msdathletics.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number ce:a2:62:98:c4:87:65:04:13:3f:e9:4a:67:f6:70:b9 was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=msdathletics.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): ce:a2:62:98:c4:87:65:04:13:3f:e9:4a:67:f6:70:b9Serial Number (int): 274664119002419915870707494126072787129
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: cd:3a:5f:1e:d1:24:4e:06:0f:24:a9:cb:4b:ff:a0:0f:82:08:68:0b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): af:d3:d4:7b:51:a7:80:df:39:c9:31:ca:23:51:bb:f6:d2:d2:0a:c6
Fingerprint (sha256): c8:27:34:80:89:94:81:49:b5:29:97:7c:7c:c1:d3:03:a7:ea:ab:2f:4c:aa:c6:d1:e9:bf:bf:b2:2a:dc:6b:cc
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/TIjz1lbxsSkCRL Distribution Point: http://crls.pki.goog/gts1p5/Jpm9AsZrdX4.crl
Check the revocation status for certificate msdathletics.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for msdathletics.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
msdathletics.com
Other certificates including the domain name msdathletics.com
(limited to 100 certificates)
admin.rowlettacademies.org
admin.icefps.org
www.alarqamislamicschool.org
msdathletics.com
www.cuesd.com
vpms.icefps.org
www.msdathletics.com
www.collegeachievecentral.org
msdathletics.com
admin.ah.cuesd.com
admin.msdathletics.com
glendora.k12.ca.us
www.ehscougars.com
admin.ml.cuesd.com
iims.icefps.org
admin.brookings.k12.or.us
admin.ams.brookings.k12.or.us
www.msdathletics.com
stchrisschoolnh.org
admin.ah.cuesd.com
www.jchigh.org
admin.kellyhighschool.org
admin.ah.cuesd.com
www.nestleavecharter.com
msdathletics.com
admin.bischool.net
www.glendora.k12.ca.us
bufordhs.org
mountalverniaacademy.org
panoramacityelementary.org
www.sennhs.org
nestleavecharter.com
admin.ams.cuesd.com
msdathletics.com
admin.ah.cuesd.com
www.bischool.net
iies.icefps.org
admin.castaichighschool.org
ml.cuesd.com
www.jcoms.org
www.kellyhighschool.org
admin.icefps.org
www.alarqamislamicschool.org
msdathletics.com
www.cuesd.com
vpms.icefps.org
www.msdathletics.com
www.collegeachievecentral.org
msdathletics.com
admin.ah.cuesd.com
admin.msdathletics.com
glendora.k12.ca.us
www.ehscougars.com
admin.ml.cuesd.com
iims.icefps.org
admin.brookings.k12.or.us
admin.ams.brookings.k12.or.us
www.msdathletics.com
stchrisschoolnh.org
admin.ah.cuesd.com
www.jchigh.org
admin.kellyhighschool.org
admin.ah.cuesd.com
www.nestleavecharter.com
msdathletics.com
admin.bischool.net
www.glendora.k12.ca.us
bufordhs.org
mountalverniaacademy.org
panoramacityelementary.org
www.sennhs.org
nestleavecharter.com
admin.ams.cuesd.com
msdathletics.com
admin.ah.cuesd.com
www.bischool.net
iies.icefps.org
admin.castaichighschool.org
ml.cuesd.com
www.jcoms.org
www.kellyhighschool.org
Certificate
The complete raw certificate details for msdathletics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIRAM6iYpjEh2UEEz/pSmf2cLkwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNTMwMjE0NTQxWhcNMjQwODI4 MjE0NTQwWjAbMRkwFwYDVQQDExBtc2RhdGhsZXRpY3MuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GPXG0c7K+Pv/NrvNoZdXtqf3k/xnNgGPs/M DSJ8JrjTfIVuKeKcdkvhvMsmfTJ+XXgoS3cSk6/Fafk7xygVAHyYiXGK8rJXdL5G bz+ovvJeGaEuS1TZVLAti11sijqpSG/eaLeqwCSEeA3R2cwkTaofxn4BcVKCtqzR sZVEI5+rImezhNv+qTbI8tfEfC/EKT6gHhqUmKH+SjmGXJiXTaUU0eqEeXU0rrC9 dSCqL4zgyRtYorowceG91SwsObCo6s/2ZYI3GbGw/MKz+mt2qjylI9YldOxttV0n 