odcepivupecp04.montefiore.org

- Montefiore Medical Center -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:77:16:ca:0a:70:32:06:2f:96:f9:0c:d7:65:3a:90 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Montefiore Medical Center

Organization: Montefiore Medical Center
Organization unit: Epic
State / Province: New York
Locality: Bronx
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:16:ca:0a:70:32:06:2f:96:f9:0c:d7:65:3a:90
Serial Number (int): 5935257529635902219999977118875597456
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 18:ab:ad:4c:8b:4f:37:07:7a:dd:d9:bc:80:a9:11:1c:42:d0:ef:ad
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2e:77:7a:90:de:5f:04:24:df:9a:4c:25:80:c7:a6:82:4b:a3:57:3f
Fingerprint (sha256): 0b:24:66:1d:b4:e7:7d:10:29:fc:6d:da:78:d9:65:11:59:05:50:10:d4:66:03:b1:03:32:21:79:7f:45:6a:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate odcepivupecp04.montefiore.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odcepivupecp04.montefiore.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odcepivupecp04.montefiore.org

Other certificates including the domain name montefiore.org

(limited to 100 certificates)
Montefiore.org
vetlredcapdb04.montefiore.org
cewepic.montefiore.org
secureaccess.montefiore.org
es2013.montefiore.org
mail.montefiore.org
mychart.montefiore.org
testeyecarepacs.montefiore.org
epicecp8.montefiore.org
aspera.einsteinmed.org
jhltreksdev.montefiore.org
epfmobile.montefiore.org
soapapps.montefiore.org
mobile.montefiore.org
shares.einsteinmed.org
montefiore.org
xendirectordr.montefiore.org
welcomeweb.montefiore.org
vpn.montefiore.org
magicweb.montefiore.org
mail.montefiore.org
odcepivupecp04.montefiore.org
CPNremote.montefiore.org
epicdrrptsvc.montefiore.org
careers.montefiore.org
ybcccwc.montefiore.org
vetlredcapfe10.montefiore.org
verification.montefiore.org
timecapture.montefiore.org
secureaccess.montefiore.org
timecapture.montefiore.org
odcepivutecp02.montefiore.org
pacswebtest.montefiore.org
xendirectordr.montefiore.org
portal.montefiore.org
print.einsteinmed.org
ps360mobile.montefiore.org
ttxt.montefiore.org
carelink.montefiore.org
whsepicsro.montefiore.org
mail.montefiore.org
www.montefiore.org
www.montefiore.org
clg.montefiore.org
clg.montefiore.org
mychart.montefiore.org
portal.montefiore.org
ctmsstg.montefiore.org
mail.montefiore.org
www.einsteinmed.org
YBCCCP8.MONTEFIORE.ORG
cewepic.montefiore.org
clg.montefiore.org
vpn.montefiore.org
nsauth.montefiore.org
rifc2010.montefiore.org
YNKSV1APXCL02P.montefiore.org
printers.montefiore.org
timecapture.montefiore.org
odcepivupdbasvc.montefiore.org
secureaccess.montefiore.org
mobilepacs.montefiore.org
radiology.montefiore.org
citrixpoc.montefiore.org
odcepivupprdsvc.montefiore.org
ecp10.montefiore.org
mobilepacs.montefiore.org
servicedesk.montefiore.org
mmcnsauth.montefiore.org
mail.montefiore.org
gwn.montefiore.org
medstaffmeeting.montefiore.org
careers.montefiore.org
crma.montefiore.org
mail.montefiore.org
sapfmqas.montefiore.org
remote.montefiore.org
gwwa02.montefiore.org
hhavpn.montefiore.org
mmcnsauth.montefiore.org
amis.montefiore.org
ykepisc.montefiore.org
bahnhhtraining.montefiore.org
portfolio.montefiore.org
ctxnslab1.montefiore.org
portal.montefiore.org
portal.montefiore.org
testeyecarepacs.montefiore.org
carelink.montefiore.org
npce.montefiore.org
Bahnhh.montefiore.org
gwn.montefiore.org
odcepivuprptsvc.montefiore.org
pay.montefiore.org
nsauth.montefiore.org
bahnhhtraining.montefiore.org
cmoremote.montefiore.org
secureaccess.montefiore.org
hc.montefiore.org
npsnf.montefiore.org

Certificate

The complete raw certificate details for odcepivupecp04.montefiore.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzexF66FEm9KHKoBNuD9f
pjOAEESO4YM4cCv8Sg8DEXuZ3yNpGa3m2eY+rW6hotWoZk1g+3KmpPDkET5AyRnn
O/ne2CJA08bnDj02FG9oZaxi/vT4v8bO8XLcJ4Rv9GXV5jccV83hPhaeT+CuGKRr
RSaSXz2hGcWjGrxQSaheH6ozUqevbyCl/joHm58dQz/jLMu/6P3VJ8Ppbkmy9I0L
E0tWSOSxhmRtCCE1NKc2e9UqFlrmqFzgExqumGGCAzEHQpr83k28Zfnv+9KAxvgQ
5BRnspe4Z0bHjZFjJkpI2XfE2zv3qX18EMVKYT19IyBf7+t9PiaMfx6/vK2+IM3F
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5935257529635902219999977118875597456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montefiore Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Epic'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odcepivupecp04.montefiore.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25995363139217135613246265895418009586309200099139247678609998485711730860176597594203242738095399495441506607104954366419163597657842074284503415470379580755514350730549901461857395157219360065407476469279744141911279213097781875858977809618072522181272836795120507049115457208931144142072851368153448725729117485528345176784086888225061130799988065374802277812735703351922373549061070486835826138932253689622080616940050327048298421829439247702795009010475490663278057680066782789265317440090269548188135784562570339090007114410919947814129290688449406496152727343274193835417285509965260019960508935316639927092661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18abad4c8b4f37077addd9bc80a9111c42d0efad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odcepivupecp04.montefiore.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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