visage.jax.ufl.edu

- Shands Jacksonville Medical Center -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 31:45:c4:4c:19:90:c5:85:00:00:00:00:50:e9:ce:29 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shands Jacksonville Medical Center

Organization: Shands Jacksonville Medical Center
State / Province: Florida
Locality: Jacksonville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:45:c4:4c:19:90:c5:85:00:00:00:00:50:e9:ce:29
Serial Number (int): 65494421658234591013320121415157534249
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3d:3c:53:9f:8b:8d:01:0e:8b:5d:6a:ce:5b:10:84:3a:6c:ee:43:ca
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 68:f3:cc:d3:b3:85:bb:c0:35:95:31:71:ae:da:2d:45:0e:23:74:af
Fingerprint (sha256): 00:18:4b:42:af:55:d8:26:31:00:91:db:18:53:ef:a0:3b:ec:fa:b7:28:19:05:17:82:8f:8c:8c:2c:05:97:f7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate visage.jax.ufl.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visage.jax.ufl.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visage.jax.ufl.edu

Other certificates including the domain name ufl.edu

(limited to 100 certificates)
Intranet.uff.ufl.edu
connect.ufalumni.ufl.edu
*.forensics.med.ufl.edu
baciak.mse.ufl.edu
visage.jax.ufl.edu
copnt29.copdom.cop.ufl.edu
operations.onecampus.com
test.sbvdr.admin.ufl.edu
billing.healthnet.ufl.edu
ipi.education.ufl.edu
icw.cise.ufl.edu
ac.cop.ufl.edu
www.eng.ufl.edu
my.ufscc.ufl.edu
amploadvance.com
ase.ufl.edu
incapsula.com
jainlab.cise.ufl.edu
files.software.ufl.edu
smtp02.uff.ufl.edu
software.ufl.edu
hrfix.erp.ufl.edu
dev.apps.ufl.edu
*.erp.ufl.edu
web-dsoapps-lin-01.linux.dhnet.ufl.edu
*.ehs.ufl.edu
container.education.ufl.edu
dev-els3.courses.ufl.edu
tonks.mse.ufl.edu
apps.uflib.ufl.edu
webservices.it.ufl.edu
cpe.eng.ufl.edu
research.dwi.ufl.edu
cpass.mse.ufl.edu
www.eng.ufl.edu
lti.erp.ufl.edu
bats.businessaffairs.ufl.edu
qat.riskmanagement.it.ufl.edu
securedns.planmygift.org
charges.at.ufl.edu
cpe.eng.ufl.edu
trust.jou.ufl.edu
portal.helpdesk.ufl.edu
canaveral.coip.aa.ufl.edu
www.engaged.library.ufl.edu
test-ycrs-utd-app-rh7-01.linux.dhnet.ufl.edu
dc.phys.ufl.edu
help.em.ufl.edu
facultyblogs.law.ufl.edu
www.ortho.ufl.edu
scanning.at.ufl.edu
xplan-xfer1.geoplan.ufl.edu
ccoi.education.ufl.edu
*.aging.ufl.edu
dev.talx-proxy.infr.ufl.edu
my.shcc.ufl.edu
forge.ctrip.ufl.edu
test.migrate.mail.ufl.edu
www.ufedge.ufl.edu
pdf.erp.ufl.edu
login.ufl.edu
flbog.sip.ufl.edu
ecology.group.ufl.edu
advweb.uff.ufl.edu
eye.ufl.edu
interactive.floridamuseum.ufl.edu
hswdmz.shands.ufl.edu
cce-coa-data.coastal.ufl.edu
faculty.eng.ufl.edu
myicbr.biotech.ufl.edu
clintox.cop.ufl.edu
onbasetest.shands.ufl.edu
sumerlin.chem.ufl.edu
sbvdr.admin.ufl.edu
www.law.ufl.edu
pharmacy.ufl.edu
www.bme.ufl.edu
floridablue.center.ufl.edu
innovate.research.ufl.edu
www.ece.ufl.edu
helpme.xray.ufl.edu
cloud.it.ufl.edu
essentialsofbusiness.ufexec.ufl.edu
*.ctsi.ufl.edu
*.education.med.ufl.edu
vetforensics.med.ufl.edu
plannedgiving.zaytuna.edu
datapower-sb.ad.ufl.edu
test.campusmap.ufl.edu
service.gatorlink.ufl.edu
*.bugs.ufl.edu
onbase.pharmacy.ufl.edu
vmconsole.hosting.it.ufl.edu
at-vcs02.video.ufl.edu
sp.uff.ufl.edu
internationalcenter.ufl.edu
dev.student.ufl.edu
test.epi.ufl.edu
securedns.planmygift.org
psigw-tst.erp.ufl.edu

Certificate

The complete raw certificate details for visage.jax.ufl.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1WYwCoXKX+OixzEwnld
THdQV/nSr1AQIm7muhpYEhfgAs+mmoQWibQlfUHIAXYB8Uv0D/tqxKJk1FM4eABm
7+Lx2Y5BVK0IiWDU/QJShrFJpfA7Z8HPIMblcs5TCKjZPccxzGDCCXODEAIXyHHR
Aaifd8g4cx8Ba9/XW+tx/3U4PqogEWZOPY5pyqKow997SWOMM7CB/FXZWM1BfU3F
xE+3OeBiv2O0lf2sRa+4mq8sfUnPTNFym3T4LIlT8aMFqjZhELHDggRBq3b5FYm8
cXxeXQRbeu2HzvUF1vavmBBx4aVhGjAdJ00aL2wTKr+9Uj0GGw2xAhlrC9rOSAgy
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65494421658234591013320121415157534249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 21:38:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 22:08:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shands Jacksonville Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visage.jax.ufl.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19609146566892124717142708480571818474341866316031180548288961827942696222204072327685861340589908800427725896298830987036665030289831478452168019447266476517079665603416429304714006598222116702857418078000526470038784462986395555558659992104014465409431688533527943977570064193482324908769208921606368575258006133490165224839583464208557004372247044848631488659026694422563535632828587417896844118849986585678018665932695790230520349869264781560328339912327515920235268104838772885148048217697466181883351570963068271144396941897844397255715019285591069748723849234399644797265592970308991852185284104778681174995667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visage.jax.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d3c539f8b8d010e8b5d6ace5b10843a6cee43ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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