www-visitpay.intermountainhealthcare.org

- Intermountain Health Care Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:55:76:eb:8b:e0:a8:8d:79:5a:80:cd:ac:13:f7:8b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Intermountain Health Care Inc

Organization: Intermountain Health Care Inc
State / Province: Utah
Locality: Salt Lake City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:76:eb:8b:e0:a8:8d:79:5a:80:cd:ac:13:f7:8b
Serial Number (int): 5760669202356557305334801916243474315
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 26:6a:63:2e:78:ca:9a:b4:4c:47:07:1a:1f:ac:ad:07:57:ca:81:35
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 64:29:42:0b:77:e5:58:33:2a:e8:f0:86:c7:21:46:f1:63:40:ae:4f
Fingerprint (sha256): 1b:1f:5a:cd:7b:33:2d:cd:ef:da:1a:eb:73:e7:94:49:d2:31:32:9e:a1:3a:03:cc:2c:05:e0:f0:e1:77:c4:d3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www-visitpay.intermountainhealthcare.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-visitpay.intermountainhealthcare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-visitpay.intermountainhealthcare.org

Other certificates including the domain name intermountainhealthcare.org

(limited to 100 certificates)
fsso.intermountainhealthcare.org
intermountainhealthcare.org
dfd-api-sbx.intermountainhealthcare.org
ebu.intermountainhealthcare.org
tst.intermountainhealthcare.org
check24status.mambu.com
dfd-api.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
apistatus.postnord.no
intermountainhealthcare.org
apistatus.postnord.no
apistatus.postnord.no
incapsula.com
myhealth.intermountainhealthcare.org
check24status.mambu.com
ac2ada-status.elastic.co
intermountainhealthcare.org
sspgateway.intermountainhealthcare.org
securemail.intermountainhealthcare.org
imperva.com
check24status.mambu.com
check24status.mambu.com
secureaccess.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumer.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumertst.intermountainhealthcare.org
webpay.intermountainhealthcare.org
progeny.intermountainhealthcare.org
tst.intermountainhealthcare.org
myhealth-next.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
scuat.intermountainhealthcare.org
imperva.com
imperva.com
myhealthplusforms.intermountainhealthcare.org
ebu.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
fsso-tst.intermountainhealthcare.org
myhealth.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
www-visitpay.intermountainhealthcare.org
imperva.com
*.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
webpay.intermountainhealthcare.org
apistatus.postnord.no
myhealthplusforms.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
check24status.mambu.com
scuat.intermountainhealthcare.org
printit.intermountainhealthcare.org
iris.intermountainhealthcare.org
incapsula.com
apistatus.postnord.no
ac2ada-status.elastic.co
printit.intermountain.net
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
imperva.com
secureaccess.intermountainhealthcare.org
webpay.intermountainhealthcare.org
check24status.mambu.com
imperva.com
ebu.intermountainhealthcare.org
apistatus.postnord.no
webpay.intermountainhealthcare.org
imperva.com
apistatus.postnord.no
apistatus.postnord.no
ma.intermountainhealthcare.org
check24status.mambu.com
check24status.mambu.com
alertus.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
hiesspgateway.intermountainhealthcare.org
ac2ada-status.elastic.co
fssoconsumer.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
jobs.intermountainhealthcare.org
fsso.intermountainhealthcare.org
hiessptestgateway.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
intermountainchat.intermountainhealthcare.org
imperva.com
intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
imperva.com

Certificate

The complete raw certificate details for www-visitpay.intermountainhealthcare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LVN2BUCCRwNVJtqRSLo
a3dcnWwFJVSNaxa0YRRCmw7Jcm5iiYBSN8Pst9CvDrio8mWTEd0B3WygvbUbPu3n
NZZQWOewai29VHMrKBhFh0hcNCdSk0c06hl9UZNDdk/aIRdg3LEaQFcpY3Gc4QSe
KrRRxDmMMyJ5+IBhiwxAhpKdwQpgEwe/52OzhlsbtsL+Fut5w+pQmBUGkLPTDsco
ksjBcxwTajluqPzrB1vpJosxqJSbi/xroCIrttNDNLvOKQAA1xkXOC1BU28MuFZC
0Tarbd9hpNXbTOLqMfWHuQnphgIreqXA1sBXTEKnTXPBrkPmXhvkL4IzfvaHT8C2
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5760669202356557305334801916243474315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-visitpay.intermountainhealthcare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27861831465738858927323174990212521810682165319412536419526757991365095211210249161549952053557050356511833265639897092610888615141951848906205340628734704140610582497764309256519811637622881772282632012759270830114740020127530735675841851773784391539445742161788812535175054630806414286322237827074167258959644509475220073417165137766057643081098008830715131975125209694478380378264362249601821342740834677190649062672820656653990818218020049703648592073920631435882763475790564374463920046047381805061854408112770006330178792817043690915472505576370794212387949925186521495254306630123001742906290827181802525865677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							266a632e78ca9ab44c47071a1facad0757ca8135
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-visitpay.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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