ahinternet.tenethealth.com

- Tenet Healthcare -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a8:61:c8:a0:5c:34:99:fd:00:00:00:00:50:e7:c8:74 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tenet Healthcare

Organization: Tenet Healthcare
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a8:61:c8:a0:5c:34:99:fd:00:00:00:00:50:e7:c8:74
Serial Number (int): 223818025274106689779467685433677695092
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 36:d5:02:ee:7f:2e:a9:af:dc:d4:12:c3:e9:1a:be:ff:ed:c9:c8:51
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d7:0a:1e:73:0f:8f:40:96:bc:aa:5f:67:b7:e0:bb:e3:89:4a:a7:c8
Fingerprint (sha256): 31:35:3a:40:e9:42:4a:cc:3c:01:11:d3:42:ce:28:0b:bc:4b:4b:2a:d9:47:05:3f:89:dc:04:0e:39:b5:f2:5e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ahinternet.tenethealth.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ahinternet.tenethealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahinternet.tenethealth.com
www.ahinternet.tenethealth.com

Other certificates including the domain name tenethealth.com

(limited to 100 certificates)
expe.coniferhealth.com
*.tenethealth.com
pacsimaging.tenethealth.com
investor.tenethealth.com
tenhqtapp02.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
mobilecms.tenethealth.com
tenethealth.com
tenethealth.com
kdbk1201.tenethealth.com
delltenetvpn.tenethealth.com
tenethealth.com
expe2.coniferhealth.com
vpnweb.tenethealth.com
tenethealth.com
f1-imfedasa1.tenethealth.com
smart.tenethealth.com
mobilecms.tenethealth.com
vpn123.tenethealth.com
tenethealth.com
jobs.tenethealth.com
airwatch.tenethealth.com
tenethealth.com
smartws.tenethealth.com
vital.tenethealth.com
huhpacs.tenethealth.com
tenethealth.com
vactrac.tenethealth.com
vpnac.tenethealth.com
jobs.tenethealth.com
expe2.coniferhealth.com
jobs.tenethealth.com
tenethealth.com
securitynewsletter.tenethealth.com
*.tenethealth.com
investAka2.investorhq.businesswire.com
tca.tenethealth.com
*.tenethealth.com
airstripweb.tenethealth.com
delltenetvpn.tenethealth.com
tenethealth.com
jobs.tenethealth.com
ahinternet.tenethealth.com
*.etrainingsaba.tenethealth.com
securitynewsletter.tenethealth.com
tendbkdmzmx12.tenethealth.com
sfca.vidistar.tenethealth.com
huhpacs.tenethealth.com
thc-exp-c2.tenethealth.com
tenethealth.com
thc-exp-e2.tenethealth.com
tenethealth.com
connect.tenethealth.com
tenethealth.com
kdbk1203.tenethealth.com
securemail.tenethealth.com
delltenetvpn.tenethealth.com
securemail.tenethealth.com
vpnac.tenethealth.com
connect.tenethealth.com
tenazure-pexipteamsconn-sc.tenethealth.com
imfedasa.tenethealth.com
floridacardiology.vidistar.tenethealth.com
ps360-e.tenethealth.com
thc-exp-c3.tenethealth.com
elpaso.vidistar.tenethealth.com
tenethealth.com
securemail.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
cpacs.chn.tenethealth.com
thc-exp-e1.tenethealth.com
kdbk1209.tenethealth.com
spwsbc1.tenethealth.com
pacsimaging.tenethealth.com
hqhosting.newshq.businesswire.com
thc-exp-c1.tenethealth.com
connect.tenethealth.com
airwatch.tenethealth.com
cpacs.chn.tenethealth.com
paybill.Tenethealth.com
tenethealth.com
thc-exp-e1.tenethealth.com
airstripweb.tenethealth.com
jobs.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
*.tenethealth.com
guest.tenethealth.com
mtm.vidistar.tenethealth.com
hie-is-test.tenethealth.com
cyberarkdr.tenethealth.net
tenethealth.com
cylancesyslog.tenethealth.com
cpacs.chn.tenethealth.com
expe2.coniferhealth.com

Certificate

The complete raw certificate details for ahinternet.tenethealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLBbYgFxuzDsu1jcxxI
7v6TqEryevqloImWt0it3SDIdF9LLXHtrO/N8a5KZ8CE6uF4NMWX4t51T/qQTsGQ
91AT07PvRJGXTW1Pw1Fqo9CM5BqrALcLxLUNVN4f4LgELE1sJRblPrcq8aCPPSlG
yZrd0HiWFceiRwb8J3DdflzMnJtl4bcBxrzAhSX8oNkydOKJEZp222QHqBxnhqkq
lVtttkTlor6LNQOcL/uUjZUVQcuhW31S3uEp7F7cm6Xebo/V2sOf8nZo1TpTzsBd
ZMOAbIQNH1p5aQrJ2Q/2RK4sIhKXye/PRvv2UZZcwMVqCNrum598kTD/1+Rztgv5
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 223818025274106689779467685433677695092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 20:38:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-01 21:08:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tenet Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ahinternet.tenethealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26487733186632900837600690791563545306006371040676423002070633962933999453063142028935749192277587525974925146033349581107781173281520057024231751250099859941844789594231222067910238538302885570010245375917240473675818490486301991359361021556548044235012759255315642531693951751488437272862948147198198009627726619864308025193243160744836192809880658341265592831285677523329280722108634156537017426789558955936530353476245685633874945565912743089644934075318773203371866270373909884041480052475759736427207989735935578415213844730513333881917483633887452884761289056593383883807762126207170566836954069582048488323469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahinternet.tenethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahinternet.tenethealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36d502ee7f2ea9afdcd412c3e91abeffedc9c851
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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