clinician.dev-ben.storyhealth.ai

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7f:9e:1b:c4:4a:86:c7:70:09:06:69:7c:4f:ab:23:61 was issued on by Google Trust Services LLC.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clinician.dev-ben.storyhealth.ai

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:9e:1b:c4:4a:86:c7:70:09:06:69:7c:4f:ab:23:61
Serial Number (int): 169632901545176798619226575874766349153
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 50:5b:5a:37:e3:47:36:24:53:61:50:2b:10:36:1e:96:ce:b6:fd:36
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f1:a0:0e:cb:22:83:85:4f:a9:37:89:3e:d2:be:f1:cd:0a:78:2d:cf
Fingerprint (sha256): 2d:48:4a:b5:1c:11:f7:a8:63:84:ed:1f:1c:14:68:ee:02:b8:53:4a:8e:d7:0c:8b:31:2f:5d:4e:d0:07:96:0b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ngu3H0R1DVM
CRL Distribution Point: http://crls.pki.goog/gts1d4/zpK3TVGmVvI.crl

Check the revocation status for certificate clinician.dev-ben.storyhealth.ai

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clinician.dev-ben.storyhealth.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clinician.dev-ben.storyhealth.ai
dev-ben.stry.ai
csr.dev-ben.storyhealth.ai

Other certificates including the domain name storyhealth.ai

(limited to 100 certificates)
storyhealth.ai
clinician.dev.storyhealth.ai
www.glokool.site
storyhealth.ai
patient.scanner.demo.storyhealth.ai
carfactory-prod.imagin.studio
clinician.dev-ben.storyhealth.ai
clinician.dev-ainur.storyhealth.ai
csr.scanner.demo.storyhealth.ai
zebrablau.com
scan.tbsx3.com
clinician.dev-tmr.storyhealth.ai
www.superclass.co
patient.scanner.demo.storyhealth.ai
clinician.staging.storyhealth.ai
www.meetwithpuffin.com
clinician.dev-tom.storyhealth.ai
clinician.phi-sandbox.storyhealth.ai
csr.scanner.storyhealth.ai
storyhealth.ai
lavegashoppers.cl
clinician.scanner.demo.storyhealth.ai
stefan-wright.com
storyhealth.ai
cpg.microsites.vrlinkcorp.com
clinician.phi-sandbox.storyhealth.ai
patient.scanner.storyhealth.ai
moventes.com
clinician.storyhealth.ai
clinician.scanner.storyhealth.ai
csr.scanner.storyhealth.ai
clinician.demo.storyhealth.ai
clinician.dev-max.storyhealth.ai
library.storyhealth.com
app.test.bexapp.de
clinician.storyhealth.ai
jm-assessoria.com
tsumugu.gifted-pocket.com
clinician.demo.storyhealth.ai
patient.demo.storyhealth.ai
clinician.scanner.storyhealth.ai
www.storyhealth.ai
gaon.cl
www.storyhealth.ai
clinician.dev-tmr.storyhealth.ai
auth.usedukia.ng
www.utopium.app
www.digifull.com.br
storyhealth.ai
api-test.dev-jake.storyhealth.ai
clinician.dev-jake.storyhealth.ai
clinician.scanner.demo.storyhealth.ai
storyhealth.ai
stage.f2p.tv
www.rogpd.ovh
clinician.dev-tom.storyhealth.ai
flashmob.kinbox.com
clinician.demo.storyhealth.ai
www.baosidijan.ch
www.superclass.co
quickfix.tk
clinician.dev-ben.storyhealth.ai
storyhealth.ai
clinician.dev-ben.storyhealth.ai
library.storyhealth.com
applow.com
clinician.dev-max.storyhealth.ai
storyhealth.ai
patient.scanner.storyhealth.ai
www.storyhealth.ai
www.idodovrat.com
www.storyhealth.ai
clinician.staging.storyhealth.ai
patient.scanner.storyhealth.ai
clinician.dev-ainur.storyhealth.ai
shawn-a.com
clinician.dev-tom.storyhealth.ai
clinician.usertest.storyhealth.ai
www.hsubooks.com
backloop.report
talaah.om
clinician.scanner.storyhealth.ai
contest.dropsolid.ai
app.ideta.io
quickfix.tk
clinician.storyhealth.ai
go.uniqore.com
www.churchzeit.com
himvaas.in
clinician.storyhealth.ai
clinician.dev-tom.storyhealth.ai
www.davidomakes.com
www.betterbusinessevents.com.au
www.app.homolog.beseed.com.br
clinician.scanner.demo.storyhealth.ai
www.harbourhostel.ee
meet.furry.my
storyhealth.ai
clinician.story-core-dev-jake.storyhealth.ai
clinician.dev-max.storyhealth.ai

Certificate

The complete raw certificate details for clinician.dev-ben.storyhealth.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SPTRAn7vjBI+KNt2baU
dl9bMmSTrtPqMfJaaRgW+hpOn3B5DJkzzfjnHVSTogo+wYok96gle7l5DYaN+3g2
yR5zCd+TgxX1U/tzLOQdQkJFBnJruTCrDRvnGUWej/oi5BrbOVBPCMc3Gw+YYF4h
q9nFWOCvtitxpHlz3ieG8HScU4MlfPGIcBC9CF6YA42LMBXnoeW0YuAwTx3wygvf
P02Hf3038kgv0cFSjYeoKWgu6vtAVOYPQxIt7HxsNOQ8W1drYZjJ8v+TrLCV8WXr
K/1OK6pARsafgEY3MN7fduAMD2u6NuHEf84YtHY+XjAGWonMREtb876HHVq5WW7z
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169632901545176798619226575874766349153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 07:19:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 07:19:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clinician.dev-ben.storyhealth.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26906425050393226487780845829954249569817959342938511656224607279900677399162339943906706805793407839876463617861716454903151425876990831417153914813943887347500074842010938211652691485581020694444416512678530856919263056070692931255074506574850756653480140218160962045248443157560338200953962845179768372760791946716964954203361760966106311119978720464117081021133180932298947433163495797105282091494726608906218356645511486597021565961449768066749457270337412886705135055049060397311509566290499215808757183238185694788955708588321619954368153524457769492571082850750327695599408891370834731580969016374010147959709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							505b5a37e34736245361502b10361e96ceb6fd36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ngu3H0R1DVM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinician.dev-ben.storyhealth.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ben.stry.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.dev-ben.storyhealth.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/zpK3TVGmVvI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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