southerncross-api-dev.southerncross.co.nz

- Southern Cross Medical Care Society -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 75:52:5f:ce:e7:07:b3:3a:78:a3:21:2e:8f:4f:f1:2b was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Southern Cross Medical Care Society

Organization: Southern Cross Medical Care Society
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 75:52:5f:ce:e7:07:b3:3a:78:a3:21:2e:8f:4f:f1:2b
Serial Number (int): 155947387070649183974101177421628698923
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a0:c3:c5:a5:7d:10:16:b0:af:c4:23:65:87:d9:a9:88:a6:b3:84:01
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): af:d0:d3:e1:ef:79:4f:ed:ef:10:a3:6a:32:a1:c1:eb:3c:6b:a2:29
Fingerprint (sha256): 15:9d:76:3d:49:e4:5d:22:d6:8c:49:f2:0e:6f:d3:eb:96:d0:b5:81:63:1a:64:df:e6:70:17:ec:ab:63:ad:54

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate southerncross-api-dev.southerncross.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southerncross-api-dev.southerncross.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southerncross-api-dev.southerncross.co.nz

Other certificates including the domain name southerncross.co.nz

(limited to 100 certificates)
dev.southerncross.co.nz

provider-identity-pp.southerncross.co.nz
hospitals.southerncross.co.nz
cm-pp.southerncross.co.nz
sam-api-dev.southerncross.co.nz
npos.southerncross.co.nz
brandkit.southerncross.co.nz
identity.southerncross.co.nz
api.southerncross.co.nz
*.schsapi.southerncross.co.nz
apply.southerncross.co.nz
u.southerncross.co.nz


brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
sam-facade.southerncross.co.nz
dev.southerncross.co.nz
aplogo.southerncross.co.nz
hospitals.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
pp.southerncross.co.nz
southerncross-api-dev.southerncross.co.nz
easyclaim.southerncross.co.nz
identity.southerncross.co.nz
kete.southerncross.co.nz
beingwell.southerncross.co.nz
careers.southerncross.co.nz
providers.southerncross.co.nz

hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
southerncross.co.nz

southerncrosshospitals.co.nz
prodslot.southerncross.co.nz
brandkit.southerncross.co.nz
identity-api-dev.southerncross.co.nz
assets.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.ts.southerncross.co.nz
*.api-sit.southerncross.co.nz
brandkit.southerncross.co.nz
provider-api-dev.southerncross.co.nz
finance.southerncross.co.nz
aplogo.southerncross.co.nz
jobs.southerncross.co.nz
aplogo.southerncross.co.nz
*.api-sit.southerncross.co.nz
customer360.pr.southerncross.co.nz
gateway-orb.southerncross.co.nz
assets.hospitals.southerncross.co.nz
identity.southerncross.co.nz
easyclaim16.ts.southerncross.co.nz
identity.southerncross.co.nz
uat.hospitals.southerncross.co.nz
identity-signing.southerncross.co.nz
aplogo.southerncross.co.nz
*.southerncross.co.nz
my.southerncross.co.nz
schs-workflow.southerncross.co.nz
hospitals.southerncross.co.nz
csf.southerncross.co.nz
identity-pp.southerncross.co.nz
viewpoint.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.api-sit.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
uat.hospitals.southerncross.co.nz
appian-api-dev.southerncross.co.nz

my.southerncross.co.nz
*.surfly.southerncross.co.nz
email.southerncross.co.nz
*.mapi-sit.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
provider-identity-pp.southerncross.co.nz
uat.hospitals.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
api-dev.southerncross.co.nz
*.southerncross.co.nz
*.api-dev.southerncross.co.nz
gateway-orb.southerncross.co.nz
pp.southerncross.co.nz
provider-identity-pp.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
gateway-bri.southerncross.co.nz
aplogo.southerncross.co.nz
aplogo.southerncross.co.nz
mapi.southerncross.co.nz
cm-dev.southerncross.co.nz

Certificate

The complete raw certificate details for southerncross-api-dev.southerncross.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155947387070649183974101177421628698923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 23:43:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-19 23:43:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southern Cross Medical Care Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southerncross-api-dev.southerncross.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811654896102947551209585746998971157202359335213516354395138860798270715661541295545640040755807095882111698658774363509850620861238920043324015132007230423478808377130683121284222302532403892130683913660151430887283482466990157093419984155373080260916504889239078684541130411254243017093345407398813653566965864232740465833500867725251465409647703221855380618070109381457035035785586660526237658934664234084697408000441839045995594219034338235930180728144839803693599374926135098144252418482990308452916325666184105372428746367216501661488540629407417422213092183427729206061482024323012489469837402228229955415462992012815155669866587185152662757648063512331753299588985019559871355909442223376677302741507108385474354198118131894362813606500255574362107061158128417570736922361771162073453243084655186190388218339422056326880075667850154240963659459835200018815186750903245202962292772134772277515225620731319386076884186883302904065495513495427609101509575598597959241081511656313177671372335165512218690812598403211433988540425015511309167018028155835485354625871428336324512607255220898049230016103560303991857295819872249749633572512258456948241212982649687862759776856303800411078990543449171374013096255258576331741609354077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0c3c5a57d1016b0afc4236587d9a988a6b38401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncross-api-dev.southerncross.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d55ba0047eabefe19d0a5a88716f029b1cf9f4aafd5cc97cb92defd6d794f3689ec45b9adb833784dc6cc94bfe13154218a41acc6fb919369e90aec16472abaa6e0dc900cf812aeccb41d447c69c045c1a80a6831c275b0d596b736aed670ed81b7914e676d525e5504ec4b143938220b609b0d14c29436a167a417cddaebfbf73c93dde8be0ba74a5e747b7750f33a1583a44c2e15e7411832001a91d2b37bd356618de5117f2b483ecba3002bd5b024e853d54c8c0ccc7d6b51a81a4456ad0b3b953c6b8f97113036c0adc843df4089bbd4d3555e52ea9177789acf819691588b318bd10173fd631c48b0fc43746484699ab429d0627d93a737f1b4fad9663