premier.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:d1:13:54:71:76:36:dc:13:90:90:b6:31:2d:9b:b2:8c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=premier.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:d1:13:54:71:76:36:dc:13:90:90:b6:31:2d:9b:b2:8c
Serial Number (int): 299045827174055105123291638142828740850316
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:12:77:6e:3a:4e:a4:f7:3c:90:76:a8:c9:a0:fb:4a:ee:86:aa:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:f4:ca:65:f9:7e:d0:1b:bf:90:02:d2:f8:e3:c9:c3:3d:6d:b0:6c
Fingerprint (sha256): 3d:7b:6b:18:36:1d:1f:4e:d3:9b:db:cd:a4:9a:68:72:08:31:b8:2b:79:a2:7a:a9:58:99:99:0a:ca:e5:ab:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate premier.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premier.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premier.org
premieramerica.com
www.premier.org
www.premieramerica.com

Other certificates including the domain name premier.org

(limited to 100 certificates)
loan.premier.org
www.premieramerica.com
www.mortgage.premier.org
www.premier.org
www.premier.org
premier.org
*.premier.org
premier.org
www.premier.org
www.premier.org
loan.premier.org
www.mortgage.premier.org
premier.org
www.premieramerica.com
www.premieramerica.com
webmail.premier.org
premier.org
premier.org
webmail.premieramerica.com
www.premieramerica.com
www.premieramerica.com
www.mortgage.premier.org
wireless.premier.org
premier.org
apply.premier.org
webmail.premieramerica.com
www.premier.org
www.premier.org
www.premieramerica.com
wireless.premier.org
premier.org
premier.org
premier.org
www.premier.org
www.mortgage.premier.org
www.premieramerica.com
www.premieramerica.com
webmail.premieramerica.com
webmail.premier.org
wireless.premier.org

Certificate

The complete raw certificate details for premier.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299045827174055105123291638142828740850316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 14:47:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 14:47:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premier.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4715800285611484683630095008652234182873922770605913694039595392568879860804912189537527091739387298244229705240296777926613224776315570955872616149213822320044039164441894868976959120472197245865992941592849725015103977469691555154480138251033065217960006435491308498006482371824336256559307621866880588745140428520811495031348534638634638786708588324329550524122951383858844164424121912884284968940539214192689046577895293491401828290690124178088952460542080569153897892365969279975060230960311804896630820449230635294485474640957667392744938215163016442483345880156741248664572576647081644741602032425503321370695977342384851459677586227345940082733723583726824025029580892636111310797066861776902075061677118928556134735372668240652279609571729079046359895458095766219358686896665878537725188013387455502655861281155860862033864274163595214661903832793075235731346739019703859033398472526300117138026432808943498178937669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'wn:N��<�v�ɠ�J�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premieramerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018597372ffd0000040300473045022100bcf8bc94b305fc3d58bce8f5b236d9b56608cabafc204d740293db0c719beca80220084be9512c37b8083bbf4ac319af14678d67abde14f1d291b0e6038f3d6a27350077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001859737320e0000040300483046022100e75b2756c151e6d6a106cb1f69cde2f6ba384141c34e8fd5de3481f50c2f2aba0221009e6688d2a0f0d5167c573b22c02a89612919a9555bc3e30c958b0150b5ae35b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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