promedica.org

Issued by R3

About this certificate

This digital certificate with serial number 04:48:72:f7:8c:cd:cb:89:e8:d1:7c:40:59:fd:89:f7:60:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promedica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:72:f7:8c:cd:cb:89:e8:d1:7c:40:59:fd:89:f7:60:82
Serial Number (int): 373102291490034204473736266387290666262658
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:04:ed:10:b2:0e:e5:37:d4:13:e1:25:19:0f:26:f7:12:4e:21:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:37:b3:ba:95:e6:44:a4:fa:2a:f5:79:07:a0:7e:f5:79:20:ed:b2
Fingerprint (sha256): 0a:f0:3b:2e:03:54:2c:82:cd:d9:fa:38:57:33:77:3d:52:18:11:5d:15:2e:d5:b8:ee:e7:81:ad:62:28:d1:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate promedica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promedica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

promedica.org

Other certificates including the domain name promedica.org

(limited to 100 certificates)
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
phsimail.promedica.org
promedica.org
clearpass.phsi.promedica.org
careers.promedica.org
www2.promedica.org
phspacsids5.pacs.promedica.org
promedica.org
phsimail.promedica.org
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
*.pss.promedica.org
lyncae13.phsi.promedica.org
epicnpce02.promedica.org
yourhealth.promedica.org
promedica.org
careers.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
promedica.org
promedica.org
*.voice.promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
cloud.stayconnected.promedica.org
phsimail.promedica.org
epicceprxy.promedica.org
yourhealth.promedica.org
promedica.org
tthucexpwe02.promedica.org
mdm.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
support.promedica.org
promedica.org
epicceprxy.promedica.org
promedica.org
phsimail.promedica.org
promedica.org
giving.promedica.org
phsvidyoportal.phsi.promedica.org
promedica.org
webvpn01.promedica.org
support.promedica.org
promedica.org
promedica.org
careers.promedica.org
promedica.org
foundations.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
employersolutions.promedica.org
promedica.org
yourhealth.promedica.org
promedica.org
csg.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
*.promedica.org
isepsn01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
yourhealth.promedica.org
promedica.org
promedica.org
syngoviaprxyvip.phsi.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
giving.promedica.org
promedica.org

Certificate

The complete raw certificate details for promedica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373102291490034204473736266387290666262658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 20:28:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 20:28:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promedica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665296399117778488765089492153967679971749202302319284158688913993405997389992629602571736862998672180785642156059737671865525323127155160176175691832001767096648069973912665826067323913521383762561594205577709140578459053202694511865560254678093640662957015815202376411729998963919888944585469435489924606562893774553587139560059543683283607986820463614647354909937820358078328094399117443742146906452394567904409905047756038173017839607716173114088658523688136106542356071416315746091170268193506987945307491016298539714324121887535519506174790167124680232474839912801320877541966835940160209485915559658422727250051822189346609316075997030999969960401409807078562586329158749279542072524481937798039991244242155637297426761753992408841347431371731483393592577681996510429581397632172721095167280047569637319512705947949720920374198096111484928826868684719405370970148180455763734894084767493861959153710023610604598569576953503616814964292066388493230846985277805352435525483290407324143694454454062867358900859482493144775279395536661567341070095680311997920391193577706932955002313132036903140551198026609945186381071066600398443816311124611841101211442658774892237558861325286365596948555822456495113034466139757409280505857953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6504ed10b20ee537d413e125190f26f7124e21c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promedica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001874e2b7e8e0000040300463044022029e5b4f013ee4b9bf3fcd6aafd02293b4159d7fabdd9ffc7ccf34766215f22cb02207307579ae2f4082adc21e00705c4606f0b76ee6a582fd4f7b31954c172b2fe8a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001874e2b7eb10000040300473045022060259b62f392aa2f6d6f4a14b3fcc6155698086309dfa3075da41b932e57c838022100aa5d5abcc6215668f5a57cce3f0862e631b1d9b26c537888751fc2409291bd5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074c94ceb1c13e6b1c3f0113cb41b5877442832dce5d0579f3b4aa3b68cc87662dd2dc241d8f960dca8f5b904e89b5ab08b5beba1d57ffc553ef702c578f874322b9c812972c088ac6d90d8b66a370ecccf1afc87fe221e0ce2f4e12638fa598d55813ed3a9ac314c162942f0f880783aabcf95d15c20a560fc6fe4078aa6670752ef54c2ffddccb07c33b77b61a809bbc08f1add6f7123be0fa839307320a3dbaf0937a90a9622b753653c803e741b9767537b9ea6bd2a33f04a7fad668de8583c3ba1cf5674bc5d18997e4f967d6e125d13e6ed35d9b2eae6faac4bcd29ddcc974ce40e19e8d7d07b6a83cf3a28727705d3fc1506e68bc13b84282781cfffb7