webaccess.southernhealth.ca

- Southern Health-Sante Sud -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 21:ff:08:77:8f:69:e9:96:de:bc:9b:eb:b4:1f:45:79 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Southern Health-Sante Sud

Company registration number: Government Entity
Organization: Southern Health-Sante Sud
State / Province: Manitoba
Locality: Southport
Country: CA

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:ff:08:77:8f:69:e9:96:de:bc:9b:eb:b4:1f:45:79
Serial Number (int): 45188731291641169971884349946381419897
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): b2:1c:bf:f8:9d:d5:7f:9c:70:39:3e:db:31:7c:14:d9:20:03:1c:2b
Fingerprint (sha256): 13:13:18:74:bf:7b:dd:11:8f:80:d9:32:f7:40:a5:a4:ca:95:cc:53:66:28:cc:e5:00:7e:9c:3f:a1:50:8d:3a

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate webaccess.southernhealth.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webaccess.southernhealth.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webaccess.southernhealth.ca

Other certificates including the domain name southernhealth.ca

(limited to 100 certificates)
qss.southernhealth.ca
webaccess.southernhealth.ca
*.southernhealth.ca
*.southernhealth.ca
provincialras.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
*.southernhealth.ca
qss.southernhealth.ca
qss.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
*.southernhealth.ca
ctxweb.southernhealth.ca
qss.southernhealth.ca
qss.southernhealth.ca
sip.southernhealth.ca
qss.southernhealth.ca
qss.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
southernhealth.ca
ctxweb.southernhealth.ca
ctxweb.southernhealth.ca
ctxweb.southernhealth.ca
secure.southernhealth.ca
ctxweb.southernhealth.ca
webaccess.southernhealth.ca
ctxweb.southernhealth.ca
ctxweb.southernhealth.ca
ctxweb.southernhealth.ca
webaccess.southernhealth.ca
*.southernhealth.ca
*.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
webaccess.southernhealth.ca
*.southernhealth.ca
skypeweb.southernhealth.ca
webaccess.southernhealth.ca
qss.southernhealth.ca
*.southernhealth.ca
webaccess.southernhealth.ca

Certificate

The complete raw certificate details for webaccess.southernhealth.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bXocVGS1dcgEQ1N2OH/
2slBPeFpj/8U3mXsJQoR/wEXhwbjUWgKCaQFzzJ1wMVsuGJLaVutHGSgdiW6G0i+
XZvApHolBVqGU15lL65OCJHgn31Y1Zb8IwZxTd8ZKMnGaDl+WI6JbEwj7+TarJtD
1JClZ9PAws7V6Q9xJDQZ4mlu5iFzqVwJ/haM9W/VlxkaW4RHxGM8vzVYotHUS59g
xEZOFxqX6T7MJYm8Ydzvy8cwVpKP6XEGcDyEj22I/vF7QnZJ3H2gzn4YUNngnXol
OcIO1BhMCcp4lwes9nqq4Djhsb/IHIgEh489c+JvnjjEvQkKkcYeEeMBfMD+o1EB
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45188731291641169971884349946381419897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southern Health-Sante Sud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southport'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webaccess.southernhealth.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26473507905648665421524725802804584603063704990318724055216339267057591909256611754330176378581172848758869025306220124956187518539090268029347246794861970716722861938876348588700652404218010452449595143693448623080341591499684552643775430525407711687065588926535508244565598258754984230565806541408863161739983965943022506647190967186517569388928170377853021769080396146415797703649006777547548113143334511045373461952525522808618263918135235934024439615226481197926396782457444381269212866600518862635470142907890147411689144249597145183662399228795200212393102985314784596653996942368135492139663874389029225038127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess.southernhealth.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014dd60728f60000040300473045022017f83d6e980a6f851d19f20b75b3333f0e6e1503ef534c94c75607333306ac2a022100f22954de94fe0b1e443bcf1e7cfa1f1f984d6944f46bca00ceb28eb5edbf87690077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014dd60729bb00000403004830460221008d8b16b7ed5c81ff8df8b279c40b5c8021382d94c3937d2810e926b4f80baa3d022100bb04036f9a808b0af5b96f5ff8293d2e62f05d560e9c0e8309cf51c3d1d73ce1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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