atwebapi.meditech.com

- Medical Information Technology, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 73:a2:b2:84:8e:29:7a:56:d1:42:fb:2d was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Medical Information Technology, Inc.

Organization: Medical Information Technology, Inc.
State / Province: Massachusetts
Locality: Westwood
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 73:a2:b2:84:8e:29:7a:56:d1:42:fb:2d
Serial Number (int): 35787465138680274696888580909
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 76:8b:55:94:81:8c:3c:09:44:70:0c:98:dc:4a:66:44:65:46:8d:36
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): cb:af:ee:57:90:1f:81:e7:f7:43:eb:a1:6e:5f:bf:68:38:1c:1d:62
Fingerprint (sha256): 2b:93:c2:0d:3d:58:02:8b:a3:a8:77:e6:02:14:e5:d5:c5:b4:33:ab:17:40:51:31:51:9f:6e:cd:b0:30:a0:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate atwebapi.meditech.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atwebapi.meditech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atwebapi.meditech.com

Other certificates including the domain name meditech.com

(limited to 100 certificates)
core.meditech.com
blog.meditech.com
tenant1.cloud-dev.meditech.com
mydesk.meditech.com
info.meditech.com
customer.meditech.com
cybersecurity.adeptly.ai
hcsoftware.meditech.com
cdn.meditech.com
sa4gl.wpc.edgecastcdn.net
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
websso.meditech.com
mktframweb1.meditech.com
intranetcdmz.meditech.com
tribal.app
blog.meditech.com
sa4gl.wpc.edgecastcdn.net
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
staff.meditech.com
www.meditech.com
scriptbin.com
svcframweb.meditech.com
homecare.meditech.com
wasp.meditech.com
www.meditech.com
links.thevellaapp.com
accessefmext.meditech.com
sa4gl.wpc.edgecastcdn.net
newsy.madhive.com
johnreemar.com
www.meditech.com
atgweb.meditech.com
client.grafixshop.com
tenant-b-onprem.cloud-dev.meditech.com
mktcanweb1.meditech.com
jigsawpuzzledeluxe.games235.com
www.meditech.com
ehr.meditech.com
ehr.meditech.com
secure0107.hubspot.com
stxwiki.meditech.com
atgweb.meditech.com
secure0107.hubspot.com
hcsoftware.meditech.com
vendor.meditech.com
info.meditech.com
staff.meditech.com
accounts.meditech.com
ehr.meditech.com
vendor.meditech.com
hcsoftware.meditech.com
sa4gl.wpc.edgecastcdn.net
*.meditech.com
rds.meditech.com
secure0107.hubspot.com
sa4gl.wpc.edgecastcdn.net
tenant-b-onprem.cloud-dev.meditech.com
home.meditech.com
benefits.meditech.com
quick-n-dirty.de
home.meditech.com
cdn.meditech.com
customer.meditech.com
www.meditech.com
benefits.meditech.com
secure0107.hubspot.com
info.meditech.com
info.meditech.com
sa4gl.wpc.edgecastcdn.net
tenant-a-onprem.cloud-dev.meditech.com
connect.meditech.com
atwebapi.meditech.com
patientportal.meditech.com
*.meditech.com
*.development.meditech.com
svcframweb.meditech.com
home.meditech.com
software.meditech.com
stxwiki.meditech.com
vpn.meditech.com
email.meditech.com
websoftware.meditech.com
vpn.meditech.com
parlay.ai
matlabs.meditech.com
*.meditech.com
tenant1.cloud-dev.meditech.com
customer.meditech.com
intranetcdmz.meditech.com
ticket.mcom.app
*.cloud-dev.meditech.com
secure0107.hubspot.com
share.meditech.com
blog.meditech.com
home.meditech.com
www.honorablemikeeng.com
svccanweb.meditech.com
tenant-a-onprem.cloud-dev.meditech.com

Certificate

The complete raw certificate details for atwebapi.meditech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYfkbm6A17tJfJQR8Z1j
D4TyQZwMK+AuixTVEa9rQh/s5g/YwQelQI0o+eJl9QAZnDZQgYAJSfuZfBwxBS9y
gJow4etCxojrUK3Fc7zxyDVMCMOWdPEuMSuAkq1UsQBFu3qfd554foJVT+2yRaJS
YUTOSkBKwUB8PHlHPOLjoDvUldjMQEklZUfgCQ7DNEJ/qQKvX3NhSK/MEuLS4QZr
2kBEY8nCHhCxjVnvR4nE/nNXB6ODTIzmfDiM5MqfhP5j1BUkY3FxZi0RnE+T2ozP
nJmE+d9tyNsfEzcUC2ZJ4EHds/aG+ZC0wiQW5ac1/PJtUYmWDY3aQUnjtIMdYJ6X
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35787465138680274696888580909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-07 15:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 19:06:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westwood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Medical Information Technology, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atwebapi.meditech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24935957073934843424555076122635005933112053348154320919681741837397718647263337240043917950060307642238930233084736438035873379245226212426612662881651737247284100463654815973359158595903366383738276634677951876681998876935018842133107025385705154009971020231460510822446832945657969170895761670646555139444838399347123976239548339193268374282665794238839579610791114927359449252899605109921890553946642282446796535234930652075832432993206858532179133227625851434058157876325185450699859074172631755087133984568983094523438964753363007730590315327666210434328925848703685859642772484979658435058147989854928743864197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atwebapi.meditech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							768b5594818c3c0944700c98dc4a664465468d36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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