FMOLHS.org

- Our Lady of the Lake Regional Medical Center -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3f:b7:86:74:1b:04:d2:67:99:26:d9:54:16:d5:84:98 was issued on by GeoTrust Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Our Lady of the Lake Regional Medical Center

Organization: Our Lady of the Lake Regional Medical Center
State / Province: Louisiana
Locality: Baton Rouge
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:b7:86:74:1b:04:d2:67:99:26:d9:54:16:d5:84:98
Serial Number (int): 84694281101277239003927459890627708056
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a3:27:8b:75:1d:4c:c5:fb:cf:60:ed:b0:72:b6:00:34:80:91:6c:9a
Fingerprint (sha256): f9:f4:d0:12:63:7e:fe:6e:7f:9e:67:5a:29:3f:fd:c2:31:a0:7b:e7:e6:e1:94:8f:19:98:1a:d3:d5:0e:dc:33

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate FMOLHS.org

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for FMOLHS.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hhlpatient.com
stfran.com
stfranpatient.stfran.com
stfranpatientuat.stfran.com
www.stfran.com
stehpatient.steh.com
stehpatientuat.steh.com
www.steh.com
steh.com
lakepatient.ololrmc.com
www.ololrmc.com
lakepatientuat.ololrmc.com
ololrmc.com
lourdespatient.lourdesrmc.com
www.lourdesrmc.com
lourdesrmc.com
lourdespatientuat.lourdesrmc.com
staff.fmolhs.org
admin.fmolhs.org
www.fmolhs.org
adminuat.fmolhs.org
staffuat.fmolhs.org
FMOLHS.org

Other certificates including the domain name FMOLHS.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for FMOLHS.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfwKkWjnIeKBzPbd4VN3
xOM4eyY6+KjiWw7GE+I54FYZ91eJa87rIRlw5nMuaiSOThEtd/UxdswBHIuoI1J1
plYhaDGLErJK1l8lPSHwfZ+OuSCCBHnQzc9CSd3PB/boJqF4a29tuR4Jv8fhLgnO
wTiErjD2/S0zX0Df1j1VB0jXR8ww23Hi/2/m09QFTxiuzPBoLDybLx+Al7dz23+5
X+Dnn0/d1AT6iXe5DL0uIJfT0pM/Rp7lMu7Gccies2+Gt8qHakzKeNINnwfrO3+L
//7Hl832YV/Pjc0JRzaXwzMwxQ1QBsnE18mn0t4A1m9Ym5Wh8UUvmsC2Cb0RdYLP
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84694281101277239003927459890627708056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baton Rouge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Our Lady of the Lake Regional Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FMOLHS.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19943700067678610737541637769678089146148394444140692260002902042066665024651331210508759947850369292224271929516028368956447104011208821370921584608546391387462117128728401033235459594846179314851130388922784093685101447847527195841487961762431434579195181025666105891962167768807665396702473007703225998726674098094799428223585945630319390253547076144299644837944488282977580848392552825838409160028381806269782652449296409149003194351741543220243289892717383036253675330005379456301089673455615375216958100444363043129317262793968051170805331072656091016098964889808591680625843288346360688363375821816785549840217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (464 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhlpatient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfranpatient.stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfranpatientuat.stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stehpatient.steh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stehpatientuat.steh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakepatient.ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakepatientuat.ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ololrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lourdespatient.lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lourdespatientuat.lourdesrmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.fmolhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmolhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmolhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuat.fmolhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffuat.fmolhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FMOLHS.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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