vendorportal.allinahealth.org

- Allina Health System -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 58:09:f4:0b:b2:2d:5f:b1:38:f0:a4:1c:e3:32:64:9c was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Allina Health System

Organization: Allina Health System
State / Province: Minnesota
Locality: Minneapolis
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:09:f4:0b:b2:2d:5f:b1:38:f0:a4:1c:e3:32:64:9c
Serial Number (int): 117023744135395674232757566343201580188
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 25:88:4e:52:31:e2:00:93:3e:b7:d9:9b:f3:b9:54:8b:f6:cf:56:8a
Fingerprint (sha256): 1f:37:d9:95:9d:fa:77:27:ff:cb:27:1e:6a:45:b4:63:ef:50:40:c3:3e:c6:c1:44:b7:1f:c5:ac:02:7e:2a:f4

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate vendorportal.allinahealth.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vendorportal.allinahealth.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vendorportal.allinahealth.org

Other certificates including the domain name allinahealth.org

(limited to 100 certificates)
tech37.co.uk
cavgw1.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
mallorar.com
vendorportal.allinahealth.org
*.allinahealth.org
thichallenge.com
possible.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
www.allinahealth.org
app.help-full.com
stfrancisgiftshop.allinahealth.org
*.allina.com
homestore.allinahealth.org
wellness.allinahealth.org
wellness.allinahealth.org
forms.allinahealth.org
go.allinahealth.org
homestore.allinahealth.org
www.yasirfayrooz.com
unitedgiftshop.allinahealth.org
unitedgiftshop.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
stfrancisgiftshop.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
credentialing.allinahealth.org
thichallenge.com
vendorportal.allinahealth.org
account.allinahealth.org
jobs.allinahealth.org
abbottnorthwesterngiftshop.allinahealth.org
redcap.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
isafewebmailauth.allinahealth.org
unitedgiftshop.allinahealth.org
innovation.allinahealth.org
www.beatspeak.ai
www.furusatolabs.com
*.allina.com
possible.allinahealth.org
homestore.allinahealth.org
everythingisvega.co
san-14-s12.tlsprovisioning.exacttarget.com
www.allinahealth.org
cubeacloud.com
*.allinahealth.org
www.agaration.com
innovation.allinahealth.org
thichallenge.com
innovation.allinahealth.org
credentialing.allinahealth.org
jobs.allinahealth.org
possible.allinahealth.org
allinahealth.bynder.com
*.allinahealth.org
onlinevisit.allinahealth.org
account.allinahealth.org
ww5.allinahealth.org
pay.allinahealth.org
innovation.allinahealth.org
thichallenge.com
possible.allinahealth.org
clashbot.app
www.allinahealth.org
possible.allinahealth.org
thichallenge.com
*.allinahealth.org
*.allina.com
jobs.allinahealth.org
homestore.allinahealth.org
credentialingtest.allinahealth.org
innovation.allinahealth.org
possible.allinahealth.org
talentacquisitionevents.allinahealth.org
*.allina.com
www.allinahealth.org
thichallenge.com
app.nanobebe.io
forms.allinahealth.org
homestore.allinahealth.org
innovation.allinahealth.org
possible.allinahealth.org
possible.allinahealth.org
telehealth.allinahealth.org
thichallenge.com
*.allina.com
possible.allinahealth.org
possible.allinahealth.org
bryceboesen.com
www.rxi-api.org
www.ilovehoney.com.au
unitedgiftshop.allinahealth.org
thichallenge.com
abbottnorthwesterngiftshop.allinahealth.org
jobs.allinahealth.org
isafewebmail.allinahealth.org
*.allina.com
possible.allinahealth.org
possible.allinahealth.org
medconnect.allinahealth.org

Certificate

The complete raw certificate details for vendorportal.allinahealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117023744135395674232757566343201580188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Allina Health System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vendorportal.allinahealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 631609986949801986164800251114562553323114281632346603291215679486168296111218128298924225041064553005500948789618883158648034598048280586809651244830822117973739202716362960277926472519470308703524679156043738063530928502600273848347974308623628899796876451563993013887213437541771878343447337352127061817181886580095672825987095692174407634560600368356961387543830141030991182272057679198121754503160223926417007690956155145980007598762854724716998761781534378432835790430069888646479268117294934203896527329730715875287987092251842331159495189083695848652396890307938551021768368223499423859749291111756850400642177192869160457865699401715211970511936556170231012884664955301293836755729536931418423126658821095389942148944502387647106644466789405158395359115551347696503624713253156615832342408157457422376675424311649708970780905003450041509176718197386914730371803084816519165037367830474091711227053853387618768522652493990428736939173842472510095121847385768448765177878464763489566944490225598045937190492869256974316766036927844740142677029245109915509328565826771846433553938056290826521014750266710380050150272640423929480636759734216651303646809800848455594800245152847413087160798267147453353589200837972192159020796253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendorportal.allinahealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153e6e253a900000403004630440220711cce199fdcd7ab4a361d559a827c099be9bb4430c4888da59a2cf14377da8e02204dcf87daa2c320135ee1998c5dc15faaf3fd9e45cadb531d73df25839d4f5931007400a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153e6e253d60000040300453043022032507a5ba12113ed047238aed478e24a7b99cb2507dbebb8c1071daa6e21abbd021f52c663451dc6536f7289f0c5ac162f9d50b194ba21c512461dd6a6ffc8ee2100770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000153e6e253d50000040300483046022100cb30da4e90d3366488f6bb8552b9d5c1687f20c7cad60565c1aad8f06cdfb05002210086f59086074e4a55b7e25a14d6e334bde21f00e4696afe352dbccd23a75431a1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000153e6e253e50000040300483046022100b880bd32b848427019deed540875ab177189f2646b145013d1ddd5f2cd7d219d022100c6b80bc896bf19d054d2cb5f649c484a588fe95197ed849206a2458f92fc9abf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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