nelsondiocese.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ba:34:d1:eb:a0:73:68:62:11:3c:df:31:a1:bb:4b:6e was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nelsondiocese.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ba:34:d1:eb:a0:73:68:62:11:3c:df:31:a1:bb:4b:6e
Serial Number (int): 247510664344520638423837782498812316526
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3c:58:e2:5c:72:35:4b:8b:bf:25:ae:8a:33:9c:5a:1b:14:82:7b:f1
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 14:d4:8e:0a:a0:0b:94:6c:21:5e:a4:84:04:a0:86:32:49:85:35:a7
Fingerprint (sha256): cd:fb:e8:a9:b5:0d:70:96:d8:73:27:d1:bc:62:f4:72:2d:1e:66:20:81:2b:3f:6c:b7:c6:30:2b:a5:a2:1d:32

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/hr7mmkW2TE8
CRL Distribution Point: http://crls.pki.goog/gts1p5/bwQpHEpM95g.crl

Check the revocation status for certificate nelsondiocese.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nelsondiocese.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nelsondiocese.org

Other certificates including the domain name nelsondiocese.org

(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
remote.nelsondiocese.org
admin.colegiogreenhills.com
www.ranchitoelementary.org
okf.sd53.bc.ca
nelsondiocese.org
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
stmary.htcsd.ca
nelsondiocese.org
sess.sd53.bc.ca
quickbooks.nelsondiocese.org
nelsondiocese.org
www.wexford.edu.mx
admin.wearedace.org
www.sd53.bc.ca
soss.sd53.bc.ca
nelsondiocese.org
adss.sd70.bc.ca
remote.nelsondiocese.org
htcsd.ca
www.wearedace.org
robinsonelementary.org
www.nelsondiocese.org
nelsondiocese.org
www.nelsondiocese.org
www.nelsondiocese.org
remote.nelsondiocese.org
quickbooks.nelsondiocese.org
nelsondiocese.org
ined.sd70.bc.ca
awnes.sd70.bc.ca
quickbooks.nelsondiocese.org
www.gpcsd.ca
remote.nelsondiocese.org
www.nelsondiocese.org
fatimaschoolwilton.com
*.nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
nelsondiocese.org
www.theratnerschool.org
ined.comoxvalleyschools.ca
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
www.comoxvalleyschools.ca
remote.nelsondiocese.org
remote.nelsondiocese.org
jcsk8.org
admin.jcsk8.org
nelsondiocese.org

Certificate

The complete raw certificate details for nelsondiocese.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOiC0R9ntjYQ6GLUGQVb
Iv433nWIPVJT49oYt2UBFNx5FrQ2Y9ew32ZkGf5LWamag73t5Wnf7hYWpgrAGV+i
hCrUFz2Zf1IdJH6SMVAjcTIn+uP09Xg432lsbL41fvyg1qBpI2WNLsHz375SFBBp
kPDTpdkVDohR68TLNFpHNeqBF3ySZHPxc7rtFxj9vcpjPj4gNDRzM9qclzm5hQbP
FTQu+gOyayLQjj1XMlquNY/lImIjVvMZHCy634FgdLzB+7YaNTsSOKqITMqWxc9t
1PSneDpuyV2l6U1wFONXWOekcrMdcxVNI6BIyOb40RPyXTixlpj3eVDoO3IDj5qL
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247510664344520638423837782498812316526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 00:26:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 00:26:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nelsondiocese.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19807831023777789519201408692307149889675735277739022998420842835399594098455453627018696488770325967337764563613120918062630659429786061240140059647595425678658488870434180831800605961866300582934511662275396115337288759921268280248767293322869904309891063616968824315335069848170228222666919045556952399057714057756391023404970602389578583449327830733156902046776722460808711295044796689835232431634932025850750888826048364120457794793949960865535827819566788639875599386075104995705753751552843903503946612746829019267329973494021215207064551044368981243915900538415806247835990153553581409273109906787322163792651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c58e25c72354b8bbf25ae8a339c5a1b14827bf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/hr7mmkW2TE8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/bwQpHEpM95g.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b0ce498c40000040300473045022100f3dc36bfd0b9c96b2cfa29864079cb8eb37e04d8c6d330a92a147445070af949022074da532162253e7c7e935050ece2741bddcd94866be7cca1601b95b9757de64e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b0ce498d0000004030046304402201a9814ae7a9659f81ec025a1e7d3fa19ecf79b584998d5032438b1f77459e81102204ac8278fc6aba0bc6a125d2ec30fd8d26558bf0056976a5c1c992041223f582c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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