news.pennstatehealth.org

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:65:0c:d0:08:b2:d7:7a:c6:53:07:6e:ef:87:48:10:2b was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.pennstatehealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e9:65:0c:d0:08:b2:d7:7a:c6:53:07:6e:ef:87:48:10:2b
Serial Number (int): 340756967842426352538180937476822675230763
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:9c:89:9e:ac:24:55:43:f4:03:2e:50:02:fe:b7:ef:94:e7:e5:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:19:22:cf:3e:c4:62:d8:17:e4:3f:21:2f:b3:39:8d:10:8d:85:3b
Fingerprint (sha256): 64:6b:b6:df:1b:77:25:43:ac:d5:a1:fc:1e:fd:e5:25:57:81:c2:69:4a:e7:98:b4:2c:eb:89:4d:d3:b9:9b:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.pennstatehealth.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.pennstatehealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.pennstatehealth.org
pennstatehealthnews.org
psh-newsroom.vmhost.psu.edu
www.pennstatehealthnews.org

Other certificates including the domain name pennstatehealth.org

(limited to 100 certificates)
pennstatehealthnews.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
www.pennstatehealth.org
www.pennstatehealth.org
thisispennstatehealth.org
careers.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
this.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
medgroup.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
pennstatehealth.org
careers.pennstatehealth.org
pennstatehealth.org
*.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
pennstatehealthnews.org
esteem.pennstatehealth.org
cc.pennstatehealth.org
*.pennstatehealth.org
ufc.pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
careers.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
esteem.pennstatehealth.org
this.pennstatehealth.org
www.pennstatehealth.org
news.pennstatehealth.org
careers.pennstatehealth.org
pennstatehealthnews.org
careers.pennstatehealth.org
news.pennstatehealth.org
pennstatehealthnews.org
ufc.pennstatehealth.org
pennstatehealth.org
engage.pennstatehealth.org
thisispennstatehealth.org
medicalupdate.pennstatehealth.org
careers.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
engage.pennstatehealth.org
yourcare.pennstatehealth.org
careers.pennstatehealth.org
engage.pennstatehealth.org
ufc.pennstatehealth.org
medgroup.pennstatehealth.org
pennstatehealthnews.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
pennstatehealth.org
thisispennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
prowellness.childrens.pennstatehealth.org
psh-newsroom.vmhost.psu.edu
pennstatehealth.org
survivorship.childrens.pennstatehealth.org
pennstatehealth.org
news.pennstatehealth.org
engage.pennstatehealth.org
medicalupdate.pennstatehealth.org
news.pennstatehealth.org
www.pennstatehealth.org
engage.pennstatehealth.org
cc.pennstatehealth.org
news.pennstatehealth.org
pennstatehealth.org
esteem.pennstatehealth.org
veteranjobs.pennstatehealth.org
this.pennstatehealth.org
veteranjobs.pennstatehealth.org
veteranjobs.pennstatehealth.org
news.pennstatehealth.org
veteranjobs.pennstatehealth.org
medicalupdate.pennstatehealth.org
engage.pennstatehealth.org
news.pennstatehealth.org
survivorship.childrens.pennstatehealth.org
ufc.pennstatehealth.org
careers.pennstatehealth.org
cc.pennstatehealth.org
esteem.pennstatehealth.org
survivorship.childrens.pennstatehealth.org

Certificate

The complete raw certificate details for news.pennstatehealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdM1ntaVRam+BQEvK7n
a1QLfwdxPr97OlQzzm2utzFprjZcEiSILmrjGzrpE2p+8VwQ8qIZO15fUFwI9pVY
boZ2juCvz0ibLN/BbC+0JrhlovQNMGZ/B7caY2I1XKAihJWRl5B+zaw0ms/uHo0c
n6LjgA/9wEiXei8X6MfaEpdWk7y2nX+ILpSf+sxRkkWAc+PfChAK4zGC/jOC+MgE
SfmQqnZXYqDCsLAKM8uyCqNk3Y8P05bTC8YUiSB3Lcnm0cLwHlo1/us0yV+pupF6
HGW0BV4Ujl2h7E8lMc8B0r7v3k0IYAZfQO6pw6Oj0wCM9XYFT0+vDhuXWqNIBZCQ
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340756967842426352538180937476822675230763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 23:19:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 23:19:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.pennstatehealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24564840046973815517102313319942885757212021743045543777822794196582758823384153400805040161407463964599275705982727220446389762884470378788738848741960338252131403063363522749627353482774172715215995640221197206583735809925016579892119130225470526702119920915328992259726598172135668671066640320984923318448645023834225616661486467404698731918717066298473204775470410044996685781155390179194275447682483820907334803994827017520807896966876847938422086206620625386873932661663012528610877615260154661373947361616145279793944970629102627507147439692121388606896852337863728138753539817672078273258210860670785516769337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e89c899eac245543f4032e5002feb7ef94e7e5bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.pennstatehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psh-newsroom.vmhost.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennstatehealthnews.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9fd56a270000040300483046022100b1c63f522b822c0ca5751388992674488579da6b3c28a909849e945359305a55022100e26ed2450339f6260efd8863ad4d318d523f0fbc513ea33eec299e69bfedbd8a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9fd56a5f0000040300473045022100e3879ce086047e50d5ba07df67b55a62669140147933779c83f39082cc4cfb0a02204ced08ab05e5326280faf7fca75eb04d791f52651f7cb050bafd55b6f39f4f3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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