pchelp.llu.edu

- Loma Linda University -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 59:3b:52:13:cb:98:d5:0f:d4:b2:e7:24:b7:56:50:e5 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Loma Linda University

Organization: Loma Linda University
Organization unit: UNA
State / Province: California
Locality: Loma Linda
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:3b:52:13:cb:98:d5:0f:d4:b2:e7:24:b7:56:50:e5
Serial Number (int): 118609301865443874600922357152850792677
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 24:89:97:3b:ad:e3:d7:da:4c:95:63:ed:14:99:2f:51:b4:14:aa:80
Fingerprint (sha256): 45:df:54:9f:9b:b6:8f:85:78:38:c1:35:53:84:97:8c:fb:dd:7a:41:2c:47:eb:f9:b3:0a:4e:77:d4:e4:3c:3d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate pchelp.llu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pchelp.llu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pchelp.llu.edu
pchelp.llu.edu

Other certificates including the domain name llu.edu

(limited to 100 certificates)
scholarsrepository.llu.edu
vfair.llu.edu
lluonline.llu.edu
peoplesofthcm.llu.edu
alertus.llu.edu
nextcatalog.llu.edu
sdweb.llu.edu
admissions.llu.edu
banneradmin.llu.edu
pwm.llu.edu
bannerxeadmin.llu.edu
cas.llu.edu
admissions.llu.edu
libguides.llu.edu
vfairs.llu.edu
ssweb.llu.edu
cdm.llu.edu
peoplesoftdev.llu.edu
ceonline.llu.edu
bannersso.llu.edu
lluh.org
webvpn.llu.edu
era.llu.edu
vfair.llu.edu
vfair.llu.edu
mypeoplesofthcm-ren.llu.edu
mypeoplesofthcm.llu.edu
www.llu.edu
catalog.llu.edu
sip.llu.edu
webvpn.llu.edu
ewe.llu.edu
banneradmin.llu.edu
home.llu.edu
succeed.llu.edu
mypeoplesofthcm.llu.edu
*.catalog.llu.edu
myllu.llu.edu
courseval.llu.edu
eracert.llu.edu
wingedfoot.llu.edu
scholarsrepository.llu.edu
*.catalog.llu.edu
mypeopleportal.llu.edu
SDWEB.llu.edu
email.llu.edu
catalog.llu.edu
cdm.llu.edu
*.catalog.llu.edu
degreeworks.llu.edu
skyspark.llu.edu
eagle-i.llu.edu
peoplesofthcm.llu.edu
mastercalendar.llu.edu
virtual.llu.edu
upkdevpri.llu.edu
home.llu.edu
llucatalog.llu.edu
anatomypr.llu.edu
upktest.llu.edu
apiportal.llu.edu
sahpvalt.llu.edu
peoplesoftses.llu.edu
sip.llu.edu
currentcatalog.llu.edu
bannersso.llu.edu
ssweb.llu.edu
peopleportal.llu.edu
mcmail.llumc.edu
home.llu.edu
peoplesoftdev.llu.edu
peopleportal.llu.edu
wiki.llu.edu
sdortho2edge.llu.edu
chdmm.llu.edu
nextcatalog.llu.edu
chdmm.llu.edu
eagle-i.llu.edu
lluh.org
webconnectrtmp.llu.edu
bannersso.llu.edu
peopleportal.llu.edu
admissions.llu.edu
lluprint.llu.edu
webvpn.llu.edu
admissions.llu.edu
*.lluh.org
virtual.llu.edu
upktest.llu.edu
upkpri.llu.edu
bannerappnav.llu.edu
www.llu.edu
dash.llu.edu
scholarsrepository.llu.edu
peopleportal.llu.edu
scholarsrepository.llu.edu
pchelp.llu.edu
llucatalog.llu.edu
admissions.llu.edu
bannerappnav.llu.edu

Certificate

The complete raw certificate details for pchelp.llu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+QbhJbD6h4wLtQMtKyf
38HJBL2QSkXBsEHUZ0ITKuf2z3inZnUVlFTED42OC6o4mvMCbnvoufkcUOIcrUTT
RrvVBNtpBhAM3gG8ksOZ8tKADET01xCkfqY5boCf/D0GjAUizXjjgbyuzCTCS8UM
qRkRyuIH1Nl7w+q1rDb6QKGNrmDonwVedkK03BzsOjTWv1KD9NWxk1L1fyIIHda9
ZxfhX+n/hUFBGaiDQWNC/quhyPm+YXsOliYNJu9bm5jl8FMwtsp4uAwTeWYfNTYo
9O/GihyWAnpgpFcQjZugWAgTgWJvrD4iswpAqpwRDg5kU9CGMS5rZFKxmALSrXlf
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118609301865443874600922357152850792677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Loma Linda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Loma Linda University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UNA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pchelp.llu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21194280925921903422555612727070238340214751749765016917581349580539580053304032890491921326031510778234623127769242125252915328447351665050886409203416349275781562876647334401429086742330648677074994830753793493873503411913104952328393318181967102064326146905881158806463933935919320261056323757119002837086314209189460966107726549368918327107481459851490690644836355855429118663011139655249051288518562891069380181790372077404127325270669927431456896194946635676393749265956088300085168187861142708552574500675299320381499139031436620406423031806388310741616794650183010225969484175151046033406952820270411728641883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pchelp.llu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchelp.llu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a902003c60000040300473045022100d0c71b7671fd9022b33d9fdcf8036422fea4358d7d4863df1c826ba522d1fcc7022011584516af01ec49c13e4be07eacc6974f2d211209d630cc74bdfd2b0e17640a007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a902003fa00000403004730450221008c3d83093f4b1fea7c3d1b891f479e7c9274ae4cc2ffe066ed5c6659c3a3849a022074bf5aea6573ed6e9dbfc6060cd83f8353755066950dc702091d9271bda8fbf1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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