educatefor.life

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number e0:66:4a:ed:39:e7:bc:d4:0e:ea:cc:b8:ee:d8:a8:be was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=educatefor.life

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e0:66:4a:ed:39:e7:bc:d4:0e:ea:cc:b8:ee:d8:a8:be
Serial Number (int): 298278205028697693193653341827018303678
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8b:c5:dd:22:14:ac:10:23:02:05:f7:3e:33:91:5f:c1:e3:63:9d:da
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 14:d4:34:9a:4b:f9:e9:d1:c0:01:f5:65:03:77:1d:74:d8:65:60:54
Fingerprint (sha256): f8:27:44:0a:47:78:46:8f:69:cd:a6:00:df:3a:f6:6e:bb:30:1a:1c:4b:2a:2f:b7:fa:40:37:6b:09:60:80:c1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Ls7CpWACgIY
CRL Distribution Point: http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl

Check the revocation status for certificate educatefor.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for educatefor.life

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

educatefor.life

Other certificates including the domain name educatefor.life

(limited to 100 certificates)
community.educatefor.life
events.beymedias.net
events.geocat.net
events.beymedias.net
clients.ndigo.be
clients.ndigo.be
educatefor.life
community.educatefor.life
clients.ndigo.be
educatefor.life
educatefor.life
educatefor.life
clients.ndigo.be
educatefor.life
events.beymedias.net
clients.ndigo.be
festival.educatefor.life
community.educatefor.life
events.geocat.net
educatefor.life
community.educatefor.life
events.geocat.net
festival.educatefor.life
www.educatefor.life
educatefor.life
clients.ndigo.be
clients.ndigo.be
educatefor.life
community.educatefor.life
clients.ndigo.be
educatefor.life
educatefor.life
events.beymedias.net
educatefor.life
events.geocat.net
help.geostruct.com
community.educatefor.life
community.educatefor.life
educatefor.life
community.educatefor.life
educatefor.life
educatefor.life

Certificate

The complete raw certificate details for educatefor.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NRWFiMI9xG90ImY7V+n
FiwVQBVgMwyjqMpgSWhOyI6HC1ID8qFtSgPVfnpaAiEjJc99fxaOAxos+hrWDaVO
0dMISG7ZUD+dhIHDNIZxtrUVSbYBUwrPAQN89SepN596Z6oM+0FDodOeiZE6NEJE
2B4X2vdzOUiv5hVnYnjwukQ2yAcNCZaFF9LdapzxICF/Anitftc7FDemefgGV6ca
p905U1LN7Yr5Nif2BU88IZWbPB8LW1ng+/tdPUNjUriUYg/g6rnvw69zkGn8vnsS
mlu73p+sT4SzofU7OmJONq3PNAiS9zKDWq+pDbTDatDKg2QXlCXTpcc9Edj9Cu5X
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298278205028697693193653341827018303678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:41:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 23:41:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'educatefor.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31411806551404244453082861420798586190388498079652566858006149285332027771286907283749762472729809111286719361228768842678488174785616490536319379547386050504202170182854228858859188212122415249360605888840725168924996309981014767165478127777317871817857420606921675544335329611142135650008642520311439616516497146986715172033565835312755244898653081823621520401900946355064889790767602914812700688056662890170135917089379509736617709418731794643704477083488204439010186127712106266867474114314225679829858264280143602869327112477961561325226611201294303996017344930436174224744352487384198381141899388985165887723319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bc5dd2214ac10230205f73e33915fc1e3639dda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Ls7CpWACgIY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educatefor.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7fW9J5c6W6o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cfb1e48670000040300463044022050e4974eb4c09dc06f7097f8800a28176943a4fe2e727cdc81643379539eb1f002207cea50b28bd2eaec1a79f8d9e35d0d0960d8cb9fe0c7d1df31be6373c60dfd85007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cfb1e4758000004030047304502210081efb030b79d19a908921a8b4b24822c07edabdd6639052356bdc525f3183a0f02205ad55d5d2df319cb22e2bb053ff83608df051351c015d5d1f17a4566c8daec0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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