0g/K0Yacj/tcGbyvz2zjCp2OPp+SccQC+bc5JGLqqYzdEPU4HwIDAQABo4ICeDCC AnQwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFM06Xx7RJE4GDySpy0v/oA+CCGgLMB8GA1UdIwQYMBaA FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvVElqejFsYnhzU2swMQYI KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw GwYDVR0RBBQwEoIQbXNkYXRobGV0aWNzLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAEC ATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBr aS5nb29nL2d0czFwNS9KcG05QXNacmRYNC5jcmwwggEFBgorBgEEAdZ5AgQCBIH2 BIHzAPEAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY/LrjCJ AAAEAwBIMEYCIQDDn2d0GQTPlpLBSCOl0QzBr87u1G0dyp1HVLDTOsRZFQIhALAV eP3tQiV4bhwR7wC5+72wGYaipcjo8J8C5y6Pih+eAHYA2ra/az+1tiKfm8K7XGvo cJFxbLtRhIU0vaQ9MEjX+6sAAAGPy64whwAABAMARzBFAiAUSMDYy+J+zf+wQZyL h5qtK8oi7nR6FovEylMEJE82GgIhAIFnVSGLZZME1fXePKOBnpfP4bEyWn3sxT2G l2oTULpoMA0GCSqGSIb3DQEBCwUAA4IBAQAj5fpAtpbA0DgYEjQ+Zkl9qfUU9ZEM 2MMrTDVkQu3iV+TFOaL1k13oSUxaTPBWcYS2l0YNGSgVkRKaDRBtWu2DV4nsfMCC aSvTzN1pX1VKpzSgGQCJhlvfqUb5TU3S0sTF3nmyHYCge28/WsBBqyi+HB0CU0N6 4AXCanH5uXNjLmvOknnhxgk9H8hFoodk5RsrMWzGoPhCZ2c1iyX7+ZEcmaKpVRRt CdB9l4MPVxfgJhtRp0NyfUr9GlkJFBGX9dxyOHpSsIz+yZfEYQjGosPYn84FmORy 848k71DdKXN4CfpkerOUtNpODSY610be2EhvNshWHJ4LV+dmY5dWHV2R -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GPXG0c7K+Pv/NrvNoZd Xtqf3k/xnNgGPs/MDSJ8JrjTfIVuKeKcdkvhvMsmfTJ+XXgoS3cSk6/Fafk7xygV AHyYiXGK8rJXdL5Gbz+ovvJeGaEuS1TZVLAti11sijqpSG/eaLeqwCSEeA3R2cwk Taofxn4BcVKCtqzRsZVEI5+rImezhNv+qTbI8tfEfC/EKT6gHhqUmKH+SjmGXJiX TaUU0eqEeXU0rrC9dSCqL4zgyRtYorowceG91SwsObCo6s/2ZYI3GbGw/MKz+mt2 qjylI9YldOxttV0n0g/K0Yacj/tcGbyvz2zjCp2OPp+SccQC+bc5JGLqqYzdEPU4 HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274664119002419915870707494126072787129 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 21:45:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 21:45:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msdathletics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28326613379536295337423294846840607979519917918650285263511283597612992749311203781559299403822163727066053711707437624658158995073731316085243741278373865055933146544181384964701714158184290857414074541299196116991824694982966417930362795672816352555437032639677546861580114255274145441678419005175293866303545041586233639324073725641187829105495670097191058171586008866065343156553305951878493869116464364907145830656660055347386657456407917850614693645700139373003829513192951670477422669812537170396320919120066512636942155195384043083507356358448227542218206927643553337872544164837763743620187785779082836654111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cd3a5f1ed1244e060f24a9cb4bffa00f8208680b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/TIjz1lbxsSk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdathletics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Jpm9AsZrdX4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fcbae30890000040300483046022100c39f67741904cf9692c14823a5d10cc1afceeed46d1dca9d4754b0d33ac45915022100b01578fded4225786e1c11ef00b9fbbdb01986a2a5c8e8f09f02e72e8f8a1f9e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018fcbae3087000004030047304502201448c0d8cbe27ecdffb0419c8b879aad2bca22ee747a168bc4ca5304244f361a022100816755218b659304d5f5de3ca3819e97cfe1b1325a7decc53d86976a1350ba68 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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