sptest1.lluh.org

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:e8:5c:76:ff:c1:f1:ef:fb:03:bf:70:5e:8e:ef:62:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sptest1.lluh.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:e8:5c:76:ff:c1:f1:ef:fb:03:bf:70:5e:8e:ef:62:3d
Serial Number (int): 411710242607335225777203963491079838196285
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:98:a5:d0:70:5e:1b:f2:cd:1c:f4:40:d8:c1:80:16:f5:10:a0:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:74:ef:ba:82:02:b8:8c:fc:51:bd:11:16:8f:39:b3:44:27:3a:44
Fingerprint (sha256): 2b:54:29:61:9a:16:93:a2:f7:57:d7:66:a5:bd:25:4b:d3:fe:32:d2:f9:03:5d:08:93:9c:01:65:14:65:c7:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sptest1.lluh.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sptest1.lluh.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sptest1.lluh.org

Other certificates including the domain name lluh.org

(limited to 100 certificates)
vpn.lluh.org
fhir-tst.lluh.org
gcs.lluh.org
one.lluh.org
spdev2.lluh.org
hda-poc.lluh.org
spdev1.lluh.org
imageportaltest.lluh.org
poc.ce.lluh.org
epsirpt.lluh.org
imageportaltest.lluh.org
econsult-poc.lluh.org
ace01.lluh.org
opsucm-pub.lluh.org
ora-tst.lluh.org
tst.athome.lluh.org
lluh.org
webvpn.llu.edu
spdev1.lluh.org
indoors.lluh.org
sptest1.lluh.org
caretend.lluh.org
canto-poc.lluh.org
sts-tst.lluh.org
spdev2.lluh.org
bcaexternal-tst.lluh.org
surescripts.lluh.org
interqual-test.lluh.org
ehs.lluh.org
ehs-tst.lluh.org
sip.llu.edu
polst-tst.lluh.org
ewe.llu.edu
pama-tst.lluh.org
home.llu.edu
tstexec.lluh.org
substanceuse.lluh.org
covermymeds-poc.lluh.org
ceix-tst.lluh.org
test.ce.lluh.org
pama-poc.lluh.org
sptest1.lluh.org
poc.athome.lluh.org
ora-tst.lluh.org
mobint-prd.lluh.org
*.lluh.org
mobint-tst.lluh.org
unos-poc.lluh.org
ora-poc.lluh.org
serviceportal.lluh.org
lsdev.lluh.org
home.llu.edu
serviceportal.lluh.org
itsupport.lluh.org
canto-ply.lluh.org
geoportal.lluh.org
sptest1.lluh.org
substanceuse.lluh.org
surscr-poc.lluh.org
mcccx.voip.lluahsc.net
ehs.lluh.org
wellness.lluh.org
sip.llu.edu
geoportal.lluh.org
ehs-tst.lluh.org
officeonline.lluh.org
econsult.lluh.org
ehs-tst.lluh.org
substanceuse.lluh.org
auntbertha.lluh.org
fhir-tst.lluh.org
substanceuse.lluh.org
edi-tst.lluh.org
adfs.lluh.org
sptest1.lluh.org
serviceportal.lluh.org
substanceuse.lluh.org
canto-tst.lluh.org
unos.lluh.org
interqual.lluh.org
lluh.org
ict-hmg-prd.lluh.org
imagetransfertest.lluh.org
ora-poc.lluh.org
canto-tst.lluh.org
ehs-poc.lluh.org
caretend.lluh.org
substanceuse.lluh.org
hda-poc.lluh.org
*.lluh.org
sptest2.lluh.org
edi.lluh.org
mcccx.voip.lluahsc.net
rxrefill.lluh.org
webapps2.lluh.org
care.lluh.org
mobext-poc.lluh.org
itsupport.lluh.org
supcarelink.lluh.org
ecl-hmg-prd.lluh.org

Certificate

The complete raw certificate details for sptest1.lluh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411710242607335225777203963491079838196285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 08:31:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 08:31:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sptest1.lluh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781593569167094069778606579461973826318076054440547261208279702063451514954940108311315978360376874029588357054012198318999031086825257696014830719565875284698314546775702047328060094322492965386577609924849728605238906401760465971153992488053742723505734933042872350185015779102918049917737437102867340967005839606880320445857105057112482965064427372670832639769226299062796955089244554726099651442934998910423188181287489666453065291125189516717166115807568016372084369930535028461489052703970976002512161105432851422168471605029827714256713319629450542735857292797759470836455836492488306092924381248423797062746937911429456189785087630630680631845357970862100249609485516199837344610287437982641903013723814476228332525099708321143474095036360465439547084621418215488282224818661739785618308559961567979997605946401584981417562340763877955845431546452279840118215970721470173929573408488237558517839961493167807211390871226073921839274092381843611436884207424150471788251379927178728397367452749860761999140604561561896948992473660995069879295012490980374542836252551508134497859264808440563098405622479977083728254339246046382563445127075039769555447710276313744296349040238935730932431214835239428858465195275480971875656169043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a98a5d0705e1bf2cd1cf440d8c18016f510a02b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sptest1.lluh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001866e299f9d000004030046304402206de702de239cc530c5178adf8c0d9bee26c5b25031029717f87694c5e7f2d6d0022049e545b504cf10304fac8813ff8c320c790bcdaf1d441986ec6ac5b3a67e22900076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001866e299fa90000040300473045022100e4202199ef7253d00c613e8c20a60742c8331e0f164a4df75fe660df7927ff850220538b9abf6fad143e920f78931caee67a967e2ce72ee26eedb9077f5c199c2cea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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