lpk-cms.ilearn.un.org

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:43:14:2c:f6:07:4d:fd:a8:1b:cf:c4:81:16:af:c2:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lpk-cms.ilearn.un.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:43:14:2c:f6:07:4d:fd:a8:1b:cf:c4:81:16:af:c2:22
Serial Number (int): 325399105809990342350422413038175529189922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:f9:a4:44:cc:05:a4:0a:da:32:e1:a0:ae:ee:d8:3c:d3:cc:e9:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:19:04:9f:9a:fe:35:5a:28:41:e3:b9:03:5a:a2:ab:ec:51:02:81
Fingerprint (sha256): 0b:f3:7e:5b:c6:c9:d8:4c:1c:66:02:d0:d9:c4:63:76:6f:d7:5b:7f:6f:ab:89:af:f3:c7:5d:ed:7b:9d:53:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lpk-cms.ilearn.un.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lpk-cms.ilearn.un.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lpk-cms.ilearn.un.org

Other certificates including the domain name un.org

(limited to 100 certificates)
*.un.org
*.un.org
lpk-cms.ilearn.un.org
kh.one.un.org
lpk-cms.ilearn.un.org
*.wf.un.org
cims-test.so.one.un.org
5726971199750144-fe1.pantheonsite.io
ilearn-cms.umoja.un.org
cerf.un.org
5679778661138432-fe3.pantheonsite.io
un.org
ask.un.org
jo.one.un.org
un.org
dprkorea.un.org
afghanistan.un.org
untermportal.un.org
mw.one.un.org
bkkuccx02.escap.un.org
ask.un.org
ask.un.org
*.qa.un.org
syria.un.org
5673073118281728-fe4.pantheonsite.io
hcc-hpsb-training.ilearn.un.org
*.news.un.org
elearning-cms.unstats.un.org
5684961520648192-fe4.pantheonsite.io
ci.one.un.org
*.escap.un.org
sdgprimer.un.org
expccl.ptc.un.org
elearning-cms.unstats.un.org
inspira.un.org
learning.un.org
5726971199750144-fe1.pantheonsite.io
ss.one.un.org
ask.un.org
cims.so.one.un.org
conf.un.org
kh.one.un.org
*.dss.un.org
papuanewguinea.un.org
migrationnetwork.un.org
ungsc-remotesupport.un.org
inspira.un.org
un.org
elearning.un.org
india.un.org
unp.un.org
5673073118281728-fe4.pantheonsite.io
*.dfs.un.org
uniteaware.un.org
peru.un.org
www.tm.one.un.org
lyncsip.dfs.un.org
roadsafetyfund.un.org
research.un.org
lpk.ilearn.un.org
ilearn-cms.umoja.un.org
ilearn.un.org
zm.one.un.org
research.un.org
expecl.video.un.org
mail.stc.un.org
apidocs.cna.com
*.unite.un.org
enterpriseenrollment.dfs.un.org
un-az.org
shop.un.org
countryteam.org
officewebapp.dfs.un.org
5673073118281728-fe4.pantheonsite.io
cims.so.one.un.org
roadsafetyfund.un.org
hcc-cms.ilearn.un.org
digitallibrary.in.one.un.org
journal.qa.un.org
morocco.un.org
crmlearning.un.org
crmlearning-cms.un.org
*.umoja.un.org
cims.so.one.un.org
af.one.un.org
cameroon.un.org
*.dfs.un.org
service.ilearn.un.org
fdp.un.org
remote.dfs.un.org
hcc-cms.ilearn.un.org
remote.dfs.un.org
lpk-cms.ilearn.un.org
cm.one.un.org
hcc-hpsb-training.ilearn.un.org
cd.one.un.org
mm.one.un.org
vdi.dfs.un.org
www.un.or.th
ci.one.un.org

Certificate

The complete raw certificate details for lpk-cms.ilearn.un.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAtQoTwvdnfZFLTJqOJy4i
smu9GoI/U4qF9X2pBtQxzzikwrv8LnojKTs3FAzHh6UMXn+90sZsTBnHhUlIWquy
DV0tW9LjjLeKVLnEubKxep/DbxFl+AA5OSyVwUXAtoPcAqbGMSMZng5jC44x/YzJ
8iyR1mDaeA5Jv7YZ8UYZkn+RWLmumiCazSin5FyotmPl26e+kOni/wH6SP6oM7RW
adkqqYlX65EG2Luo+aw2v0fXSEOe5B0qw5iG81rupMvegmUaneuAO086Np+hCxjH
3TPzpVwiMKnRAqPK9C+E3tqOo3wZw72NCX8IWJulbW1bh1fI25rLOUUBvCWVKrGq
xyqbfd3g2jwnR0e+6qQN3WXB11yw/VuQ6agZMrEpRuG4ZeAnlb34o0BY6oL8YqDq
0GxRwhfNisnr60MOB9joZVh9Tjqrbn8reXBO5gh7i0rSS86FXgP5xocy0Nx+A6bK
gdJivu7xdGCkHK/rfb86zXdLNZ7EK1+k4H+en6D9NqIFAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325399105809990342350422413038175529189922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 23:02:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 23:02:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lpk-cms.ilearn.un.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4108466307470813574487522701729061633169878805116923415487135252751073848951332780079601471179431975666286735575652265151918067441122753217761092641744213244183805469842666768324336532458922136856523081411524066958158453831996862699609096579988536566727782437367204756253007498344932774867481904099988633803920979896129137284834593532227951307004478533988570952553125691533820699946309886561016758939953719096870370616221757573298428442561602307624989883764285703188863469464924934256000237851674338596752767861091939321076661557493841186350748343262227399170311470292680815962716712499574132480251665716661866706236092096142672439298256100691009833305723356204835303500267251626994698657633062751968189908235718713523635655352422984513519537190272234819424191837788348318302329207221926544233081010187494396773546878024031767733008592555533430911382902741443410848067635339527857713775634181169316138556999960285632238363141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cf9a444cc05a40ada32e1a0aeeed83cd3cce992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpk-cms.ilearn.un.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001804e93de870000040300483046022100ad94543cd047e0c0e77bd829d6b7fba743802aae9498c3dcca6a2b0fa9b4f9de022100f6ce106260f29443f69e7f1b4396ef06bbe41dc3c75af3cb2dcd69737e865829007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001804e93dfde0000040300483046022100fb4579485915ccaf086dd65e371129dea7ac3ba678f7fb3ef297ee848012340b0221008cbf515b54712b55532566fbc1c4c54a61f9668c04ae9e790e4c4eda80f0efb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008367a7e1538d0037d5149d0bc20acad1109563e646407bbd32bdc60f875e0d036de4e7e09174cb5d6a313283cd7885c3749f0ce88dc2b49e826914a40f69aa441f5b981dccf2ad0f81475a0da706f9bfe1bc10f229c2a21e399a59973ac4db9eae2c8e6e2ce07cfbf1997167cdc6e2f571a414032f4a611997189d04977034e572477e389e35ea1ae1fd1778a70f553a0c1b38890260ba48200239b71a70e5b558d9eec400b0f42e8ecd3b051c6c6c5a2c7f462e902ab497702ee30396ab907f31b30024af60c140c2375494c00c76981093aaaabc8425060b1826c3010facbfbaf55ac58138d93d794a25a85fe3b055637e3fddedfad5cf6a6161134bc5e080