emaild1.ihc.com

- Intermountain Health Care Inc -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 12:1c:20:b2:f5:f7:26:a3:3f:cf:5b:32:b6:83:b2:ed was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Intermountain Health Care Inc

Organization: Intermountain Health Care Inc
Organization unit: Intermountain Health Care Inc
State / Province: Utah
Locality: Salt Lake City
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:1c:20:b2:f5:f7:26:a3:3f:cf:5b:32:b6:83:b2:ed
Serial Number (int): 24072151452010319823391021267964637933
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 97:64:c3:95:22:d7:0a:b9:be:32:c9:2c:fb:53:fd:9b:b3:4d:25:be
Fingerprint (sha256): 2f:c7:f1:22:13:17:55:ad:b9:ea:1b:6b:1a:28:29:26:e7:d2:5c:b7:89:12:6d:64:a0:40:7b:87:9b:f9:37:a4

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate emaild1.ihc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emaild1.ihc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emaild1.ihc.com

Other certificates including the domain name ihc.com

(limited to 100 certificates)
ideaprod.co.ihc.com
*.sbx.ose.ihc.com
awdwebupg.co.ihc.com
lpv-isystoc02.co.ihc.com
lpv-pciwsndev01.co.ihc.com
www.ihc.com
lpv-infaappsbx01.co.ihc.com
xtweb.co.ihc.com
hp-ctm03.co.ihc.com
scmobile-test.co.ihc.com
lpv-eitiaee02.co.ihc.com
xeconnect-prod.co.ihc.com
dfd-api.intermountainhealthcare.org
lpvagfascas01.co.ihc.com
kr-test.co.ihc.com
finance.co.ihc.com
emaild3.ihc.com
tx-email2.ihc.com
*.k8s.ihc.com
webitfmsg.co.ihc.com
lpv-cccssgwdev01.co.ihc.com
emaild1.ihc.com
accesshubtest.co.ihc.com
www-clin.ihc.com
emaild2.ihc.com
help2-lp.co.ihc.com
txv-ccartst01.co.ihc.com
www.ihc.com
scmobile-test.co.ihc.com
idptst.co.ihc.com
ciamdir.co.ihc.com
www.ihc.com
tacweb-test.co.ihc.com
lpv-scsolrstg01.co.ihc.com
lpv-edwaedev01.co.ihc.com
tx-email2.ihc.com
scmobile-dev.co.ihc.com
SHMYHEALTHTEST.CO.IHC.COM
mkv-ensiseadm01.co.ihc.com
iamacc.co.ihc.com
lpvagfasgti01.co.ihc.com
www.ihc.com
hieapp.co.ihc.com
accesshubtest.co.ihc.com
dirimap.co.ihc.com
lpv-issadsso.co.ihc.com
lp-itfprd01.co.ihc.com
icare.intermountain.net
lpv-imcrx01.co.ihc.com
txv-issadsso.co.ihc.com
www.ihc.com
LPV-MUSEAPPT01.CO.IHC.COM
lp-adweb01.co.ihc.com
dirimap.co.ihc.com
lpvagfascas01.co.ihc.com
rso.co.ihc.com
lpv-pciwsntst01.co.ihc.com
kr.ihc.com
idpiam.co.ihc.com
shweb.co.ihc.com
hpv-shsdev1-01.co.ihc.com
txv-hiegwprd01.co.ihc.com
lpv-ipgsequortst01.co.ihc.com
kr.ihc.com
cernercitrix.co.ihc.com
mail.ihc.com
lpv-mgrmsweb01.co.ihc.com
www-clin.ihc.com
ldapdevvip.co.ihc.com
lpv-issacpmdv01.co.ihc.com
*.sbx.k8s.ihc.com
TSTFAC.CO.IHC.COM
idpciamtst.co.ihc.com
xtweb.co.ihc.com
storefront.co.ihc.com
iamacctst.co.ihc.com
smtp.co.ihc.com
LPV-PSR1SQLT01.CO.IHC.COM
lpv-lisccadm01.co.ihc.com
lpv-sirentapp01.co.ihc.com
*.apps.prd2.co.ihc.com
mkv-ensiseadm01.co.ihc.com
ciamdir.co.ihc.com
awdwebprod.co.ihc.com
avayafinprxy.co.ihc.com
lpv-pciwsndev01.co.ihc.com
mail.ihc.com
ciamacctst.co.ihc.com
alertus.intermountainhealthcare.org
LPV-MUSEAPPT01.CO.IHC.COM
lpv-erpdkrdev01.co.ihc.com
awdwebtest.co.ihc.com
lpv-sirentapp01.co.ihc.com
emaild1.ihc.com
ciamacc.co.ihc.com
proxy.ihc.com
ciamfedtst.co.ihc.com
dfd-api.co.ihc.com
pingconsumertst.co.ihc.com
txv-hiegwtst01.co.ihc.com

Certificate

The complete raw certificate details for emaild1.ihc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JbQUHGAKWu6h1tsMCtH
EtQEBZolx5DjhNVR9+sPNbZHMpNAd9KBiCrR7oqq5FaqHoG0gSexqyfhFxsqX4FY
D7b9dh0ZBY5AhyhZ78UFkmYjLFXrR9XX3e4kvsBu68FRg2yjtr8XSe24MBFeUBnA
bi+rAbRtDADH3eO1zniudKSFmAU8bgMpGxJUPvzDkuh7v5S7Or8KW0aDw1kVKlqQ
nEFPUtZBb9M3aV0XrrsOLJFuAFjEWSPKcRPE2AZZOQwzd2jqvlGKrA0Urenqm9HB
TzkkO7Twvk8SFchLJT1v+Q4lL5t35h3oCDbBtHPloxvbuOBEpBC2zC+Bno8Kazsg
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24072151452010319823391021267964637933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'emaild1.ihc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26331936453726170098740578024835016975030450209708310272209428996428477241505904822054633218109076862012054870256869193687842482904049196200205317809480222050520278629242981355722740519241050410148005463860783539721780055790223835855663907050134245649281835405364235936150857593052749996094025511398766515700409890970544164828992286201828842127209000524104727778653838512177723543154340925831276642145330341640274153144736851779520105081941382632985958289600329564815210647532739427556587105629572260947720738799227384787331896860497986529299514421289425714530118172867319190941459785926406071232454936007036265767071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emaild1.ihc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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