premier.org

Issued by R3

About this certificate

This digital certificate with serial number 04:89:90:6a:fe:ab:2e:18:e0:85:b5:9c:04:70:fd:05:bc:b7 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=premier.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:90:6a:fe:ab:2e:18:e0:85:b5:9c:04:70:fd:05:bc:b7
Serial Number (int): 395259792375363910160816229177037993393335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0e:84:bb:1d:2f:38:02:0f:8b:80:f0:eb:10:42:37:42:5f:96:96:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:8a:19:31:c8:92:2d:0c:a2:47:4e:99:29:2d:b5:c0:1d:f1:f4:77
Fingerprint (sha256): 6e:52:d9:2d:ae:65:db:08:7d:ea:b1:ba:c7:5f:c6:fb:9e:cb:2f:01:d7:95:8b:61:a2:21:2a:72:56:1b:0f:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate premier.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premier.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premier.org
premieramerica.com
www.premier.org
www.premieramerica.com

Other certificates including the domain name premier.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for premier.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395259792375363910160816229177037993393335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-14 14:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-12 14:59:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premier.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3276625760162961187728892828982049514881035298811915542706173150342734237930705171422053840152803368688224576814224945528031548047073175053789355531444076640603570664044283091956349714129080683507034116748747138871219430926233393816880850543927888756961044320587323445314764034439624778063136548993026159746665627189662892253936631797134325760503803095585146678592905723599924142125493003512685989819332139373658834077147409012605841268518374322161984779139161661154247516592388763733360681201054824324870744353052389284655783974638715779210347517060424648666491499142829850264548186747677747847846280668401560842602295928221841333441250720978698586797614723308608615932848272375999195728007672861419595958409890849612656714201853015836455947812345009212801927016315654425735136191422121401877939099969228896214458586556602054255016800497592718016091774836425376789812567716666627938612480016589547316711762691723961367019799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e84bb1d2f38020f8b80f0eb104237425f969682
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premieramerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018476ddc5dc00000403004630440220766b0ad7123fa31d6f2617be244b3f95d092089d8a136fd92948df12cca1a5f902206d4cdf44ad154e127ff88d2ffa861bd78c3e5d461e9ce832fe9046ba579b2090007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018476ddc5e400000403004730450221009f3b3e75830a7899d123d6b4d1f61cb1b821068b3e31689c6222aff371b624ed02203a40268d0ed8d588555e27da9197e365c8c437c9268cc6147d6b0a819fe99468
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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