mktcanweb1.meditech.com

- Medical Information Technology, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:52:10:fd:54:a2:5f:ea:3f:f4:37:7c:6b:d0:5a:b0:b5 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Medical Information Technology, Inc.

Organization: Medical Information Technology, Inc.
State / Province: Massachusetts
Locality: Westwood
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:52:10:fd:54:a2:5f:ea:3f:f4:37:7c:6b:d0:5a:b0:b5
Serial Number (int): 1492247263858874309846546064701617296027829
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: a2:a5:86:f1:fb:05:02:f6:bd:36:70:46:e0:2d:12:91:5e:d1:67:f5
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 30:62:e6:05:5b:5b:b0:9c:7b:c7:93:18:7d:66:fc:02:1f:bd:1a:9e
Fingerprint (sha256): 16:3b:33:17:b5:4f:e5:11:87:31:f1:c2:9e:89:66:4f:61:50:3e:93:a7:d8:f1:fc:d4:1b:8e:94:d8:94:47:79

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate mktcanweb1.meditech.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mktcanweb1.meditech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mktcanweb1.meditech.com

Other certificates including the domain name meditech.com

(limited to 100 certificates)
core.meditech.com
blog.meditech.com
tenant1.cloud-dev.meditech.com
mydesk.meditech.com
info.meditech.com
customer.meditech.com
cybersecurity.adeptly.ai
hcsoftware.meditech.com
cdn.meditech.com
sa4gl.wpc.edgecastcdn.net
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
websso.meditech.com
mktframweb1.meditech.com
intranetcdmz.meditech.com
tribal.app
blog.meditech.com
sa4gl.wpc.edgecastcdn.net
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
staff.meditech.com
www.meditech.com
scriptbin.com
svcframweb.meditech.com
homecare.meditech.com
wasp.meditech.com
www.meditech.com
links.thevellaapp.com
accessefmext.meditech.com
sa4gl.wpc.edgecastcdn.net
newsy.madhive.com
johnreemar.com
www.meditech.com
atgweb.meditech.com
client.grafixshop.com
tenant-b-onprem.cloud-dev.meditech.com
mktcanweb1.meditech.com
jigsawpuzzledeluxe.games235.com
www.meditech.com
ehr.meditech.com
ehr.meditech.com
secure0107.hubspot.com
stxwiki.meditech.com
atgweb.meditech.com
secure0107.hubspot.com
hcsoftware.meditech.com
vendor.meditech.com
info.meditech.com
staff.meditech.com
accounts.meditech.com
ehr.meditech.com
vendor.meditech.com
hcsoftware.meditech.com
sa4gl.wpc.edgecastcdn.net
*.meditech.com
rds.meditech.com
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
tenant-b-onprem.cloud-dev.meditech.com
home.meditech.com
benefits.meditech.com
quick-n-dirty.de
home.meditech.com
cdn.meditech.com
customer.meditech.com
www.meditech.com
benefits.meditech.com
secure0107.hubspot.com
info.meditech.com
info.meditech.com
sa4gl.wpc.edgecastcdn.net
tenant-a-onprem.cloud-dev.meditech.com
connect.meditech.com
atwebapi.meditech.com
patientportal.meditech.com
*.meditech.com
*.development.meditech.com
svcframweb.meditech.com
home.meditech.com
software.meditech.com
stxwiki.meditech.com
vpn.meditech.com
email.meditech.com
websoftware.meditech.com
vpn.meditech.com
parlay.ai
matlabs.meditech.com
*.meditech.com
tenant1.cloud-dev.meditech.com
customer.meditech.com
intranetcdmz.meditech.com
ticket.mcom.app
*.cloud-dev.meditech.com
secure0107.hubspot.com
share.meditech.com
blog.meditech.com
home.meditech.com
www.honorablemikeeng.com
svccanweb.meditech.com
tenant-a-onprem.cloud-dev.meditech.com

Certificate

The complete raw certificate details for mktcanweb1.meditech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw35MztOMj989hWcvrOg2
BE2IUuVbIySEUUQtTUWNY8zuTsOUA4Rhj+RnkovIOTY/CEaq8ZrHHcd6r6iiolzg
rYuTdNsThLVoiEkHP8AB7gpBnCnBpLOV05rmszH27E1x4HOPn8gIcYJ/s1edcKp8
OKko7THrcLpr6YyspboR/fBoOEAqBwAyrjXNSWy2xWgz+HYzljYL+U/Pi+HUKcs9
tEvpDpBN0NdLHKULEzKCPZGNfDPJ2mUZk80mK0DkAGfF4yUv1etW2E7k2fcLs514
4gGN+MYcTHsXeMq80jLSCQDtfQygPMY6zGXZQ8SniBgihbGSa6vnQlEXz4JgozDe
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492247263858874309846546064701617296027829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 12:51:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-22 12:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westwood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Medical Information Technology, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mktcanweb1.meditech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24678750334867693728183240371624036110718255291291042019999065843066932467487502101876487071267247772943822714078017317450539528405942447749894122234682360499223197327631101076367242848127025087305538758701624038588177491558643760826271211875249480770188391901433720910759544742616859353479310347691000127347269132092900642734926947671485316293187776429198924811698449589193355524775998835183622964991909727993201780535231462766281278035200838394180177671407556091046609790968205015908220243551345568237489604700721320339613810371633843074582095049672018318029644142011964836308750825548435913519271931747626887732739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktcanweb1.meditech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2a586f1fb0502f6bd367046e02d12915ed167f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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