admin.aquinashs.net

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 94:b0:0e:3e:65:44:63:56:0e:dc:63:75:e4:03:52:6f was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=admin.aquinashs.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 94:b0:0e:3e:65:44:63:56:0e:dc:63:75:e4:03:52:6f
Serial Number (int): 197639876520490867909621959665052242543
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:21:f1:81:47:fb:6d:d2:03:81:c3:1c:80:ef:2a:95:10:5e:8e:88
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 0d:74:e8:35:9e:82:95:a1:b1:c2:67:01:15:98:ec:41:d3:5c:75:bb
Fingerprint (sha256): ce:6d:8e:b9:c2:47:83:e1:8b:f4:40:83:82:df:ee:01:bb:b5:cc:13:2c:c2:99:3e:80:2c:7d:79:1c:a2:07:aa

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/mXWniF3_B9o
CRL Distribution Point: http://crls.pki.goog/gts1p5/OaOP8Hm-Oq8.crl

Check the revocation status for certificate admin.aquinashs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.aquinashs.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aquinashs.net

Other certificates including the domain name aquinashs.net

(limited to 100 certificates)
mail.sbdiocese.org
scalefundercert.net
admin.amschool.edu.sv
admin.amschool.edu.sv
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
admin.ces.coloma.org
scalefundercert.net
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
athletics.aquinashs.net
mail.sbdiocese.org
mail.sbdiocese.org
admin.arete.prsd.us
www.aquinashs.net
admin.amschool.edu.sv
admin.artsinactioncharter.org
scalefundercert.net
scalefundercert.net
scalefundercert.net
mis.edu.mx
admin.stggcs.org
admin.pride.lindenusd.com
www.bhswca.com
www.clanyc.org
admin.amschool.edu.sv
athletics.aquinashs.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
lvmhs.lucernevalleyunified.org
scalefundercert.net
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
mail.sbdiocese.org
mail.sbdiocese.org
acsaregionxv.org
admin.aquinashs.net
admin.bitely.garvey.k12.ca.us
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
www.carbonvalleyacademy.org
scalefundercert.net
scalefundercert.net
peterson.mx
es.notredameacademy.org
vs.aceroschools.org
scalefundercert.net
mail.sbdiocese.org
aceroschools.org
admin.artsinactioncharter.org
scalefundercert.net
www.somonauk.net
mail.sbdiocese.org
mail.sbdiocese.org
mail.sbdiocese.org
sfunder6cert.net
www.st.louisschool.org
scalefundercert.net
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
scalefundercert.net
mail.sbdiocese.org
admin.sfxcatholicschool.org
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
workstudyicacristorey.org
scalefundercert.net
en-merida.mis.edu.mx
scalefundercert.net
admin.cfn.edu.mx
pac.aquinashs.net
mail.sbdiocese.org
admin.eagles.lucernevalleyunified.org
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
scalefundercert.net
admin.socialjusticemclc.org
claytonvalley.org
admin.aquinashs.net
scalefundercert.net
mail.sbdiocese.org
spencemanagementgroup.com

Certificate

The complete raw certificate details for admin.aquinashs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27ePlEv6NmjwZ38G0aZV
eiQELJL3/toU/StZlKbwR5gYWleW3QvDkkLzK9svsGd2vbibmMPJRLpvABOYpxSV
nA4i8FhfNYLxKLEFwINy1R5r/+Ncnb96R+TGQeOaFuA914i1zfznLxxyc7wk5X16
QFTQ+QxuJNXvfptpy9HP25IeTp8zq6y6nJStow3Yr8FoH5KqHqu6GMx2XsFKa31E
Si1eUaXLlyuIzFB40gucCDA8EMf51BSDNbZmIQutv/R/CmI2/jWnhwN03c14s738
e1RyCR07+DlpK9U0n1CwTGXMTAXvhz/smS9Ikt3qRl1asf+iyiz+JkNKvwQ1Gnxu
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197639876520490867909621959665052242543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 04:26:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 04:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.aquinashs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27736706019569570985651717259411767067131513273744360267284440107624083392050915849121105466137057319878918284899226803322736980336148667465990427272743072448205221420812528738075628194739523617075251773571649365888820793299559596897591422141628458821821567423380968218589835283200490623128608922216333811469074801223321317636004569166829139070411562057338114670871465022481000747442890146886127050916571767456042903780455007684102090734879626554296697771777135108519017503294262902023379025910469843391493583775109289118176297131355344646669882015553401255671858388456968738184160735928562230960200813548193451896559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb21f18147fb6dd20381c31c80ef2a95105e8e88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/mXWniF3_B9o'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/OaOP8Hm-Oq8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1eb0f5340000040300463044022063fd35837ba7a4fac18098bd2c3b0355acaee7f23408cc262f76fd7e1bf8f83002200d50a8075e7f1ea7d7d9305ac5daaaea809986e612df420583c2a02bcb97bd090076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c1eb0f34f000004030047304502202ada5f30295c277eb2f99e78cf7729842ad2ced1b2aa87c56ba50c4e49446e58022100d108f99e6dcc3b37912fffdbadfcb5539057b2b0853c2ae6002dce9a945a7e07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00449d73a45d7506ff3abb5eaba24faeed6dfbc46fd301dafa8216b7c635cad1694847e281197b2e7ef789067b2248844b1e630935727d6b6c699122767aacc072d13f047e870b48d7e10e64993cc3d68e9ded09a70920796cc97e1882daa7fc4be8ba9b503fa2820f349352bbb2a0026bb918e2c9226dbf3184aa002448bc2f1e21375672a3559d95bff1908fae325e2df807884c7fee77255cc103996529cd1ae319d424c559f6ef4e788a9df3ed3f1d6cb711f56721f0299dfed15e8b907221d14985980e931454c553a0df8289c3f12456586a02c0cc96a8d8902a8b483673af1aa4002e2f96937c93f110b3ef5e0c5a1fc705a79c6db716803deaa7b86c52