www.llu.edu

- Loma Linda University -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:e6:13 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Loma Linda University

Company registration number: fTbdiV9SoB2/yNrUJ0NCLvAaGiidJUzH
Organization: Loma Linda University
Organization unit: UNA
State / Province: California
Locality: Loma Linda
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e6:13
Serial Number (int): 189971
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: fd:bb:7e:f2:0f:00:be:93:37:ab:9e:ee:bf:97:10:17:28:0f:c8:76
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 50:dc:d1:6f:ca:28:95:b9:e9:40:01:9f:00:fb:59:30:b3:a6:22:19
Fingerprint (sha256): 11:ae:e0:8e:9a:db:13:c6:93:0e:80:5f:ea:0d:2d:e2:3b:99:29:b5:a8:24:f1:56:d6:26:2e:d8:b8:1e:d2:c3

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.llu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.llu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.llu.edu
llu.edu

Other certificates including the domain name llu.edu

(limited to 100 certificates)
scholarsrepository.llu.edu
vfair.llu.edu
lluonline.llu.edu
peoplesofthcm.llu.edu
alertus.llu.edu
nextcatalog.llu.edu
sdweb.llu.edu
admissions.llu.edu
banneradmin.llu.edu
pwm.llu.edu
bannerxeadmin.llu.edu
cas.llu.edu
admissions.llu.edu
libguides.llu.edu
vfairs.llu.edu
ssweb.llu.edu
cdm.llu.edu
peoplesoftdev.llu.edu
ceonline.llu.edu
bannersso.llu.edu
lluh.org
webvpn.llu.edu
era.llu.edu
vfair.llu.edu
vfair.llu.edu
mypeoplesofthcm-ren.llu.edu
mypeoplesofthcm.llu.edu
www.llu.edu
catalog.llu.edu
sip.llu.edu
webvpn.llu.edu
ewe.llu.edu
banneradmin.llu.edu
home.llu.edu
succeed.llu.edu
mypeoplesofthcm.llu.edu
*.catalog.llu.edu
myllu.llu.edu
courseval.llu.edu
eracert.llu.edu
wingedfoot.llu.edu
scholarsrepository.llu.edu
*.catalog.llu.edu
mypeopleportal.llu.edu
SDWEB.llu.edu
email.llu.edu
catalog.llu.edu
cdm.llu.edu
*.catalog.llu.edu
degreeworks.llu.edu
skyspark.llu.edu
eagle-i.llu.edu
peoplesofthcm.llu.edu
mastercalendar.llu.edu
virtual.llu.edu
upkdevpri.llu.edu
home.llu.edu
llucatalog.llu.edu
anatomypr.llu.edu
upktest.llu.edu
apiportal.llu.edu
sahpvalt.llu.edu
peoplesoftses.llu.edu
sip.llu.edu
currentcatalog.llu.edu
bannersso.llu.edu
ssweb.llu.edu
peopleportal.llu.edu
mcmail.llumc.edu
home.llu.edu
peoplesoftdev.llu.edu
peopleportal.llu.edu
wiki.llu.edu
sdortho2edge.llu.edu
chdmm.llu.edu
nextcatalog.llu.edu
chdmm.llu.edu
eagle-i.llu.edu
lluh.org
webconnectrtmp.llu.edu
bannersso.llu.edu
peopleportal.llu.edu
admissions.llu.edu
lluprint.llu.edu
webvpn.llu.edu
admissions.llu.edu
*.lluh.org
virtual.llu.edu
upktest.llu.edu
upkpri.llu.edu
bannerappnav.llu.edu
www.llu.edu
dash.llu.edu
scholarsrepository.llu.edu
peopleportal.llu.edu
scholarsrepository.llu.edu
pchelp.llu.edu
llucatalog.llu.edu
admissions.llu.edu
bannerappnav.llu.edu

Certificate

The complete raw certificate details for www.llu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxorwobhzBKKUMChuuO3
+deNwDZwGrFuG1P0aDZzDXTkxgwo90uitcntP44zHTpyRe24pR2i6YcbevgjDZ8S
bQTVnDK2eTIX117ImiBD+Dz2qiWd9wOEXzigPcq+2acNJ8TiLJ7yg4DzElqk3HFZ
u9tPgR5/LMCTp5UBbV+WH4/gbU8iToxH43OC06Gpq4S/LMSeDzAOl515hC2+ITnK
OXFz4tcetMlRKRZi2i0Mz2caFlxOSK9Xr5p9Epev7ClGmc+BebBtriaegREPenzh
Jwhh0lA57Ilo90ZWovi9XiHqVEklQFakT8GYoxQDPR4HyP7KDbIBh+7KSQ2VUjkw
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-10 20:54:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-12 11:18:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fTbdiV9SoB2/yNrUJ0NCLvAaGiidJUzH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loma Linda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loma Linda University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.llu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21094702299353590851376556816246328412198888657933045684853519707979430313877528900120467141565909021569847558138516060839002812926881507247310816799016877887180041211843652716454878055320187417548163314952107480419882161189716632513873995588331498764477059051893727386614515837308367241195084377771485904179974188138554824891293843567811258770889898939271404361187972511034445753497207263555792324725281772719418348372235279608418721532993504108396752168797040402636567399241256066875060308468511006976747820942413489746489838327379997375812973065484856643759554915427437307354397990704246070756008038490009515929653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdbb7ef20f00be9337ab9eeebf971017280fc876
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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