testcantohaiku.harrishealth.org

- Harris Health System -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 42:3d:b5:d2:ff:b0:6b:a7:00:00:00:00:50:e5:06:b7 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Harris Health System

Organization: Harris Health System
State / Province: Texas
Locality: Houston
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:3d:b5:d2:ff:b0:6b:a7:00:00:00:00:50:e5:06:b7
Serial Number (int): 88049465663359417867364349973755135671
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 53:b5:01:eb:48:5d:b0:bb:ea:c5:ff:fa:6f:cf:af:13:1e:01:3c:2e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 47:1b:30:45:4e:a1:c6:ae:1c:3b:c3:76:58:4b:de:c3:3d:21:32:18
Fingerprint (sha256): 20:d9:a0:c3:57:b5:dc:33:5d:fd:66:04:7a:a9:70:ae:77:48:e0:fc:bc:85:f6:f3:1e:61:b0:8b:6b:dd:f9:35

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate testcantohaiku.harrishealth.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testcantohaiku.harrishealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testcantohaiku.harrishealth.org
testhhs.harrishealth.org

Other certificates including the domain name harrishealth.org

(limited to 100 certificates)
es.harrishealth.org
myaccess.harrishealth.org
vtestepicmyc01.harrishealth.org
owa.harrishealth.org
testhsw.harrishealth.org
testepicce.harrishealth.org
testceic.harrishealth.org
bca.harrishealth.org
welcomeweb.harrishealth.org
ft-ise-psn1.harrishealth.org
TIMETRACKING.HARRISHEALTH.ORG
testpacsweb.harrishealth.org
myhealth.harrishealth.org
mobile.harrishealth.org
ftpexternal.harrishealth.org
vuc-expe02.harrishealth.org
jobs.harrishealth.org
terpaphr.harrishealth.org
psftfsprd.harrishealth.org
perppsft01.harrishealth.org
ceicimageexch.harrishealth.org
testceic.harrishealth.org
careselect.harrishealth.org
btvpn.harrishealth.org
cantohaiku.harrishealth.org
testhsw.harrishealth.org
VUC-UCMQAPUB01-ms.harrishealth.org
testsurescripts.harrishealth.org
terppsft01.harrishealth.org
testpsmobile.harrishealth.org
view.harrishealth.org
access2013.harrishealth.org
patst.harrishealth.org
auth.harrishealth.org
vuc-expe.harrishealth.org
fsint.harrishealth.org
sip.harrishealth.org
jobs.harrishealth.org
careselect.harrishealth.org
cantohaiku.harrishealth.org
testcantohaiku.harrishealth.org
myaccess.harrishealth.org
testtimetracking.harrishealth.org
perppsft02.harrishealth.org
citrixaccesstest.harrishealth.org
orders.harrishealth.org
mobile1.harrishealth.org
kronostestext.harrishealth.org
bca.harrishealth.org
citrixaccesstest.harrishealth.org
sentry1.harrishealth.org
prosolv.harrishealth.org
careselect.harrishealth.org
WebFTP.harrishealth.org
nsi.harrishealth.org
jobs.harrishealth.org
fstst.harrishealth.org
access2013.harrishealth.org
terppsft02.harrishealth.org
epiccarelink.harrishealth.org
testcommunityconnect.harrishealth.org
testpacsweb.harrishealth.org
psftfsprd.harrishealth.org
hrpsft.harrishealth.org
myhealth.harrishealth.org
citrixaccesstest.harrishealth.org
ceic.harrishealth.org
testbca.harrishealth.org
WebFTP.harrishealth.org
epiccarelink.harrishealth.org
hsexceptions.harrishealth.org
fsint.harrishealth.org
testcantohaiku.harrishealth.org
supplier.harrishealth.org
testaccountreg.harrishealth.org
trainic-fgsvr.harrishealth.org
VUC-CIMPP01-ms.harrishealth.org
trainic-fgsvr.harrishealth.org
es.harrishealth.org
perppsft01.harrishealth.org
hhiron01.harrishealth.org
testepicce.harrishealth.org
view.harrishealth.org
testintegration.harrishealth.org
orders.harrishealth.org
hherpap1.harrishealth.org
hrint.harrishealth.org
citrixaccess.harrishealth.org
temployees.harrishealth.org
surescripts.harrishealth.org
analytics.harrishealth.org
sp19inet.harrishealth.org
testcantohaiku.harrishealth.org
mobile.harrishealth.org
owa.harrishealth.org
perppsft02.harrishealth.org
hsmatch.harrishealth.org
testsurescripts.harrishealth.org
testnsi.harrishealth.org
perppsft01.harrishealth.org

Certificate

The complete raw certificate details for testcantohaiku.harrishealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWjPWGNW2CrZMF9452YY
6BgvvVmXJHpDX+AbEPIOs+iY87GPc9Phc2IAtxNcVQAug5a8pq+maAewN7brbNDG
czEUo5yt0sO6rJHdFYoSC23DeH0MCJUcCugKxdhZR2sHVW8eBsCl9OiEeSNwUCay
C8cxXBYXlRbEPb7M6MLuBe1URAMSObhvu949RNIQ/qJz6KXBVGRM2QuiBdMc+dZE
Nyvt5XB4WhWxkleJGyZdoK1tgZS29AdDsolO1KWOBglo36XRJw2ENIlKG1mJ3/nP
RTATDJn0oCWRRwPwtUGNJahyvetUidWc+CWH8AmYibx9OBdeYY86w+1ppKBLIDjA
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88049465663359417867364349973755135671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 18:18:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 18:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harris Health System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testcantohaiku.harrishealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25930536226939619266732641544241063841225531664340042922269589121157787049988962981156670752425693124827412358034198869961451464847739754436138201654725009280066813592838110175748796626850390147248002609601632970622687153223388798419727203640333865325818458071940769777390573940808052548454366190838445978663258926342301378442354944259732640665241109571658701791091035843029842286481545021840301548782609134203695524180597257503790592805472111063934628275549785356757990278585621600154508838390055850917965283214675500479137621339038272951157336230484067820667134347352869411916330776531680897120368592134350761934891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcantohaiku.harrishealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testhhs.harrishealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53b501eb485db0bbeac5fffa6fcfaf131e013c2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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