ome.utah.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:92:64:51:46:e0:df:3a:fd:ff:51:41:a8:e2:e9:e8:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ome.utah.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:92:64:51:46:e0:df:3a:fd:ff:51:41:a8:e2:e9:e8:0e
Serial Number (int): 297941659221382350513683833527441119897614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:ff:eb:db:3f:f4:ee:f0:36:d9:ce:dd:99:33:33:83:dd:e6:42:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:e8:f1:1f:e9:23:a5:05:77:d4:4e:36:55:fb:66:ab:34:ba:05:59
Fingerprint (sha256): 06:0a:a9:27:45:86:3f:16:46:d3:ce:65:25:ee:b3:20:24:57:db:79:24:57:92:b4:00:1c:d0:9e:7e:a7:19:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ome.utah.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ome.utah.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ome.utah.gov

Other certificates including the domain name utah.gov

(limited to 100 certificates)
forms.uid.utah.gov
utssd.utah.gov
dsamh.utah.gov
thrive125.utah.gov
healthyaging.utah.gov
brag.utah.gov
ssl1.revizesites.com
*.tax.utah.gov
redistrict.utah.gov
prod.35.slot.cdn.salesforce-communities.com
ridetolive.utah.gov
*.ps.utah.gov
siacconnect.utah.gov
ecare.sandy.utah.gov
vrtraining.health.utah.gov
strongerfutures.utah.gov
*.waterrights.utah.gov
www.ag.utah.gov
gis.utah.gov
loren.propertyservicesexchange.com
mybenefits.utah.gov
support.lazycoupons.in
ussc.utah.gov
*.washco.utah.gov
utahcares.utah.gov
unis.utah.gov
pawn.utah.gov
prod.35.slot.cdn.salesforce-communities.com
info.hoptek.ai
ogm.utah.gov
internal-utahgrants.utah.gov
www.archives.utah.gov
fair.kane.utah.gov
opendata.utah.gov
www.nephi.utah.gov
cottonwoodheights.utah.gov
911.utah.gov
*.dwr.utah.gov
tls.automattic.com
*.washco.utah.gov
*.dts.utah.gov
image.comms.caredeliveryorganization.com
maps.wasatch.utah.gov
incapsula.com
floodfacts.utah.gov
liquorstore.klvnmarshall.com
walkmore.saferoutes.utah.gov
incapsula.com
seualg.utah.gov
pedestrianmyths.utah.gov
move.utah.gov
firepower-internet.westjordan.utah.gov
scheduling.udc.utah.gov
fair.kane.utah.gov
emmanuelschoolsikar.com
app.udot.utah.gov
producesafety.utah.gov
rsbridge.com
museums.utah.gov
ucip.utah.gov
gopb.utah.gov
cuedle.fun
emprep.wasatch.utah.gov
vpn.westjoran.utah.gov
utahstatecapitol.utah.gov
*.utah.gov
cmssd.duchesne.utah.gov
*.le.utah.gov
*.utah.gov
insurance.utah.gov
*.washco.utah.gov
ccapitool.ezlo.com
house.utah.gov
transparent.utah.gov
dspd.utah.gov
library.utah.gov
daisuzz.dev
imperva.com
*.dhrm.utah.gov
blog.udot.utah.gov
*.dat.health.utah.gov
siacconnect.utah.gov
metisengine.com
gis.brighamcity.utah.gov
support.fanuccontrolrepair.com
*.health.utah.gov
opendata.utah.gov
tlamap.trustlands.utah.gov
incapsula.com
www.nsemble.ai
maternalmentalhealth-ws.dts.utah.gov
ssl1.revizesites.com
house.utah.gov
ocs.utah.gov
udotauctions.utah.gov
911.utah.gov
govops-stage.at.utah.gov
support.fanuccontrolrepair.com
history.utah.gov
ome.utah.gov

