ashlandcityccs.net

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number fa:c5:a9:14:44:18:f4:75:0e:2f:ed:8c:e8:3d:a7:21 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ashlandcityccs.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fa:c5:a9:14:44:18:f4:75:0e:2f:ed:8c:e8:3d:a7:21
Serial Number (int): 333333310760221745990596061224100538145
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 15:bd:e8:95:dd:44:6d:38:76:5c:ab:1b:cd:fc:fb:4a:32:ec:35:fd
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 61:f6:3e:4a:b2:85:c5:4c:f8:44:76:3c:71:1a:9c:6f:0a:8a:81:f9
Fingerprint (sha256): f5:04:9b:8a:94:8d:8f:53:4d:66:40:19:50:e4:d4:d1:3d:b1:4f:d3:65:4e:85:ab:70:44:4f:ed:8d:10:02:de

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/yzFsFcKWhQc
CRL Distribution Point: http://crls.pki.goog/gts1p5/akx-9CicCo0.crl

Check the revocation status for certificate ashlandcityccs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ashlandcityccs.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashlandcityccs.net

Other certificates including the domain name ashlandcityccs.net

(limited to 100 certificates)
ms.bsd29j.com
www.cranburyschool.org
admin.bonnerprendie.com
www.ashlandcityccs.net
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
debusk.greenek12.org
ashlandcityccs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
admin.ashlandcityccs.net
summer.materdeicatholic.org
gageparkhs.org
www.grandcenterartsacademy.org
www.sttheresaschoolpalmsprings.org
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.jh.iasd.cc
www.tjs.org
2.southampton.k12.nj.us
msdurham.org
admin.arcataschooldistrict.org
healthystartacademy.com
admin.ps17queens.com
admin.arcataschooldistrict.org
harpethhighccs.net
www.ourladyofgrace.co
sainte-school.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
ashlandcityccs.net
bronxdalehs.org
flacsms.flacsnyc.com
www.afsenyc.org
2.southampton.k12.nj.us
westcheathamccs.net
sh.iasd.cc
www.lacountycharterselpa.org
grandcenterartsacademy.org
admin.mhs.molineschools.org
www.lincolncharter.org
admin.bbel.bbrook.org
2.southampton.k12.nj.us
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
ashlandcityccs.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net

Certificate

The complete raw certificate details for ashlandcityccs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CYROjlDfpd1F2TCbSeX
XyLib6yOB6B352wxmzDKu3iWOcsPSdVhtuQZFMQMEvxNx2DcqVDmM3GlOyFXOb0e
6zieVDeJeIrhwGGt1rzAqdcp3iqr76pdkmWzRB8qCNXOOWXzwnucfXHYv32FMGxu
FUvKLb2pWrvzizWx9nFAklhoVhMQRDCdDrW6MlBh5xOH3WFjb6YgJ2okKCzQOQ1y
eknEVmwOLctVmEfvKREOogXT+etj8ArBmDR2GyKYzLBTWdvpfw6/EUl6RpiOggUk
rV9TVP1PmWJUujqQx1hUn1pfdppXJmP4OQThFn2Ei18GDIeSjtYRpHH6rTNFOZF4
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333333310760221745990596061224100538145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 12:15:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 12:14:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashlandcityccs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28801105214894788027694939650511863028859164664461936298395081933960901047198154914861630969517035412999615928200086890452664468263533658315214312151104743196757316908560473060097251160683835913095278827564158340066804688768921489110227506031614461429699539580133111621796426169554333462806111238977639600445973631864048964532581500635293784931262291742457446245768670649124202099991618666707742421976407454118459379806540937978427447130883429410366630658316054758791586786410487640381886987754315256652565303938115910331227936568054518615692602893417669282253341184546311839407476152710745733159405316514924047988777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15bde895dd446d38765cab1bcdfcfb4a32ec35fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/yzFsFcKWhQc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandcityccs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/akx-9CicCo0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f8bd767740000040300473045022100a6e3ca690bd06c2dff05b24f26bc4a2b17181dbe39d51ae83a77083dfcb67dc8022078c4a36a2c960fe68351b576f2535676cc033ffd0f07fb9080779f18055db984007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f8bd767510000040300473045022068fd701a6abc65eb9e25131b826fefec8903257a76734e9b1abf04cd3de91b8f022100b8f71ada095add13ea0e04fb29a8be7438e341bdc7e820d89f28562ecdea5f87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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