lftgp.fmolhs.org

- Franciscan Missionaries of Our Lady Health System -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0d:86:83:c3:eb:5c:57:5f:75:b5:27:fc:16:1f:47 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Franciscan Missionaries of Our Lady Health System

Organization: Franciscan Missionaries of Our Lady Health System
State / Province: Louisiana
Locality: Baton Rouge
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:86:83:c3:eb:5c:57:5f:75:b5:27:fc:16:1f:47
Serial Number (int): 70228141571242003869418004904550215
Serial Number lenght: 116 bits, 15 octets

SubjectKeyId: bb:42:92:87:32:0a:3a:e5:25:08:62:d8:b8:94:f1:ce:a5:55:85:31
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c9:eb:6e:95:34:d8:5f:47:52:8b:75:be:f5:1a:de:cf:77:fe:73:99
Fingerprint (sha256): 97:1c:27:b9:c0:54:d6:4f:9a:e2:02:5b:81:a1:0b:7c:18:c8:69:9e:b4:69:75:5d:89:c0:8a:1c:40:e4:f6:3c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate lftgp.fmolhs.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lftgp.fmolhs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lftgp.fmolhs.org

Other certificates including the domain name fmolhs.org

(limited to 100 certificates)
xenmobiletest.fmolhs.org
nphaikuconfig.fmolhs.org
enroll.fmolhs.org
video.fmolhs.org
mychart.fmolhs.org
kronos.fmolhs.org
airstripone.fmolhs.org
support.fmolhs.org
btrexpwye01.fmolhs.org
FMOLHS.org
powerplans.fmolhs.org
support.fmolhs.org
www.fmolhs.org
help.fmolhs.org
external.fmolhs.org
vpsxtest.fmolhs.org
visage.fmolhs.org
mobile.fmolhs.org
www.ololrmc.com
cardioserver.fmolhs.org
Mail.Fmolhs.org
alerts.fmolhs.org
careconnect.fmolhs.org
rmpportal.fmolhs.org
access.fmolhs.org
external1.fmolhs.org
haikuconfig.fmolhs.org
psonetest.fmolhs.org
vpn.fmolhs.org
access.fmolhs.org
support.fmolhs.org
FMOLHS.org
access.fmolhs.org
connect.fmolhs.org
securemail.fmolhs.org
ololvoalteiris.fmolhs.org
fs.fmolhs.org
gptest.fmolhs.org
FMOLHS.org
access.fmolhs.org
selfcheck.fmolhs.org
mychart.fmolhs.org
Mail.Fmolhs.org
onbase.fmolhs.org
alerts.fmolhs.org
globalprotect.fmolhs.org
www.fmolhs.org
Lilatest.fmolhs.org
video.fmolhs.org
vpn.fmolhs.org
help.fmolhs.org
external.fmolhs.org
psone.fmolhs.org
rmpmanagement.fmolhs.org
enroll.fmolhs.org
vpn.fmolhs.org
Mail.Fmolhs.org
corepoint.fmolhs.org
btrexpwye01.fmolhs.org
connect.fmolhs.org
corepointtest.fmolhs.org
external1.fmolhs.org
a2go.fmolhs.org
mychart.fmolhs.org
fs.fmolhs.org
careconnect.fmolhs.org
storefront.fmolhs.org
careconnect.fmolhs.org
video.fmolhs.org
vendor.fmolhs.org
sharefile.fmolhs.org
accesstest.fmolhs.org
fs.fmolhs.org
Lila.fmolhs.org
airstripone.fmolhs.org
FMOLHS.org
healthviewtest.fmolhs.org
footprints.fmolhs.org
Mail.Fmolhs.org
external.fmolhs.org
vpn.fmolhs.org
btrexpwye01.fmolhs.org
storefront.fmolhs.org
securemail.fmolhs.org
airstriponetest.fmolhs.org
cardioservertest.fmolhs.org
footprints.fmolhs.org
lftgp.fmolhs.org
alerts.fmolhs.org
fs.fmolhs.org
kronosdowntime.fmolhs.org
btrexpwye01.fmolhs.org
visagetest.fmolhs.org
alerts.fmolhs.org
ahttest.fmolhs.org
storefrontgw.fmolhs.org
vpn.fmolhs.org
moveitdmz.fmolhs.org
myhealthrecordsupport.fmolhs.org
selfcheck.fmolhs.org

Certificate

The complete raw certificate details for lftgp.fmolhs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGhfkS53ftJ5XP2hKpqR
wsVCbAm2lUMex1SFlgyE9TONMm9yxdgewB/QQiF8DR97HjYFIKYnIVQucj/EgVTG
CxqJHChJsns3RS5V2dRDQljlI5yqcf9BwvUUuMf1EYKKIIMipL+BBoBotWQlnGmG
X1eUPdZPax5q338vmu16cgMXZ0niwJwe30Sx6YJ7AdJTReusz2tLKIpyh5AYgczC
/l93gGJN8lfQqkY6drmecY/bMFgqbQg0np0hXpsAP1gcw/sie5jw34T6UdaI3wXf
g4BTnMGunf5CBeM8Fb+3PzgT81S+qQA2UifBmwchh2XEzaSR4MVaYOel4qV2DVlt
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70228141571242003869418004904550215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 19:14:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 19:14:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baton Rouge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Franciscan Missionaries of Our Lady Health System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lftgp.fmolhs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21764456851105127785738658006972022618716990239877414963459494446880870012432047113487133098066274671359352172956079120439196333534220023095055772146563471524640190685024455282706057498158636596229843485458371771895955197173112844487550825224148376750987482467837565196861714243358355743210644729942218501943787630768496908691910517521267556963684852753783529026804021041119339587748427913181620197894170681293626254171606252347574619200609119992703507333273621423959378081208894496882437216919731058842668747303088034934608457347917725662593853328898099727570882664585497567896502705377312261011442074636379724803497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb429287320a3ae5250862d8b894f1cea5558531
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lftgp.fmolhs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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