Certificate

The complete raw certificate details for ome.utah.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgISA2uSZFFG4N86/f9RQaji6egOMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjIxODM5MDdaFw0yMzEwMjAxODM5MDZaMBcxFTATBgNVBAMT
DG9tZS51dGFoLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJP+
ojvHuXpJfWc6Ot3hL3SlRFOQjBLXqsuL5QXASoVIelNgs2nNQ1qcFRVzVcfDRCy2
xnPOEAF5uFbILcaaDBwxDewvCUKGk6ieulv4B5C+U3YMVCu0rPAOfql+myryoSVG
kcw7aVIETfM9+JzxAmjz387bFmMZ/UJZ5jS+toOtGxFt+6RZgNrvSFcfmHLnd/7x
c/nBCTsmAwvD5VKPFJFPfZNKQ2Ejqsqf6neqqGv6l8ZumPnob+elRiVH22gckkAL
yf/7a0rw4NMl8Qy3CQQyuoSF3s6eOYjpu65nXe/+73FjCqE04VFFm4bEAGaC4foJ
H67E0yO2wAsW9JG5Iw8CAwEAAaOCAg0wggIJMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUZv/r2z/07vA22c7dmTMzg93mQoYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
FwYDVR0RBBAwDoIMb21lLnV0YWguZ292MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS
K8E6V6NS61IAAAGJfxzmrgAABAMARjBEAiAy8Nc6Vrl140nAs3KNr7VpDGA2iea4
siToyiQIozcuMQIgL0ZvPicebHQNZbgsgjFJfnz7KGHSmRt9gr+ByVvTqwYAdgDo
PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYl/HOapAAAEAwBHMEUC
IGNN86XqIgK6jn/htWUzcIN5iQwEO9ubXq/WN0pk89ecAiEA8nafQnqa/NII3cOK
E6mpJG4agaz7l7q/ao9XPIHlfEUwDQYJKoZIhvcNAQELBQADggEBAGov1hmwVW2h
OsBfV/45kU7CfOW4T2nPux+gYdwphKu5X9nr2ysK85dGvZgnw729bhXfo3lJ6luF
LF1Z6+4+IP651lRQIxppWa1DRkRBK7puVoiQaC7lLmDwUOu0MT3dz0d5SRIiQi1j
UJQiHmDVQz0JMV0y12s807yPvOnakFqUK1664AoaCQpvyNrJDO/FDWL1dRVs/x7j
ECJ88Tv1ZoxYXTFJ1URHC1OcfHoGntYq4NOpk/IvFrw5T+jiacWb9Id+90I/Gu+v
uCkS42SeOJkSgWKf8lVbGD0qPsKKV61CHqRwFSbf/8FCHDgMCDtP2Er6DetZnHZx
J3l4N+S8nQc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/6iO8e5ekl9Zzo63eEv
dKVEU5CMEteqy4vlBcBKhUh6U2Czac1DWpwVFXNVx8NELLbGc84QAXm4VsgtxpoM
HDEN7C8JQoaTqJ66W/gHkL5TdgxUK7Ss8A5+qX6bKvKhJUaRzDtpUgRN8z34nPEC
aPPfztsWYxn9QlnmNL62g60bEW37pFmA2u9IVx+Ycud3/vFz+cEJOyYDC8PlUo8U
kU99k0pDYSOqyp/qd6qoa/qXxm6Y+ehv56VGJUfbaBySQAvJ//trSvDg0yXxDLcJ
BDK6hIXezp45iOm7rmdd7/7vcWMKoTThUUWbhsQAZoLh+gkfrsTTI7bACxb0kbkj
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297941659221382350513683833527441119897614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 18:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 18:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ome.utah.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18682595399502498898197659556189095386128196155194536138414324976657481464580627612367092219720972900184485490424234686183042799287357289933892193796657188412851361212267071170344357467114190911527006618338045798149590859957285919515680504226464755263656310851484451807167136262072307267699353490834460064363719384397130185217882449047760351544233690219216996856938162684302194451952247239916286639900955329701035821661423485500863466052752100513907749373743923185372221226305740668087444735609035782401762021600477506889275138154933244226099261132518838884853635934138231318808576013248525786291814397678899575726863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66ffebdb3ff4eef036d9cedd99333383dde64286
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ome.utah.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001897f1ce6ae0000040300463044022032f0d73a56b975e349c0b3728dafb5690c603689e6b8b224e8ca2408a3372e3102202f466f3e271e6c740d65b82c8231497e7cfb2861d2991b7d82bf81c95bd3ab06007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001897f1ce6a900000403004730450220634df3a5ea2202ba8e7fe1b56533708379890c043bdb9b5eafd6374a64f3d79c022100f2769f427a9afcd208ddc38a13a9a9246e1a81acfb97babf6a8f573c81e57c45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a2fd619b0556da13ac05f57fe39914ec27ce5b84f69cfbb1fa061dc2984abb95fd9ebdb2b0af39746bd9827c3bdbd6e15dfa37949ea5b852c5d59ebee3e20feb9d65450231a6959ad434644412bba6e568890682ee52e60f050ebb4313dddcf4779491222422d635094221e60d5433d09315d32d76b3cd3bc8fbce9da905a942b5ebae00a1a090a6fc8dac90cefc50d62f575156cff1ee310227cf13bf5668c585d3149d544470b539c7c7a069ed62ae0d3a993f22f16bc394fe8e269c59bf4877ef7423f1aefafb82912e3649e38991281629ff2555b183d2a3ec28a57ad421ea4701526dfffc1421c380c083b4fd84afa0deb599c767127797837e4bc9d07