elementadmin-qa.lilly.com

- Eli Lilly and Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0e:67:cd:c5:8e:cc:6c:58:8a:57:51:4c:2b:f3:81:42 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Eli Lilly and Company

Organization: Eli Lilly and Company
State / Province: Indiana
Locality: Indianapolis
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:67:cd:c5:8e:cc:6c:58:8a:57:51:4c:2b:f3:81:42
Serial Number (int): 19148172063528677279597893286993559874
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:86:0c:ed:f9:68:b4:01:8c:64:ff:37:fc:b2:88:df:b7:f7:32:40
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c7:81:1d:c3:08:8d:10:ef:e7:e7:44:c7:85:54:ed:06:29:c8:7e:59
Fingerprint (sha256): 01:c5:5a:d5:33:27:9e:5f:db:3d:2b:0f:a5:73:fc:8f:f7:a4:fe:48:37:31:d7:c5:50:09:68:a9:5e:1d:24:29

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate elementadmin-qa.lilly.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elementadmin-qa.lilly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elementadmin-qa.lilly.com

Other certificates including the domain name lilly.com

(limited to 100 certificates)
asp-t.lilly.com
mi-lb-z1-v1.xh1.lilly.com
dev-element.lilly.com
connect.lilly.com
impact-qa.am.lilly.com
enginframe-t.am.lilly.com
Lyncpoolz1fe.rf.lilly.com
www.cialis.co.nz
www.lilly.net.br
adp-ess.lilly.com
chinalccp-q.lillyadmin.cn
SB-JPN-KOBE-02.rf.lilly.com
sappipci.d52.lilly.com
www.lilly.co.za
alscsoa-dr.am.lilly.com
credit360.xh1.lilly.com
artritrereumatoide.xh2.lilly.com
olumiantreview.lilly.com
ects-qatss.am.lilly.com
iwrstrans-qa.xh1.lilly.com
lillypad.lilly.com
MQZl4igel.am.lilly.com
heroku-to-aws-video.heroku-apps.lilly.com
mdutranslate.lilly.com
ct2-dev.lilly.com
sapepqci.d52.lilly.com
SBC-O365-USA-INDY-TEST-01.lilly.com
lillyscience.lilly.com
webtop.ema.lilly.com
SBCTEAMS-USA-INDY-01.XH1.lilly.com
image.partnerapp1.myworld.com
dctmlrlextadmin.am.lilly.com
chinagamification.xh3.lilly.com
leo-app-d.am.lilly.com
plmssd.am.lilly.com
elementadmin-qa.lilly.com
connect.lilly.com
*.paas.xh1.lilly.com
lilly.connect.lilly.com
bpmpc-z1-86.am.lilly.com
api.data-q.rids.lilly.com
srvstgweb.d52.lilly.com
odmdc-z1.am.lilly.com
chinami-d.xh3.lilly.com
srvbes.am.lilly.com
dmw.am.lilly.com
elancophotocontestportugal.xh2.lilly.com
SB-SLO-BRAT-01.rf.lilly.com
myequity.xh1.lilly.com
je3svr272.ap.lilly.com
SB-USA-WASH-01.RF.lilly.com
sbt-chi-suzh-01.ap.lilly.com
mail141qas1.am.lilly.com
lillyru-d.xh1.lilly.com
dmw-dev.am.lilly.com
lillyapp105-qa.am.lilly.com
reset-dc.xh1.lilly.com
lillyakademi.com
www.d-diabetes.com
chinacmp.xh3.lilly.com
cst.lilly.com
www.36saat.com
ifolio.lilly.com
RWE.lilly.com
mydesktop.ap.lilly.com
www.lillyhcp.com
mail141qae2.xh1.lilly.com
lillyconnect-sa.com
rwe.lilly.com
lilly.com
osf.lilly.com
statsclstr4-2node.am.lilly.com
soag-z1-d.am.lilly.com
www.d-diabetes.com
EIPCC.am.lilly.com
iwrs.lilly.com
sac-test.lilly.com
pages.mc.lilly.com
www.lillypod.com.au
akamai-san35.exacttarget.com
image.partnerapp1.myworld.com
sail.am.lilly.com
try.connect.lilly.com
ics-mdit-ctsup-d.lilly.com
lillyakademi.com
insulinsimulator.lilly.com
sapsmqci.aws.lilly.com
workday.lilly.com
global-boilerplate-nuxt.heroku-apps.lilly.com
*.domino.aws.lilly.com
SB-PHI-MANI-01.rf.lilly.com
chinalccp-q-new.xh3.lilly.com
copay.lilly.com
leo-app-q.am.lilly.com
federate-qa.xh1.lilly.com
MQZWORKSPACE.am.lilly.com
ie2b2mestest-mfg.ema.lilly.com
mail141prds1smtp.am.lilly.com
ie43mesprod-mfg.ema.lilly.COM
salesreporting-q.am.lilly.com

Certificate

The complete raw certificate details for elementadmin-qa.lilly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/2ZZ6nXbQd8N6mnJQk
e17AlwxNTZzpEbFxPcNn0RhPAjbU4xdHD/Oaah7SXyTR3kxepnqkjv/C9O27+yDT
yy2GkCQy5GGIDstEHYl/bXrDfo1nDtDrhy11Wa2cdySHSW+WG8TF/TSqfA7Eor1O
fQFxoKXimhtLO3CpDFgDoRndLReguJIMB+51MAZ/nOWst0emOd0UlN7n1j78xjg5
xkSs97SzEYX5NLaRboLa/l0H9WRjWDsd7W8bXk1AXWiDUPZugHeT61fr8R0dqe6D
FWnY4xWxxUDu7pTJTmZ/uLcLqA029Nlx7LyAIMJIlTFN4CC2wd1AnF644XoelUkV
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19148172063528677279597893286993559874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 05:00:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-08 05:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eli Lilly and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elementadmin-qa.lilly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21760309320714180790496081783843607455883183149967818222859420527265405618960249358359378374452045465196823348655152464931932459403313997624875596698409229374632981311633533472103874839763249723305627871264729741356297424709080894952645594732926054896448281628090520507321127385828168104347815127526659809392110530223780345634492543750642075047262011026505040226464427954222341457832230323184928068651872554183178957112295950342289382377396718076081244571638575779695875884629095184824987444609770253992895868038353701549473140788617183631518687965396953071338037721538205274906227920847000058568077672126025180976449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62860cedf968b4018c64ff37fcb288dfb7f73240
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementadmin-qa.lilly.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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