reports.questdiagnostics.com

- Quest Diagnostics Incorporated -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:74:b5:10:5d:8f:88:c8:b5:a7:a3:12:53:91:9b:69 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Quest Diagnostics Incorporated

Organization: Quest Diagnostics Incorporated
State / Province: New Jersey
Locality: Lyndhurst
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:74:b5:10:5d:8f:88:c8:b5:a7:a3:12:53:91:9b:69
Serial Number (int): 20544398785108267528912857945710107497
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:72:2a:4b:05:d0:bc:e9:7d:fb:6f:41:e0:ed:47:2b:21:af:ae:3b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6c:7e:70:32:be:b0:5f:05:bb:90:8a:20:e9:b3:bd:dc:11:bb:43:bd
Fingerprint (sha256): 11:61:62:ea:99:50:8e:dc:ef:cd:35:8f:71:08:e5:69:06:7b:fa:39:5f:b6:79:2c:ff:b5:ae:eb:bf:a4:3c:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate reports.questdiagnostics.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reports.questdiagnostics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reports.questdiagnostics.com

Other certificates including the domain name questdiagnostics.com

(limited to 100 certificates)
secure.questdiagnostics.com
m.questdiagnostics.com
adconnect1.questdiagnostics.com
healthplans.questdiagnostics.com
hs.ess.questdiagnostics.com
qcs.questdiagnostics.com
cas2.questdiagnostics.com
*.questdiagnostics.com
*.mq.questdiagnostics.com
cas2.questdiagnostics.com
einvoice.questdiagnostics.com
neontest.questdiagnostics.com
myvdi01.questdiagnostics.com
qcs.questdiagnostics.com
secure.questdiagnostics.com
akamaisecure8.qualtrics.com
careers.questdiagnostics.com
smm.ess.questdiagnostics.com
tableauprd.qdx.com
*.wellness.questdiagnostics.com
eresults.questdiagnostics.com
ir.questdiagnostics.com
target.questdiagnostics.com
access1.questdiagnostics.com
ds.cdn.questdiagnostics.com
map.questdiagnostics.com
guestwireless.questdiagnostics.com
ucan-dr.questdiagnostics.com
users.care360in.questdiagnostics.com
myquestservices.questdiagnostics.com
akamaisecure8.qualtrics.com
san-12-s12.tlsprovisioning.exacttarget.com
cas2.questdiagnostics.com
hcpenroll.questdiagnostics.com
*.questdiagnostics.com
quanumblog.questdiagnostics.com
healthplans.questdiagnostics.com
mail04.questdiagnostics.com
lisdirect.questdiagnostics.com
ebilling.questdiagnostics.com
secure.questdiagnostics.com
hcp.questdiagnostics.com
*.questdiagnostics.com
report.questdiagnostics.com
iopdesktop.questdiagnostics.com
myquest2.questdiagnostics.com
cas2.questdiagnostics.com
ons-api.questdiagnostics.com
myquest.questdiagnostics.com
ucannp.questdiagnostics.com
eresults.questdiagnostics.com
evpn.questdiagnostics.com
cas2.questdiagnostics.com
map.questdiagnostics.com
texas.questdiagnostics.com
services.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
akamaisecure8.qualtrics.com
mail.questdiagnostics.com
cas2.questdiagnostics.com
qdcpool1wsext.questdiagnostics.com
eresultspr.questdiagnostics.com
cas2.questdiagnostics.com
image.email.jands.com.au
myapps.questdiagnostics.com
cas2.questdiagnostics.com
m.questdiagnostics.com
cas2.questdiagnostics.com
services.questdiagnostics.com
brandlab.questdiagnostics.com
reports.questdiagnostics.com
newsecure.questdiagnostics.com
questdiagnostics.com
*.qa.outofpocketestimate.questdiagnostics.com
pscvpn.questdiagnostics.com
questtexaspsc.com
federation.questdiagnostics.com
ssl-vpn14.questdiagnostics.com
ccm.questdiagnostics.com
image.email.jands.com.au
ds.cdn.questdiagnostics.com
evpn.questdiagnostics.com
www.questdiagnostics.com
cedi.questdiagnostics.com
api.questdiagnostics.com
intellitestmanager.questdiagnostics.com
*.questdiagnostics.com
activate.questdiagnostics.com
ons-api-qa.questdiagnostics.com
quest.beam3.monigle.net
ccm.questdiagnostics.com
ebilling.questdiagnostics.com
qcs-uat.questdiagnostics.com
*.hs.ess.questdiagnostics.com
qeag-qa.questdiagnostics.com
ons-dev.questdiagnostics.com
cas2.questdiagnostics.com
internalcareers.questdiagnostics.com

Certificate

The complete raw certificate details for reports.questdiagnostics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv99VFplLQ/28JEDp7cvO
esMqJpWQubDLVOnLpiibHdqhVi0jxIE1QWrwFnpV+ZtdRnZ4bibRWLZXhSnkuXgo
wHXTcDYEet1mrMSUIychDgG2wtqiEY6SwXKAR/UEyHfF2wkTay8bkzVRXEF6fzVI
nv2qpmuMHWumpo6tvuBY5Og/bf1u2BUICNZundxW2xL0qlcHXpJe7kQuL3fgxCtR
0gen2vMynUnbK4EZzjeV/12q0TnARPU2GOotvQLavu1KkO648Nd3DXeji8HsNO/L
uOKFWdVre2uwfuO44Rp30ls4JSqGiYdKOS0FchKdfUBNCzmbAzoq7x9f4KCtevRP
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20544398785108267528912857945710107497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lyndhurst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quest Diagnostics Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reports.questdiagnostics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24221645547737631596016151384560787288452479419513778507255293284011736627887326304887994249765845276765780236773092991023392891091112023122971696959879317898469104828942993390502551090415787696401547105657229249187182489705407960347926029820467577188130998903786819832585645289942493527020141744422026732893266938625745284621402016435471786235773536683120707999537045668522344339498724542136388116679990815321993123298885099884527087209347657761597193683424706280330674499195059389819602218692995724413011685042351371969521975687593525307997098304207035694372868663535239369039533616247475804682983312328917014302497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09722a4b05d0bce97dfb6f41e0ed472b21afae3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.questdiagnostics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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