin.carmelmiddleschool.wearecms.com
sphs.spusd.net
aak8.org
aak8.org
www.arroyo.spusd.net
watchguard.aak8.org
www.memphiseast.com
aak8.org
zonedirector.aak8.org
remote.aak8.org
elementary.plsd.k12.pa.us
sre.dcs.edu
cp.aak8.org
aak8.org
admin.grupocedva.com
remote.aak8.org
aak8.org
aak8.org
admin.ramaroadelementaryschool.wearecms.com
aak8.org
aak8.org
aak8.org
www.aak8.org
memphiseast.com
admin.memphiseast.com
aak8.org
aak8.org
aak8.org
www.grupocedva.com
watchguard.aak8.org
grupocedva.com
aak8.org
zonedirectormb.aak8.org
aak8.org
zonedirectorcp.aak8.org
wje.dcs.edu
adfs1.aak8.org
aak8.org
admin.bes.roaneschools.com
aak8.org
adfs1.aak8.org
admin.oshs.roaneschools.com
aak8.org
adfs1.aak8.org
aak8.org
aak8.org
admin.clearcreekelementaryschool.wearecms.com
admin.carmelmiddleschool.wearecms.com
sphs.spusd.net
aak8.org
aak8.org
www.arroyo.spusd.net
watchguard.aak8.org
www.memphiseast.com
aak8.org
Certificate
The complete raw certificate details for aak8.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIQaXvj21046pkTdh4FXyLOnzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAzMjAxMDM0NThaFw0yNDA2MTgx MDM0NTdaMBMxETAPBgNVBAMTCGFhazgub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqw9fDlfBNY/Vg1EWS985/CPGoaCmU/38D8FKN3iqs8x5D8Tp +oZ87l9llvyMsZfD+pc2TYLNubtoUBZLv1o16ELXCMSagnqinyuyL5A3fUaIOLsX A68GlNgnMijFID0zOXDtkAQZ4/+ehedV8DnacwtW5IK9gFWQ/ZaCvtjIuuvTB2HG QBtpXiV1omfFX6cZHtUN/9eiQ94ADPoF1Hs58GsLI0Bg+s/jGWyP9R2D8M3iC/Tj v2T29PEacwPfRnl6CkO4u5HoDRMBjGjf2/+kFpMX9cttmhch4vy190DgECEKxzL2 xP8ilgz9UdN3sOpktBjrzq6FylBOFtUMos92VwIDAQABo4ICcDCCAmwwDgYDVR0P AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFFYtLMp7K20XqoSCV4rlSLqzUVpgMB8GA1UdIwQYMBaAFNX8ng3fHsrd CJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0cDov L29jc3AucGtpLmdvb2cvcy9ndHMxcDUvQmIzWXhGRS1ITDgwMQYIKwYBBQUHMAKG JWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwEwYDVR0RBAww CoIIYWFrOC5vcmcwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8 BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvc2Rl Mng5SzN6Wm8uY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOW6SfPQAABAMASDBGAiEA/tHNIJqc qr41oDZ53l81YpiNEGy/vDB1OKn2Iao1BmkCIQDjKBBQ918Lg+P8eTMjKjrlHC17 I/WyjAgvxRJmxn+4zQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABjlukn18AAAQDAEcwRQIgZ8ikiOFHDY16LhDnmDqcAh5IHhWl+q9xb31SIUTh tZgCIQD6QcwgucKpbJbu4SgiJA7tHjgDFz/H3nLZQc1AHc6DmDANBgkqhkiG9w0B AQsFAAOCAQEAJD624RZaZHDOt8El0MVjTWNJ1sj0IsU+L6NGNcMi8aTE+GtG0YJP UNSQlGmuYHICnn+m4GpoNs69S7eoqmO7s3OPcyEuVr/HNrKm779BbskHtrnlx9zL s6Ix+z72BhqvWPFEs5x99aDfSk5o9wPUlIY6gaYWiKqgReYQcsU4FqPHlKFR+sYa 3ErC99z56kNYjND4kFbbwr6K+l6L27yI5qM5OyBalbrmIGL/eHca58mZB+9P1SKg N9NtCTymd54HaRE5yKsWG6h2XDld+0E0L3XT5o1diQYjjZrSdaKL7u2J1LM1Pszl JnW+QTwfaTkbo1zf0AtoRC6qQco5kA55qA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw9fDlfBNY/Vg1EWS985 /CPGoaCmU/38D8FKN3iqs8x5D8Tp+oZ87l9llvyMsZfD+pc2TYLNubtoUBZLv1o1 6ELXCMSagnqinyuyL5A3fUaIOLsXA68GlNgnMijFID0zOXDtkAQZ4/+ehedV8Dna cwtW5IK9gFWQ/ZaCvtjIuuvTB2HGQBtpXiV1omfFX6cZHtUN/9eiQ94ADPoF1Hs5 8GsLI0Bg+s/jGWyP9R2D8M3iC/Tjv2T29PEacwPfRnl6CkO4u5HoDRMBjGjf2/+k FpMX9cttmhch4vy190DgECEKxzL2xP8ilgz9UdN3sOpktBjrzq6FylBOFtUMos92 VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 140212213557814483623079848132219162271 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 10:34:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 10:34:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aak8.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21594330025946752618100085830024563075630315152215178540451154258411231976021407382973378691578295444371558974565822919875428819476190983311700478169041425120283822679242791997067938024588131841706645795122089910352413876749011552218889886993179310196328918229841347446202781338238960166211531264856112508161798782009439995087003672901103042253530815710545446231740099374508808351954168945091764990360016865761274908946412409298752660376884414493942406843991547117388064820825080080311385289371100738986464238508853198171805217671324434819662434722108539796256175975469902257049133642595106008855490798584468717139543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 562d2cca7b2b6d17aa8482578ae548bab3515a60 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Bb3YxFE-HL8' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak8.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/sde2x9K3zZo.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5ba49f3d0000040300483046022100fed1cd209a9caabe35a03679de5f3562988d106cbfbc307538a9f621aa350669022100e3281050f75f0b83e3fc7933232a3ae51c2d7b23f5b28c082fc51266c67fb8cd00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5ba49f5f0000040300473045022067c8a488e1470d8d7a2e10e7983a9c021e481e15a5faaf716f7d522144e1b598022100fa41cc20b9c2a96c96eee12822240eed1e3803173fc7de72d941cd401dce8398 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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