employerinsights.truvenhealth.com

- Truven Health Analytics Inc -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 20:b2:a5:07:8c:50:06:61:fb:aa:c8:fb:57:2b:50:32 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Truven Health Analytics Inc

Organization: Truven Health Analytics Inc
Organization unit: Healthcare
State / Province: Michigan
Locality: Ann Arbor
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:b2:a5:07:8c:50:06:61:fb:aa:c8:fb:57:2b:50:32
Serial Number (int): 43462871901542892958495648881371205682
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): ec:e6:e7:92:77:25:98:ae:98:b2:45:ce:fa:30:ca:63:05:bf:97:6f
Fingerprint (sha256): 13:ff:a0:61:c0:2e:a9:fc:4f:5a:02:00:9c:4f:9a:1a:5c:cf:87:a0:fa:41:7f:48:c6:2e:2a:24:d7:30:1d:96

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate employerinsights.truvenhealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for employerinsights.truvenhealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

employerinsights.truvenhealth.com

Other certificates including the domain name truvenhealth.com

(limited to 100 certificates)
cxdatest7.truvenhealth.com
thfedidu.truvenhealth.com
opssolutioncenter.truvenhealth.com
wafhb.truvenhealth.com
transit.truvenhealth.com
marketexpert-hanys.truvenhealth.com
eiperformance.truvenhealth.com
ops54r01.truvenhealth.com
as09.truvenhealth.com
thfedididp.truvenhealth.com
irngote-prod.truvenhealth.com
servicesnavigator.truvenhealth.com
medev-director-devns.truvenhealth.com
dem54r01-ilb.truvenhealth.com
patientregistry.truvenhealth.com
sftp-uat.truvenhealth.com
ibmcdqualitymeasure.truvenhealth.com
ibm.com
sre53r01.truvenhealth.com
access-qa-test.truvenhealth.com
cxda-director-devns.truvenhealth.com
codw-ilb.truvenhealth.com
agrinteration.truvenhealth.com
agrqa01.truvenhealth.com
wa-mdm.truvenhealth.com
QMAT.TRUVENHEALTH.COM
hedis.truvenhealth.com
dwdemo.truvenhealth.com
hta54r01.truvenhealth.com
sslvpn.truvenhealth.com
securemail.truvenhealth.com
eiperformance.truvenhealth.com
servicesnavigator.truvenhealth.com
ibm.com
coe11t01.truvenhealth.com
as19-ilb.truvenhealth.com
as17-ilb.truvenhealth.com
asr53c04-ilb.truvenhealth.com
paymentintegrityuat.truvenhealth.com
ir02.truvenhealth.com
cdqmat.truvenhealth.com
transit.truvenhealth.com
ibm.com
servicesnavigatoruat.truvenhealth.com
pmadvantage.truvenhealth.com
in-fadsrptuat.truvenhealth.com
logicqa.truvenhealth.com
coe54c01.truvenhealth.com
info.truvenhealth.com
gaedsmiuat.truvenhealth.com
*.truvenhealth.com
community.truvenhealth.com
access-pre.truvenhealth.com
Tsh.STS.Truvenhealth.com
dev.truvenhealth.com
imeuat.truvenhealth.com
irngote-triage.truvenhealth.com
medev.truvenhealth.com
wvdhhr.truvenhealth.com
transit.truvenhealth.com
coveredca-asr.truvenhealth.com
employerinsights.truvenhealth.com
irdev.truvenhealth.com
dedw-ilb.dev.truvenhealth.com
infads.truvenhealth.com
*.truvenhealth.com
truvenhealth.com
sso.truvenhealth.com
wa-mdm-uat.truvenhealth.com
wvbms.truvenhealth.com
demoprofiling.truvenhealth.com
ibm.com
ibm.com
employerinsightsperf.truvenhealth.com
cxdatest7.truvenhealth.com
cxdaprod7-dr.truvenhealth.com
ir-0d-perf-irqa.truvenhealth.com
cdaa.truvenhealth.com
truvenhealth.com
patientregistry-test.truvenhealth.com
ibm.com
gaedsmidev.truvenhealth.com
hedis2018-tfa.truvenhealth.com
tndba.truvenhealth.com
ir03.truvenhealth.com
ncprepwd.truvenhealth.com
testadpwd.truvenhealth.com
actionoistg.truvenhealth.com
access-at.truvenhealth.com
citrix.truvenhealth.com
MarketScan2.TruvenHealth.com
qmatat.truvenhealth.com
access-int.truvenhealth.com
irngote-int.truvenhealth.com
irngote-uat.truvenhealth.com
stateofmo.truvenhealth.com
maapcdrstudio.truvenhealth.com
transitat.truvenhealth.com
ncprepwd.truvenhealth.com
marketexpertwebdev.truvenhealth.com

Certificate

The complete raw certificate details for employerinsights.truvenhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPNsImmvDpyhkvLO8IGz
mRKQXzvf9CHsBskeK01htvyCOPgr1Kvx6V6O6jB/frRpuRFwwmSbupp/aFrnZZrA
JkFq54lTFLkeNYJFye+dw+S6+CL+VaYyUZAOavukRpKfhR3s+pMZasKOtqjJxWP6
F5nau1F2xj9iUc733eGsmN6oXzzioezkawdxFlOOEBp8pVaF87LdHEP0EyEYR8Ev
T1UFS3GeQbL9HuRX7KIiOUZHHP5bUigKLA/TZQAwDOWsC07BIdFh8zE1PwgL0siA
8XNYI2TBAe32WhP+E5F71xe4TA7Hmk1gsfUXDzdX/KjKu5+fa17W0IUQHJ7Ldenr
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43462871901542892958495648881371205682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Truven Health Analytics Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'employerinsights.truvenhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20318164853862936845340694241339765142011770911981978547051206245710675619284141475594117550209873227886404519480775661810472501585661982242995576244525694771866387969972924023128072297807505612310577882255192454723047939123494274089791109882841904232074127780151921366302027216283765255199156692241582792207679968250441738934523569189337159897811484554109177606445615862137185665381435139265476737416619918248498590506851938362638368111352654753846524116441339780483135481792184220462928220881883741353749588519198157942650742283546614780847585279815303644905699839336088216987309602620505828572217563665751607995257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employerinsights.truvenhealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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