abbottnorthwesterngiftshop.allinahealth.org

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 03:af:99:7c:96:fe:33:9b:8e:5f:af:48:df:20:6a:de was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abbottnorthwesterngiftshop.allinahealth.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:99:7c:96:fe:33:9b:8e:5f:af:48:df:20:6a:de
Serial Number (int): 4899449017289915269635928667019307742
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1e:0c:20:4e:5c:ff:b1:0a:68:84:fb:ff:96:de:86:24:e3:5f:12:f3
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 0c:f0:ef:de:35:fa:3b:fc:f3:42:a6:49:95:2f:3f:1e:bb:ce:d7:40
Fingerprint (sha256): 26:16:47:c7:59:96:26:36:a0:a6:0c:1c:e7:6c:4e:2f:ea:df:46:15:2f:0c:34:d3:33:fb:4c:0c:5b:cb:30:8e

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate abbottnorthwesterngiftshop.allinahealth.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abbottnorthwesterngiftshop.allinahealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbottnorthwesterngiftshop.allinahealth.org

Other certificates including the domain name allinahealth.org

(limited to 100 certificates)
tech37.co.uk
credentialing.allinahealth.org
cavgw1.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
mallorar.com
vendorportal.allinahealth.org
*.allinahealth.org
thichallenge.com
possible.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
www.allinahealth.org
app.help-full.com
stfrancisgiftshop.allinahealth.org
*.allina.com
homestore.allinahealth.org
wellness.allinahealth.org
wellness.allinahealth.org
forms.allinahealth.org
go.allinahealth.org
homestore.allinahealth.org
www.yasirfayrooz.com
unitedgiftshop.allinahealth.org
unitedgiftshop.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
stfrancisgiftshop.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
credentialing.allinahealth.org
thichallenge.com
vendorportal.allinahealth.org
account.allinahealth.org
pipcommando.info
jobs.allinahealth.org
abbottnorthwesterngiftshop.allinahealth.org
redcap.allinahealth.org
san-14-s12.tlsprovisioning.exacttarget.com
isafewebmailauth.allinahealth.org
unitedgiftshop.allinahealth.org
innovation.allinahealth.org
www.beatspeak.ai
www.furusatolabs.com
*.allina.com
possible.allinahealth.org
homestore.allinahealth.org
everythingisvega.co
san-14-s12.tlsprovisioning.exacttarget.com
www.allinahealth.org
cubeacloud.com
*.allinahealth.org
www.agaration.com
innovation.allinahealth.org
thichallenge.com
innovation.allinahealth.org
credentialing.allinahealth.org
jobs.allinahealth.org
possible.allinahealth.org
allinahealth.bynder.com
*.allinahealth.org
onlinevisit.allinahealth.org
account.allinahealth.org
ww5.allinahealth.org
pay.allinahealth.org
innovation.allinahealth.org
thichallenge.com
possible.allinahealth.org
clashbot.app
www.allinahealth.org
possible.allinahealth.org
thichallenge.com
*.allinahealth.org
*.allina.com
jobs.allinahealth.org
homestore.allinahealth.org
credentialingtest.allinahealth.org
innovation.allinahealth.org
possible.allinahealth.org
talentacquisitionevents.allinahealth.org
*.allina.com
www.allinahealth.org
thichallenge.com
volunteer.allinahealth.org
app.nanobebe.io
forms.allinahealth.org
homestore.allinahealth.org
innovation.allinahealth.org
possible.allinahealth.org
possible.allinahealth.org
telehealth.allinahealth.org
thichallenge.com
*.allina.com
possible.allinahealth.org
unitedgiftshop.allinahealth.org
possible.allinahealth.org
bryceboesen.com
www.rxi-api.org
www.ilovehoney.com.au
unitedgiftshop.allinahealth.org
thichallenge.com
abbottnorthwesterngiftshop.allinahealth.org
jobs.allinahealth.org
isafewebmail.allinahealth.org

Certificate

The complete raw certificate details for abbottnorthwesterngiftshop.allinahealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12hNKysK6GdNXNI8MrK2
7L1WNgVk4+jUOcDtwf7MJxOrp3LBcG21HruKy0iyC5ovN/gxNivDB4JOKelNsEIe
EDrnebK288Di0gfpy+rGr6NEk9PJD7sxLEl5w729sD8ZTAPAdww62LKOtKVlxAu3
5fmMm5Ji18MMqQ38cC+2WErjWeYH2FLQeX5HhuinsTP100ugYKJn57ANua5+moiJ
HErJosiYhxY18XqvUt02N1rUOF5hBtzROhUI802SwTbXs4fT3XvJEPEEieUqrrGf
22vUdMF61X2pCU4WC6kI1dXxbQvT2tfRlegQzmwrwCD1vEgskqU9UDw0f3vd2QKR
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4899449017289915269635928667019307742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abbottnorthwesterngiftshop.allinahealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27192668524671286205876885860997796899074490395800671732803990470102664589212720706647541547651517606437804833027923126934387383211351234130948671020110135201877866000961322741471656243484299357624273559849269782685739510255285874512426438510534898144080609610836311328786905738818965202221808371019806588616751592629154873439471558517363086830855517839230607160250224428743623050544261130060827669774043895721257804659013501853135551689285900089096621999259905926380331705766721050918123005607741646515874753180321809117794972440610119127328731173001002648710506221595632869847673705892191722397077171250070296891803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e0c204e5cffb10a6884fbff96de8624e35f12f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbottnorthwesterngiftshop.allinahealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d4f79f6380000040300483046022100a7ab2af1126f927d3d016785f75494c1961a4d8d77a453882fc6bc4055153592022100ab2b09c27516998b88a7fabf8b166b553bebe194648466032ac8fa581effa5650076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d4f79f5a900000403004730450221009b4fffb930781b982a9848468719f49ee03d3bec44850f364a9cc757e0a5605a02202a2f73281696eb6fe89a554b353fca693dc4705bf0151f242e445a7d295e9b33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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