kiskiarea.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 98:fe:f6:79:9d:71:92:a8:0d:c6:6b:e7:a2:c7:95:74 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kiskiarea.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:fe:f6:79:9d:71:92:a8:0d:c6:6b:e7:a2:c7:95:74
Serial Number (int): 203366497869471669161054290721301304692
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 72:e2:54:9c:ce:c5:46:71:52:b9:8d:39:5e:17:00:11:f9:4a:60:3b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 57:71:00:e8:3d:ba:e4:c0:ba:55:ad:25:28:a7:e6:9b:10:8f:02:7b
Fingerprint (sha256): e5:d9:be:65:08:3e:25:65:a4:e1:64:d9:30:9c:30:3c:59:5a:88:6a:3f:86:91:ef:29:86:57:98:27:54:88:f7

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/ZMtDKkSSJb0
CRL Distribution Point: http://crls.pki.goog/gts1p5/Zn3bDrcK0Gs.crl

Check the revocation status for certificate kiskiarea.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiskiarea.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiskiarea.org

Other certificates including the domain name kiskiarea.org

(limited to 100 certificates)
hs.unitedsd.net
admin.wjh.wintersisd.org
admin.alamo.otsegops.org
admin.wcms.mpusd.net
admin.alamo.otsegops.org
admin.jsms.rsu14.org
res.rsu14.org
academy.ndasla.org
highschool.kiskiarea.org
admin.banninghs.org
aac.woccisd.net
admin.wjh.wintersisd.org
eastprimary.kiskiarea.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
6gc.owassops.org
admin.alvahscott.org
admin.banninghs.org
admin.banninghs.org
admin.e3civichigh.com
admin.banninghs.org
admin.stonecanyon.owassops.org
admin.e3civichigh.com
admin.alvahscott.org
admin.alamo.otsegops.org
admin.alvahscott.org
7gc.owassops.org
admin.lng.otsegops.org
admin.whs.rsu14.org
admin.e3civichigh.com
aac.woccisd.net
admin.alvahscott.org
www.rsu14.org
admin.banninghs.org
www.otsegops.org
admin.e3civichigh.com
admin.alamo.otsegops.org
www.lasallesancristobal.edu.mx
admin.alvahscott.org
admin.alvahscott.org
ohs.otsegops.org
www.ascisd.net
admin.7gc.owassops.org
admin.e3civichigh.com
admin.athletics.rsu14.org
aac.woccisd.net
admin.echs.woccisd.net
admin.alvahscott.org
etc.needlesusd.org
admin.alamo.otsegops.org
northprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
admin.banninghs.org
admin.e3civichigh.com
admin.banninghs.org
laicharter.org
bchs.ppsb.org
admin.banninghs.org
es.unitedsd.net
admin.stfinnbarr.org
jsms.rsu14.org
stonecanyon.owassops.org
revbrownschool.org
admin.alamo.otsegops.org
admin.rsu14.org
admin.res.rsu14.org
admin.mas.mpusd.net
exteraschools.org
aac.woccisd.net
admin.e3civichigh.com
admin.alamo.otsegops.org
jsms.rsu14.org
admin.elementary.ndasla.org
aac.woccisd.net
aac.woccisd.net
www.otsegops.org
intermediate.kiskiarea.org
admin.barnes.owassops.org
admin.alvahscott.org
aac.woccisd.net
kiskiarea.org
admin.alamo.otsegops.org
admin.e3civichigh.com
admin.whs.rsu14.org
lng.otsegops.org
aac.woccisd.net
admin.hs.unitedsd.net
admin.ohs.otsegops.org
highschool.kiskiarea.org
admin.alvahscott.org
es.ascisd.net
southprimary.kiskiarea.org

Certificate

The complete raw certificate details for kiskiarea.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nanwdiYV+vaNtg8RZN7
J0G6W9anymL4Nyk2RSruB4bwgwY/oam9jE+xqBXoTYGep2wqcuEqAJ4lRuUfAthC
r8U5pmAO7FPY7BvsQWBSOJg2UpRQz7jLmJI51xsK9tAg8yDtcUJhIlcLwwVH4xxZ
HLADjJyyE5g3eV4HclzNSQ+W2qFO7GjgjeN3m9vA5JJnYDQdAVW4/i0doVv/RAD9
NocvCzUelosh/1DEIcRxbFYsLAPL/Lx2Izd0wiMZd93OuYTcjEMi17jyCEMVs2VE
jiJ0ymSxtuL5B+roO3xyDfMD+SBmyhKkCwMMtNw+dkhbg/a6Fv3n27kMcNYXLGY7
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 203366497869471669161054290721301304692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 02:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 02:05:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiskiarea.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30103227691882982028964651935919425033558219795441522241723769757161917583048751628135627044815114102936537811880030501136321676148258966034462489419903322991631166579023779374241827735248779754609350432862853520729381059779752964125645116187775210424601609670785113452661966004644669004955644433081344536547732754753611721554569371896073345695668658637903890218296487104115940729125288431764272207218439129980602199505189785700779785890126436771812135887172097230990255763231928770616432122397841406596206709688475093648763563905383168864823939145178473383804776209864081091002486439555478948071613409717573984336751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72e2549ccec5467152b98d395e170011f94a603b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/ZMtDKkSSJb0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiskiarea.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Zn3bDrcK0Gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c2356ce6e0000040300463044022059f9ef87bc307bf4e6db6ed092640b854775b58cea70472d8dd9157b9f53df9b022079e26e6ed83afd16e7b1f8d899127b184691dbd39a314cd3f34760eb4c4d9a4e0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c2356ce5f0000040300473045022100a76e007ed41efc731bd11998255e429f4dc2ecb19a67598d62eac3da6a6e782802205e5a282958c74fdcdd53e1d90c795b6f0c09da55066fca197be004df5276b851
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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