promedica.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8b:6e:75:0c:37:17:7d:cf:f8:a9:c4:3d:78:68:66:14:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promedica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:6e:75:0c:37:17:7d:cf:f8:a9:c4:3d:78:68:66:14:09
Serial Number (int): 308782929623313710117307539659926295417865
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:0c:20:9e:8b:c4:a9:85:6b:2d:f4:0c:1d:00:7e:d5:44:0c:41:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:24:11:93:0b:3a:d8:37:da:e3:f7:97:b0:a2:a6:ec:28:43:4c:3a
Fingerprint (sha256): 01:fc:db:c2:f7:54:bf:8b:3a:6f:a2:5f:aa:c8:c3:78:e9:d6:4d:0f:bd:89:89:08:24:ac:a1:e4:b7:a5:8b:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate promedica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promedica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

promedica.org

Other certificates including the domain name promedica.org

(limited to 100 certificates)
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
phsimail.promedica.org
promedica.org
clearpass.phsi.promedica.org
careers.promedica.org
www2.promedica.org
phspacsids5.pacs.promedica.org
promedica.org
phsimail.promedica.org
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
*.pss.promedica.org
lyncae13.phsi.promedica.org
epicnpce02.promedica.org
yourhealth.promedica.org
promedica.org
careers.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
promedica.org
promedica.org
*.voice.promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
cloud.stayconnected.promedica.org
phsimail.promedica.org
epicceprxy.promedica.org
yourhealth.promedica.org
promedica.org
tthucexpwe02.promedica.org
mdm.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
support.promedica.org
promedica.org
epicceprxy.promedica.org
promedica.org
phsimail.promedica.org
promedica.org
giving.promedica.org
phsvidyoportal.phsi.promedica.org
promedica.org
webvpn01.promedica.org
support.promedica.org
promedica.org
promedica.org
careers.promedica.org
promedica.org
foundations.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
employersolutions.promedica.org
promedica.org
yourhealth.promedica.org
promedica.org
csg.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
*.promedica.org
isepsn01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
yourhealth.promedica.org
promedica.org
promedica.org
syngoviaprxyvip.phsi.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
giving.promedica.org
promedica.org

Certificate

The complete raw certificate details for promedica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308782929623313710117307539659926295417865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 01:09:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 01:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promedica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843718765224791738902708169395462497935298918934641595003058093387594753109808635624846149630722539846922660712389249124519174496111363706952935757796561253046961371175788578465309588247747960878953284038466314636178261376051332249050799399358430540717629947618324683179880418606415298938090299085140324595951548703777312345949135259203007651226256224763944547590185533290975147012337474445761166636802884393606944330428229683365241988867142738316280658862427209386233897943183329723197423358664001671503621504806648303881277547077987942839471717668951924892581739589574567493489756074677297619308919888058518971217629909543934015848928756232660924869826467463197137735155022558176570070429229384534603695526994486040262680857811031741476767538474521458992880246352290941049603841437596318421949881386498570289762564498570568528381928448744608422992894369703142996003901394804487036710799643139414786898600255694442136493732158303781359771113475926347388038456673136487029454213305833662870558256991908233525608706446252907741425994003010195230759625669272676995584997022857110890069644385887472927988946113661905087076510649379993189538533444281473804735659548538515797926255237632047106933804088446977745089177460288846665165726921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							860c209e8bc4a9856b2df40c1d007ed5440c4199
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promedica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018744e0dc750000040300483046022100c1e2cfde67734631700b5320f4950e3f0ff787e0b834234525ebfcf23c3a5da5022100f096473aff67a2a25356e217d4fe67687ea93637fb1af4cf6c23f18cec680016007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018744e0dc9a000004030047304502200d44f63f261de5f272330eb6fc97b7ee56d8ad7b6b739a9f94a7745c75d2c34f022100802cc83687ef91e2b96eab1218dfe750b9cc0f292e684e2b70a9589c8e21e705
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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