citrix.ext.amc.edu

- Albany Medical Center -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 72:70:e5:2c:2e:09:ae:9c:19:93:da:73:df:be:b5:4d was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Albany Medical Center

Organization: Albany Medical Center
Organization unit: Information Services
State / Province: New York
Locality: Albany
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:70:e5:2c:2e:09:ae:9c:19:93:da:73:df:be:b5:4d
Serial Number (int): 152118176939722712421048915001914340685
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): da:d5:9f:3f:c6:d2:07:42:9d:88:28:35:95:f9:37:9e:59:9a:b4:f4
Fingerprint (sha256): 19:25:fd:f6:c0:e4:ea:48:41:b8:88:87:11:47:11:b9:da:0c:e6:34:8b:cc:6e:1a:d3:81:1b:33:47:fa:c0:60

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate citrix.ext.amc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.ext.amc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.ext.amc.edu

Other certificates including the domain name amc.edu

(limited to 100 certificates)
citrix.amc.edu
misecure.amc.edu
AHSFHIRPROD.AMC.EDU
amcimeuq02.amc.edu
community.amc.edu
pamsupport.amc.edu
mediasite.amc.edu
sft.amc.edu
www.amc.edu
*.amc.edu
cucmexpe02.amc.edu
www.amc.edu
spauth.amc.edu
citrix.ext.amc.edu
wcms.amc.edu
sharepoint.amc.edu
sft.amc.edu
ms35.amcnt.amc.edu
lifeimg01.amc.edu
isite.amc.edu
mivsp.amc.edu
citrix.amc.edu
academic.amc.edu
ms52.amc.edu
CISEPOL5.amc.edu
ad01.amcnt.amc.edu
*.amc.edu
sakai.amc.edu
connectmeeting.amc.edu
ms35.amcnt.amc.edu
mediasite.amc.edu
cucmexpe02.amc.edu
mail1.amc.edu
sts.amc.edu
intranet.amc.edu
www.amc.edu
sft.amc.edu
test-paygw.amc.edu
AHSACDM01A.amcnt.amc.edu
sakai.amc.edu
prenataltest.amc.edu
cucmexpe02.amc.edu
myaccount.amc.edu
sakai.amc.edu
smail.amc.edu
engage.amc.edu
www.amc.edu
citrix.ext.amc.edu
ms35.amcnt.amc.edu
sft.amc.edu
hcweb01.amcnt.amc.edu
wcms.amc.edu
paygw.amc.edu
cucmexpc02.amc.edu
*.elibrary.amc.edu
cucmexpe02.amc.edu
academic.amc.edu
AHSACDM01B.AMCNT.AMC.EDU
analytics-t.amc.edu
ms387t.amc.edu
amcvpn.amc.edu
secure.iamaccurt1.amcnt.amc.edu
mivsp.amc.edu
ad09.amcnt.amc.edu
myaccount.amc.edu
amcsecurelink.amc.edu
sakai.amc.edu
amcvpn.amc.edu
soarianedm.amc.edu
sharepoint.amc.edu
docs.amc.edu
academic.amc.edu
wcms.amc.edu
connect.amc.edu
sts.amc.edu
connect.amc.edu
www.amc.edu
analytics.amc.edu
pay.amc.edu
prenatal.amc.edu
community.amc.edu
amc.edu
citrix.amc.edu
sharepoint.amc.edu
citrix.amc.edu
prenataltest.amc.edu
guest.amc.edu
webadvisor.amc.edu
md-citrix.amc.edu
webadvisor.amc.edu
vslides.amc.edu
sakai.amc.edu
rationalretention.amc.edu
paygw.amc.edu
sasoffice01.amc.edu
AHSFHIRT.AMC.EDU
*.elibrary.amc.edu
amcvpn.amc.edu
www.amc.edu
mail1.amc.edu

Certificate

The complete raw certificate details for citrix.ext.amc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152118176939722712421048915001914340685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albany Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'citrix.ext.amc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731313059515393931087059427847149132041596348816964387258064304942320681783561714047508620688545559012299030992289235215810340047481850004332984685927086858589492617864948218599099487260363992024095929265546377783956043984595527735028144437310342293407211802522145175054660989133338030665794697802111966619181924889354699542523268995879804162115258058147487766711488937548105101108700639722693887659680823591035862942926517895030794648365115931526803842427594800594509824302241188692829512896567199500547558992996549969589400132486690650937239338832092114828196154824242404476168355422451702910086863389391039216191931321937124775921175040496746680105623885475525791773850494227116700877224866622934587351676739024558529117718391437831344425055909782823381527221270873321849986977195760190273492039263021442991921516857434001720448632932238166738546571680470954558802557294202830126695155231648186112254932420184677334241452577840268595891347172480521478967119690200798523301110820181998377694348663992060509775933138085054496291508653077124040197390676513073206084002180804994574246898184682283889453512202467932309507989015827911542114888627442856546294133573612893861517614708138094244731742769189034433003505530094604262706570723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.ext.amc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156eb8a6c150000040300473045022100a4d13a905bb7b67c8bcbed0054e47b60e3378b6e114e90a1f7aba09001c1a505022048f820a0d2b4e8981c53189101c5d5028edc03ed8ba5b8bb21d729277749354d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156eb8a6d4700000403004730450221008c06444df5e5e9ebd574d75e08e5a794680c0fa6cfe3efe8581cf61fd294e58f02205396cf609634ce07ba138c351eefbad40dcb842cba5da284097604fb32fb54e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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