tocmail1.orclinic.com

- The Oregon Clinic P.C. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:09:eb was issued on by GeoTrust, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

The Oregon Clinic P.C.

Company registration number: 82YNjkrZu6utb9nY0Ys66RSyB7/QLKJC
Organization: The Oregon Clinic P.C.
State / Province: Oregon
Locality: Portland
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:09:eb
Serial Number (int): 68075
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: b6:b6:a0:8d:30:e0:85:64:02:09:65:6b:de:ef:bc:1d:52:cc:30:a5
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 61:e3:4f:bb:55:fa:b7:5c:35:00:e3:0d:6c:ae:83:9f:a9:ed:4f:f8
Fingerprint (sha256): 18:c5:33:a8:70:b9:d3:8b:53:a3:79:4f:52:68:f5:75:b3:5a:b6:d5:13:4c:00:c8:1e:1c:b3:fa:9d:9f:9c:78

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate tocmail1.orclinic.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tocmail1.orclinic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tocmail1.tocad.orclinic.com
activesync.orclinic.com
activesync.tocad.orclinic.com
rpc.orclinic.com
rpc.tocad.orclinic.com
owa.orclinic.com
owa.tocad.orclinic.com
autodiscover.orclinic.com
autodiscover.tocad.orclinic.com
tocmail1.orclinic.com

Other certificates including the domain name orclinic.com

(limited to 100 certificates)
tochelpdesk.orclinic.com
*.orclinic.com
oregonclinic.com
servicedesk.uwhealthcaredirect.com
oregonclinic.com
tocmail1.orclinic.com
servicedesk.uwhealthcaredirect.com
tochelpdesk.orclinic.com
secure.orclinic.com
tocexch01.orclinic.com
oregonclinic.com
servicedesk.friedrich.com
mnspc.com
service.cultivatebhe.com
orclinic.com
securegw.orclinic.com
oregonclinic.com
oregonclinic.com
*.orclinic.com
helpdesk.swftnsslab.com
help.radassociates.com
coloncancerportland.com
servicedesk.uwhealthcaredirect.com
coloncancerportland.com
iemr.orclinic.com
tochelpdesk.orclinic.com
orclinic.com
helpdesk.swftnsslab.com
ithelpdesk.holbrooklife.com
oregonclinic.com
help.radassociates.com
coloncancerportland.com
orclinic.com
servicedesk.friedrich.com
secureaccess.orclinic.com
orclinic.com
help.radassociates.com
helpdesk.swftnsslab.com
coloncancerportland.com
soporte.onnetsa.com
helpdesk.ymc.ae
tocmail1.orclinic.com
servicedesk.friedrich.com
mnspc.com
helpdesk.swftnsslab.com
servicedesk.uwhealthcaredirect.com
ithelpdesk.holbrooklife.com
*.orclinic.com
coloncancerportland.com
orclinic.com
sni.cloudflaressl.com
helpdesk.ymc.ae
mnspc.com
boost-it.dechra.com
tocmail1.orclinic.com
boost-it.dechra.com
secure.orclinic.com
helpdesk.ymc.ae
servicedesk.friedrich.com
tocmail1.orclinic.com
tochelpdesk.orclinic.com
orclinic.com
soporte.onnetsa.com
orclinic.com
orclinic.com
oregonclinic.com
orclinic.com
help.radassociates.com
secure.orclinic.com
ithelpdesk.holbrooklife.com
secure.orclinic.com
coloncancerportland.com
av-sbc-um.orclinic.com
oregonclinic.com
oregonclinic.com
*.orclinic.com
sni.cloudflaressl.com
*.orclinic.com
oregonclinic.com
*.orclinic.com
orclinic.com
Analytics.orclinic.com
mnspc.com
service.cultivatebhe.com
ithelpdesk.holbrooklife.com
tocmail1.orclinic.com
tocmail1.orclinic.com
coloncancerportland.com
soporte.onnetsa.com
oregonclinic.com
service.cultivatebhe.com
orclinic.com
service.cultivatebhe.com
helpdesk.ymc.ae
orclinic.com
soporte.onnetsa.com
av-sbc-um.orclinic.com
tocsmppweb.tocad.orclinic.com
securegw.orclinic.com

Certificate

The complete raw certificate details for tocmail1.orclinic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHifV3Nr/oAl/r9/Sro
41oHqs2ahgsxO8r8owHOkX3YOMKG8PWTLyCoZbHYPv9kvt58rhTSyQN01JIwSsCN
wcFI2uMzmm5zAVXPMfMQHWkLBKh/r9LN1tG51ySld9Td365+OLkmaJ3Q+9GDijUF
0Hw8BiNfs9vPbPS3Zny1m5sq0/dNI4VovKuRYo9PySdqUe3FDxRGPO5L55bneDmU
RL/c3uHwGVHUU6dh8LwoCFVgJYbdl7GSHjNPQwzA+lkwYcXrk+ZflyqLPeJXdofD
st3JRwdFgCjFewqOTi90LP+ZLwTxWqfyzrmh3nQtZ9yuhpH9zWzpvYop6Wu08SAd
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-22 17:23:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-24 13:01:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '82YNjkrZu6utb9nY0Ys66RSyB7/QLKJC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Oregon Clinic P.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tocmail1.orclinic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23465474328319431938795682354972353620638935477622902231103302535442631042082702923163558785345154239372396783253408507796982241123403065458237042463084138297194592804447569905508003604529491528712710820412372273320961197121926557285276286148210478055942633099972834995342111085897214769407004345311889555199561097327109700750189267648617725701327777473572355630685183620829063939024972676385063687296600541699021027983353523022540054840986358061105540806229986731814406554555015498248364645010319891389676045755391104097623151449802839098678139766368215334617111087703226226570242810276230247577766801102915825049017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocmail1.tocad.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.tocad.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.tocad.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.tocad.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tocad.orclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocmail1.orclinic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6b6a08d30e085640209656bdeefbc1d52cc30a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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