access-pre.truvenhealth.com

- Merative US L.P. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:76:e1:60:db:50:4c:e3:46:04:70:ed:35:fd:8e:d6 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Merative US L.P.

Organization: Merative US L.P.
State / Province: Michigan
Locality: Ann Arbor
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:76:e1:60:db:50:4c:e3:46:04:70:ed:35:fd:8e:d6
Serial Number (int): 16567998194664817438986705258455862998
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e6:26:de:d9:da:1e:e1:51:e8:72:22:dd:03:79:7a:c6:5e:f0:18:c7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 99:a4:69:0b:ba:33:52:99:b5:a8:cd:a7:9b:60:61:c0:20:6d:44:2c
Fingerprint (sha256): 0f:a2:fe:61:42:25:c4:bd:9a:71:e3:42:8a:c9:38:1d:69:fd:8f:1d:fd:da:c2:98:75:2b:8b:82:18:41:5e:c1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate access-pre.truvenhealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access-pre.truvenhealth.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access-pre.truvenhealth.com

Other certificates including the domain name truvenhealth.com

(limited to 100 certificates)
cxdatest7.truvenhealth.com
thfedidu.truvenhealth.com
opssolutioncenter.truvenhealth.com
wafhb.truvenhealth.com
transit.truvenhealth.com
marketexpert-hanys.truvenhealth.com
eiperformance.truvenhealth.com
ops54r01.truvenhealth.com
as09.truvenhealth.com
thfedididp.truvenhealth.com
irngote-prod.truvenhealth.com
servicesnavigator.truvenhealth.com
medev-director-devns.truvenhealth.com
dem54r01-ilb.truvenhealth.com
patientregistry.truvenhealth.com
sftp-uat.truvenhealth.com
ibmcdqualitymeasure.truvenhealth.com
ibm.com
sre53r01.truvenhealth.com
access-qa-test.truvenhealth.com
cxda-director-devns.truvenhealth.com
codw-ilb.truvenhealth.com
agrinteration.truvenhealth.com
agrqa01.truvenhealth.com
wa-mdm.truvenhealth.com
QMAT.TRUVENHEALTH.COM
hedis.truvenhealth.com
dwdemo.truvenhealth.com
hta54r01.truvenhealth.com
sslvpn.truvenhealth.com
securemail.truvenhealth.com
eiperformance.truvenhealth.com
servicesnavigator.truvenhealth.com
ibm.com
coe11t01.truvenhealth.com
as19-ilb.truvenhealth.com
as17-ilb.truvenhealth.com
asr53c04-ilb.truvenhealth.com
paymentintegrityuat.truvenhealth.com
ir02.truvenhealth.com
cdqmat.truvenhealth.com
transit.truvenhealth.com
ibm.com
servicesnavigatoruat.truvenhealth.com
pmadvantage.truvenhealth.com
in-fadsrptuat.truvenhealth.com
logicqa.truvenhealth.com
coe54c01.truvenhealth.com
info.truvenhealth.com
gaedsmiuat.truvenhealth.com
*.truvenhealth.com
community.truvenhealth.com
access-pre.truvenhealth.com
Tsh.STS.Truvenhealth.com
dev.truvenhealth.com
imeuat.truvenhealth.com
irngote-triage.truvenhealth.com
medev.truvenhealth.com
wvdhhr.truvenhealth.com
transit.truvenhealth.com
coveredca-asr.truvenhealth.com
employerinsights.truvenhealth.com
irdev.truvenhealth.com
dedw-ilb.dev.truvenhealth.com
infads.truvenhealth.com
*.truvenhealth.com
truvenhealth.com
sso.truvenhealth.com
wa-mdm-uat.truvenhealth.com
wvbms.truvenhealth.com
demoprofiling.truvenhealth.com
ibm.com
ibm.com
employerinsightsperf.truvenhealth.com
cxdatest7.truvenhealth.com
cxdaprod7-dr.truvenhealth.com
ir-0d-perf-irqa.truvenhealth.com
cdaa.truvenhealth.com
truvenhealth.com
patientregistry-test.truvenhealth.com
ibm.com
gaedsmidev.truvenhealth.com
hedis2018-tfa.truvenhealth.com
tndba.truvenhealth.com
ir03.truvenhealth.com
ncprepwd.truvenhealth.com
testadpwd.truvenhealth.com
actionoistg.truvenhealth.com
access-at.truvenhealth.com
citrix.truvenhealth.com
MarketScan2.TruvenHealth.com
qmatat.truvenhealth.com
access-int.truvenhealth.com
irngote-int.truvenhealth.com
irngote-uat.truvenhealth.com
stateofmo.truvenhealth.com
maapcdrstudio.truvenhealth.com
transitat.truvenhealth.com
ncprepwd.truvenhealth.com
marketexpertwebdev.truvenhealth.com

Certificate

The complete raw certificate details for access-pre.truvenhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16567998194664817438986705258455862998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Merative US L.P.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access-pre.truvenhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775871112081487665165426970499656298267052840333570924794508802968623221383579351508214139891184593998253202153894880270985788210164178188211330057256047471083334237144505740066673631340803097837742554669681857639085438251938328808848960121485044884681053634814546956309967863623962804255583085374953998297785106032376303230386889464241225368563958792355162848611279737776937881278115822686231364900233001085698357105015712155772585636546147431131984399654445582054777294708173376704480356218887859533015255237154932951017378124867241556546040325064532489124617050926953953580622851359890187274360779763324935693804885564855553851893426237420267039663506447225052060470037228156188881779965362211585573071636476442135477614290411037472440856450161774647477715289280153192447738561040086461023910643449359290295112245927910997278727230414933406363361703190045495144786137196243445000377727821088516375977452330383368936894882836816482453110486951436120413118517330361558908992086862773828727105354892278763914170181100785075796443151866651064659039519275964183028513873457576123804697575571606733648326147005059104564282628353313367144094043192039659171864329881194967540886319247475423334591719569008623651801572533699347290477240327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e626ded9da1ee151e87222dd03797ac65ef018c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-pre.truvenhealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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