vpn.baptisthealthsystem.com

- Tenet Healthcare -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 38:07:6f:20:d4:20:84:51:00:00:00:00:50:da:5a:93 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tenet Healthcare

Organization: Tenet Healthcare
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:07:6f:20:d4:20:84:51:00:00:00:00:50:da:5a:93
Serial Number (int): 74475367790382371022803601456545553043
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e1:3e:86:40:51:f6:93:c1:52:9e:cf:66:00:7e:dd:70:49:aa:3b:4c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3a:5e:36:1e:70:52:fe:c6:f5:08:be:cd:7c:80:37:5c:d1:58:e4:a8
Fingerprint (sha256): 25:5b:00:8e:2a:59:e1:32:2e:89:19:33:cb:33:cc:f4:de:f7:68:28:a9:37:81:c5:4b:a8:69:40:9b:5a:b7:9f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vpn.baptisthealthsystem.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.baptisthealthsystem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.baptisthealthsystem.com

Other certificates including the domain name baptisthealthsystem.com

(limited to 100 certificates)
digital.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
providers.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
*.baptisthealthsystem.com
tenethealth.com
tenethealth.com
vpn.baptisthealthsystem.com
tenethealth.com
tenethealth.com
view.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
bhsrltst.baptisthealthsystem.com
webmail.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
webmail.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
cpacs.baptisthealthsystem.com
webmail.baptisthealthsystem.com
info.baptisthealthsystem.com
tenethealth.com
*.baptisthealthsystem.com
tenethealth.com
sni.cloudflaressl.com
digital.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
vpn.baptisthealthsystem.com
tenethealth.com
webmail.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
bhsrl.baptisthealthsystem.com
satxmusectx1.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
webmail.baptisthealthsystem.com
webmail.baptisthealthsystem.com
tenethealth.com
GWMAIL.BAPTISTHEALTHSYSTEM.COM
tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
*.baptisthealthsystem.com
doctorsearch.baptisthealthsystem.com
tenethealth.com
bhspacs.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
bhsrl.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
*.baptisthealthsystem.com
tenethealth.com
3drecon.baptisthealthsystem.com
vpn.baptisthealthsystem.com
www.baptisthealthsystem.com
ahpsa.baptisthealthsystem.com
tenethealth.com
3drecon.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
info.baptisthealthsystem.com
digital.baptisthealthsystem.com
webmail.baptisthealthsystem.com
ahpsa.baptisthealthsystem.com
sni.cloudflaressl.com
cpacs.baptisthealthsystem.com
digital.baptisthealthsystem.com
www.baptisthealthsystem.com
webmail.baptisthealthsystem.com
baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
www.baptisthealthsystem.com
pacs.baptisthealthsystem.com
tenethealth.com
www.baptisthealthsystem.com
cpacs.baptisthealthsystem.com
bhsrl.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
oblink.baptisthealthsystem.com

Certificate

The complete raw certificate details for vpn.baptisthealthsystem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HSGz4reWFte17vxN9QJ
HnzqQ31Zv4+I1d/y1JEFaCEfp+DD7YFzVuSADr3kdnYHwqnxssTTMSM/CSOeWk+n
3V0MFr8dLW5OATdbuA12KLpODGS+x3oSCn/xF5Id2/DEKtLxJro25pZGtgx6PDpt
f55XlX0frBS6glm5O+yjmeMYzVfrzcDoj/EFqGlhmmLr9JUpUm0Hv5rU9Div5yW1
gCy3J1lZU3cndAMNZsnLTa0O9ubrQI0a7H44kCzMVHPY8LBZ2jBA68qYNTOlGbig
44mUVkbLAM2olaI2fz7IgRwTGsOlRDicxlxzo52dTo2sv+cpRVX/gUfMqr9MQpfj
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74475367790382371022803601456545553043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-09 13:56:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 14:26:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tenet Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.baptisthealthsystem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27324935282888031494730314282852691008771503014468707012715443436435613670879430299351583935395632779318980720366512613579138591587476560970847175773399608316314321343046789065404298195226613628498868640797036986442449919747473590048294593196148387482305845212084653576828392525690135937440752521986189153442755333386607091648481766902006704671290767263428773468117239098461163099028025658726970599699153407017660612571440206978791622665238155291423415741018281248535601732626022963232309104770760184411719784277874277955675087453917087295878195995818039163037410692536810328204141107445057511956432517173037260858319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.baptisthealthsystem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e13e864051f693c1529ecf66007edd7049aa3b4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d0a39d844e020cc682607085f81ef30f7b18ec50990d7d727ecd591b3eb9896fcc44edeeb8d7d3350c2c3ca25ea249d1feccc02ecf36aa7523369cabd87e54fb01048ca72e918c9b18932e065b24b2722253fb62bb0e6f1fca18518a4158f4a029e0efbed1f68b61394b5b6a3f5d694be50bd70398572fa06cdf45b90780b91e290146879bbfbda55cdb61158c19f9bd8bb216f3a683dca0c833dbf68afa3fbf1c422ba7de32f1f5fa57520664d194258ebff9bbe3da2bdc0e06f4491afd7bf4a5d613d7a6181b40edd81e8ec83ae5a58d5949720b870b397e4f2321f027d346eaf0fc8aff739ff96a74da778d29f5064a23cf9a2a9645b97bf03407e2eadc5e