news.pennstatehealth.org

Issued by R3

About this certificate

This digital certificate with serial number 04:33:31:c1:51:47:58:f8:1d:b0:e2:02:5c:e2:b8:e1:92:b5 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.pennstatehealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:31:c1:51:47:58:f8:1d:b0:e2:02:5c:e2:b8:e1:92:b5
Serial Number (int): 365869680373623918391609451665372137755317
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:e5:84:c7:4e:0a:a9:b0:15:a1:a6:61:93:78:e8:0e:4a:cd:77:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:c8:66:f9:0a:cf:41:56:b7:eb:e3:29:da:5c:75:3c:6b:0a:44:15
Fingerprint (sha256): 03:e5:15:d6:72:ec:9e:b3:7e:63:cd:e0:fe:4b:d7:de:e9:98:c8:6a:87:ec:a9:1b:0c:76:85:54:51:0e:e0:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.pennstatehealth.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.pennstatehealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.pennstatehealth.org
pennstatehealthnews.org
pennstatehealthnews.vmhost.psu.edu
psh-newsroom.vmhost.psu.edu
www.pennstatehealthnews.org

Other certificates including the domain name pennstatehealth.org

(limited to 100 certificates)
pennstatehealthnews.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
www.pennstatehealth.org
www.pennstatehealth.org
thisispennstatehealth.org
careers.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
this.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
medgroup.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
pennstatehealth.org
careers.pennstatehealth.org
pennstatehealth.org
*.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
pennstatehealthnews.org
esteem.pennstatehealth.org
cc.pennstatehealth.org
*.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
esteem.pennstatehealth.org
this.pennstatehealth.org
www.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
careers.pennstatehealth.org
news.pennstatehealth.org
pennstatehealthnews.org
ufc.pennstatehealth.org
pennstatehealth.org
engage.pennstatehealth.org
thisispennstatehealth.org
medicalupdate.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
engage.pennstatehealth.org
yourcare.pennstatehealth.org
careers.pennstatehealth.org
engage.pennstatehealth.org
ufc.pennstatehealth.org
medgroup.pennstatehealth.org
pennstatehealthnews.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
pennstatehealth.org
thisispennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
psh-newsroom.vmhost.psu.edu
pennstatehealth.org
survivorship.childrens.pennstatehealth.org
pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
medicalupdate.pennstatehealth.org
news.pennstatehealth.org
www.pennstatehealth.org
engage.pennstatehealth.org
cc.pennstatehealth.org
news.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
news.pennstatehealth.org
survivorship.childrens.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
cc.pennstatehealth.org
esteem.pennstatehealth.org
survivorship.childrens.pennstatehealth.org

Certificate

The complete raw certificate details for news.pennstatehealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvieWkXpq/KEDZQ7YoNU8
FUMUnhdBu17VOnbQZWZfqleIWXivCIZDzCj2822kokl7VCd5dyVwqevBEnw15I65
rhERMQTOk6siea52qKalkPoIqeVWcVLnNQNk/5E4U187mU5m/PIrmVkvA4PriFIM
zWz2u7fUCn8H955gCCtW9XMroimkrmoCv6bifLT+ywbI92hxTCUj/XbF3l/8cb7Z
hk5j8B/DY2DGY14/rEFVqiH29h/hPVj+pcFJZvoqJfEPFIu8+DaUivwgEWr6oPLW
ZQPWm5XzjXUCDYHqJnF/80H0P6n+CG8mnr7hHsDl4OSYNO5YQo7eGtqaM7zvtLEW
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365869680373623918391609451665372137755317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 06:25:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 06:25:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.pennstatehealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24004799591507951253149062974834016673025071049173037551115101370300038877255810598472272986052602660191066662665105326487140410586000135616386066162377086021716755038113762042861666054051028416366701959889682226543506121162513222575710206709162662036524553693669117023478690199985145083267935924203196763825297849559115169138042810023845919040821948727969982944257910833322550595333418842116134808048662125429967375354896940605832647212331113920393284779868430298044740825997763327218421632378190034842239711434409915992038814350530903014684140998606195437920337283569555945065331977678372670095167350633312786912807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0e584c74e0aa9b015a1a6619378e80e4acd7713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.pennstatehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstatehealthnews.vmhost.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psh-newsroom.vmhost.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018880255b58000004030048304602210098602610d7f4ff8c34f3cd44f88f80f798b38bc0aa68ae893bba6efa68a1fa5f0221009398ff4e0c1e3b10ca59ba3819188bf9a963c9916ff334fba842ea2a1da4d9060076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018880255b700000040300473045022100f065ddd3ccb28c2ab94eefb7aebda6221771de3f92a4c22f0796bcf66e182d4c02200188c98660a2cbdfe855dd84223f8ff510a9dd6f445f6917881d1f4c6c1d30ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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