spdev2.lluh.org

Issued by R3

About this certificate

This digital certificate with serial number 03:92:2e:d6:89:c6:28:7d:66:09:06:d2:2c:ab:54:e1:00:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spdev2.lluh.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:2e:d6:89:c6:28:7d:66:09:06:d2:2c:ab:54:e1:00:f6
Serial Number (int): 311080341799461411064861857853105361715446
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:aa:6c:ed:28:b1:2b:3e:c3:97:08:20:43:a9:fe:6d:92:02:58:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:35:e6:85:27:aa:82:f9:3a:71:0a:4e:0a:d2:3b:de:ec:a2:e1:ca
Fingerprint (sha256): 04:be:bc:84:62:ca:cb:da:0e:04:27:e3:1b:34:73:26:05:6c:7d:c6:33:c4:c3:65:59:09:f4:86:14:13:5c:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spdev2.lluh.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spdev2.lluh.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spdev2.lluh.org

Other certificates including the domain name lluh.org

(limited to 100 certificates)
vpn.lluh.org
fhir-tst.lluh.org
gcs.lluh.org
one.lluh.org
spdev2.lluh.org
hda-poc.lluh.org
spdev1.lluh.org
imageportaltest.lluh.org
poc.ce.lluh.org
epsirpt.lluh.org
imageportaltest.lluh.org
econsult-poc.lluh.org
ace01.lluh.org
opsucm-pub.lluh.org
ora-tst.lluh.org
tst.athome.lluh.org
lluh.org
webvpn.llu.edu
spdev1.lluh.org
indoors.lluh.org
sptest1.lluh.org
caretend.lluh.org
canto-poc.lluh.org
sts-tst.lluh.org
spdev2.lluh.org
bcaexternal-tst.lluh.org
surescripts.lluh.org
interqual-test.lluh.org
ehs.lluh.org
ehs-tst.lluh.org
sip.llu.edu
polst-tst.lluh.org
ewe.llu.edu
pama-tst.lluh.org
home.llu.edu
tstexec.lluh.org
substanceuse.lluh.org
covermymeds-poc.lluh.org
ceix-tst.lluh.org
test.ce.lluh.org
pama-poc.lluh.org
sptest1.lluh.org
poc.athome.lluh.org
ora-tst.lluh.org
mobint-prd.lluh.org
*.lluh.org
mobint-tst.lluh.org
unos-poc.lluh.org
ora-poc.lluh.org
serviceportal.lluh.org
lsdev.lluh.org
home.llu.edu
serviceportal.lluh.org
itsupport.lluh.org
canto-ply.lluh.org
geoportal.lluh.org
sptest1.lluh.org
substanceuse.lluh.org
surscr-poc.lluh.org
mcccx.voip.lluahsc.net
ehs.lluh.org
wellness.lluh.org
sip.llu.edu
geoportal.lluh.org
ehs-tst.lluh.org
officeonline.lluh.org
econsult.lluh.org
ehs-tst.lluh.org
substanceuse.lluh.org
auntbertha.lluh.org
fhir-tst.lluh.org
substanceuse.lluh.org
edi-tst.lluh.org
adfs.lluh.org
sptest1.lluh.org
serviceportal.lluh.org
substanceuse.lluh.org
canto-tst.lluh.org
unos.lluh.org
interqual.lluh.org
lluh.org
ict-hmg-prd.lluh.org
imagetransfertest.lluh.org
ora-poc.lluh.org
canto-tst.lluh.org
ehs-poc.lluh.org
caretend.lluh.org
substanceuse.lluh.org
hda-poc.lluh.org
*.lluh.org
sptest2.lluh.org
edi.lluh.org
mcccx.voip.lluahsc.net
rxrefill.lluh.org
webapps2.lluh.org
care.lluh.org
mobext-poc.lluh.org
itsupport.lluh.org
supcarelink.lluh.org
ecl-hmg-prd.lluh.org

Certificate

The complete raw certificate details for spdev2.lluh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnAkYAUZwWqBQ4zNPepIv
hMuMPM4jtnFeWBDFNhpU4w1fvzkVdOtmMmJiedN6e+/nfl8ckkWD6zyi4kGOXfpC
oAr4JoL6ToAQBrZDwKV47On/vTX+84/5zYi8w0oAavnDQPeoQzj84T9JXl/kLGoJ
9VzEaWHSGTvq3wInxU/nBE4UfC3PUpie8wRFMhXFO7LClJPe8cnFWZ9HUZuFOYBO
C2iyDNqFhzpESTCq/t/ELRzA/6To+uM/3gZFk3MAKjXVnbBzCj3Wk9pHjYFtgDVS
UUDkHKa/oWkWVtP1IZ4MkpUDaIGWHhG8qrHE6Fecz33P/lKA97mAxXl00KwnCix5
H/d4Mxkhw9c3wZnyU7PIsDqnh2LHlGnPTaZMI0j9VojrcW+648L8yFP3sAxAgFP3
YIdil168R7jlmTD3Nmv1J4Whhw7C31lF2VTbHfNrHkLO4FjIxqufdl3pnpme006f
Qoa7LooJ0pEKAlfc9LIH1Ji3z8FA0MMqJPAL5txJNNYp4J/ovxj0txnZh3Gv4spn
4qIpFozXBjaatxcgG9uU6I2Z2m0hLmnZJ7oF0bjaV6/yiBhsPddULU8Yr6SmyCHB
VIcNhnQFwJunMIZnd8yfyuotixS7ttACptxhztuBT29Uiha2sGMpDTkZFzbhYGY+
gnyz4NxsRLkJ0HbD4hrUCmECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311080341799461411064861857853105361715446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 08:34:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 08:34:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spdev2.lluh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636569393918258203561400247181359884146766694637811757097538411160831966542649777444581505641071252105649631385280888472839009855859926543629226537541001567832530068842457268663959019761614422980214671189316145608894656121066383082283613353396308281302655050523641569823905402633385892462060293311556872058376589468280131161235289303630703372304425485808377060879895639155137802741244972608098478327354383381553892581284987993846714062282809490304262672776298384266363723121466560828350008484169144394276371048498603913446180848770092682530781925570990973961710017326048816993681678159443309149045756170505096622478518798996777023481582817955314382482657642393515223072846195343521888688508779386141001455441844114280994668984334162869166433438182159284004132778239944122753842124086906691052019843229890705922576916741050766373786775978502554430864206911413596940829211991875322123312984925395314673018656990225064283022086108193032473629370799885272038771485693145065879828063288254599417848682846721711622307216911536976031017689796329388640036455215562835393519267896365910328493956801217621678653086841764449670736549456607274661301961712446434381078474843371840627201131416172466948841906863170431156883389921948165141372865121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9caa6ced28b12b3ec397082043a9fe6d92025898
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spdev2.lluh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b071e08b4565f4fb968b08d749ab4a446f10cfc557aa512243a48211194a4305b5ee26270b4ae7fe4702ca3a4b904b31719992c32f2e20d755ec1353c3261a75f62a3d9a6bc8c1f0b83c3d5600eecf9f0d0b5411f3259be9b50237345236e2a80570314aeb65aee21315b36ceb47a65179363b52a4d363118398cf994fc2a784cef32057be5637bb7863481ffb41b7b582a52e759e5e225e242d93895c51853bee664b0f66409b65a53e572afcc115b8624782cc5a8a11f5e56d3e7a0f007aaa39f67115a746a625b15933d7d94a5c6a70c4c7f8182cfa6eaf1354cfe0607f923a104d7d5d1e59689fbf9bbdfe0f07f120cade4c79c24fe4f7db0b1b4703b983