primehealth.one

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:a4:a5:53:44:a5:5f:3b:a0:1e:6a:5a:d6:8b:24:fe:6c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=primehealth.one

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:a4:a5:53:44:a5:5f:3b:a0:1e:6a:5a:d6:8b:24:fe:6c
Serial Number (int): 379973973292936401985046292458876422127212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:26:0a:0d:4e:80:ea:3f:1e:2f:df:c3:39:5e:71:19:2a:9e:51:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:bf:e8:80:7a:6d:3f:3c:88:bd:23:74:15:7d:82:92:20:bc:08:3a
Fingerprint (sha256): 71:f0:f3:53:fa:cf:5d:34:00:79:7e:c2:a2:7c:1d:85:c3:0e:d1:fc:78:8a:ee:0b:bc:78:62:3b:aa:c4:d9:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate primehealth.one

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primehealth.one

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

primehealth.one
www.primehealth.one

Other certificates including the domain name primehealth.one

(limited to 100 certificates)

Certificate

The complete raw certificate details for primehealth.one in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2CZFA6xl7IgwOFj/GpF
A13Naeep8lGl6mcqMTsZrV1kCrNksMv7AdRwT1f0PirmLXqEkzFJSAd7GhZC4yE9
2lWBVZ86lZs76fC97aWEsVy58IJy3KrpwL8/ifpwYb2p6LMVMZBZNWYYLld3qVAQ
osr1eq9olbmlSmlw2L1xTamzftl+myICinx7nLaP76eCf7vLsrGlwDU+dAXLZQhf
WYyKGmU6sU9TVyR1DnXM0rRFV9b4Bs1+Ao021Tn2lt1+4KkD6mqMBsvTjFODZ3kI
cWLhNH5mGOKyGpEHlhXZke0cXrt+KxZXsZ+YHvae6RRAeLsXQqQ+/HWfmhtTzLpv
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379973973292936401985046292458876422127212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 15:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 15:51:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primehealth.one'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25674010138672902732269561236308300727852271038595690081269099959654729954967877327363024377260477929497970978027430138866415562135043005905161386111266695331306540585014767308794685417417860181203860242029289043772127548426707904622023166375275909652369763474726688916506295684051470838469402440991285863010491774761246171613477680245727383023854078117903322112793445957209146572934867993701806962820140904343550601941789038371507414318524677008785846621921642645605940748265126245458965556221185946502865850769219416488994020578393247882993973716416583702474974912768534393794537589844982716107001663758465964339149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d260a0d4e80ea3f1e2fdfc3395e71192a9e5152
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primehealth.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primehealth.one'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001863c3cf0430000040300483046022100821d36b772e5bb2f460d2b4008016c7fde1bb69526afe9d3f03031a02001d59b022100f71009e79bbcd90d1101f379bbdedab8257bdbaca151ca7192766a4c39bbaeb8007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001863c3cf0380000040300473045022100f6eccf8360c96e5dc0c2bc8a4bce499065eec45819366db39337514611df463902207f578e4963e8045c5c127579b463fc1ea2e7743ce0984a997b1c99ed7957ab0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069579061874d7c4c7eacb9404702cee469244438128c6d8e6022c835149de49c153a1d2bdb0a9ab987a25c9f66db83a7beac96ad74bc4ecca3bd690cedb739b2b2c1604e1a9a8a3de3ee8fa6c5822f93a44a1673a6a665c04e2cd5ccc49028461facb216bb2aaf3aa3d5805eda8d158543c6b6bccbd29f0e3c441024044ab7fe83cee6bbf489f09796ca59c6efa9af700d806e9424e88adece9a230f3f0a926781b671b9311ed05c8ad74e29fc399353f3914dc63ef8bb0dde7f4357e99a0bf3095031e5bf958427c2ce5c80f6e88bde8261bad2f93ffc0dd3ceac82decf3ac5299bd161f147bbe2d0518347d01ad4d3c01101d19344250cacdbd9d41bd5b11b