fsso.intermountainhealthcare.org

- Intermountain Health Care Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:24:36:8b:12:4f:fd:c6:a1:d1:d6:e0:41:69:13:98 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Intermountain Health Care Inc

Organization: Intermountain Health Care Inc
State / Province: Utah
Locality: Salt Lake City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:24:36:8b:12:4f:fd:c6:a1:d1:d6:e0:41:69:13:98
Serial Number (int): 18797220896396696427595812091430769560
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:8f:4e:83:b5:a3:f1:0c:cb:c4:b9:2e:89:b6:74:5e:98:97:88:55
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 48:51:3f:9a:dd:26:c0:37:28:2e:f0:c3:00:9d:59:ab:69:72:8e:76
Fingerprint (sha256): 37:da:43:ad:c7:5d:b1:ac:66:e6:a1:cf:07:ce:b4:49:6a:a4:1c:fe:50:5c:62:d2:f6:e7:25:9b:70:c1:06:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

Check the revocation status for certificate fsso.intermountainhealthcare.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsso.intermountainhealthcare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsso.intermountainhealthcare.org

Other certificates including the domain name intermountainhealthcare.org

(limited to 100 certificates)
fsso.intermountainhealthcare.org
intermountainhealthcare.org
dfd-api-sbx.intermountainhealthcare.org
ebu.intermountainhealthcare.org
tst.intermountainhealthcare.org
check24status.mambu.com
dfd-api.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
apistatus.postnord.no
intermountainhealthcare.org
apistatus.postnord.no
apistatus.postnord.no
incapsula.com
myhealth.intermountainhealthcare.org
check24status.mambu.com
ac2ada-status.elastic.co
intermountainhealthcare.org
sspgateway.intermountainhealthcare.org
securemail.intermountainhealthcare.org
imperva.com
check24status.mambu.com
check24status.mambu.com
secureaccess.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumer.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumertst.intermountainhealthcare.org
webpay.intermountainhealthcare.org
progeny.intermountainhealthcare.org
tst.intermountainhealthcare.org
myhealth-next.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
scuat.intermountainhealthcare.org
imperva.com
imperva.com
myhealthplusforms.intermountainhealthcare.org
ebu.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
fsso-tst.intermountainhealthcare.org
myhealth.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
www-visitpay.intermountainhealthcare.org
imperva.com
*.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
webpay.intermountainhealthcare.org
apistatus.postnord.no
myhealthplusforms.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
check24status.mambu.com
scuat.intermountainhealthcare.org
printit.intermountainhealthcare.org
iris.intermountainhealthcare.org
incapsula.com
apistatus.postnord.no
ac2ada-status.elastic.co
printit.intermountain.net
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
imperva.com
secureaccess.intermountainhealthcare.org
webpay.intermountainhealthcare.org
check24status.mambu.com
imperva.com
ebu.intermountainhealthcare.org
apistatus.postnord.no
webpay.intermountainhealthcare.org
imperva.com
apistatus.postnord.no
apistatus.postnord.no
ma.intermountainhealthcare.org
check24status.mambu.com
check24status.mambu.com
alertus.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
hiesspgateway.intermountainhealthcare.org
ac2ada-status.elastic.co
fssoconsumer.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
jobs.intermountainhealthcare.org
fsso.intermountainhealthcare.org
hiessptestgateway.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
intermountainchat.intermountainhealthcare.org
imperva.com
intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
imperva.com

Certificate

The complete raw certificate details for fsso.intermountainhealthcare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ymk9HugdycuPV9Jn+CF
Crk5NF2BVF2Rn5RGN/4KhjjYrasitpF3T+RqEm3G6oJhA4EdoWsVPWbSSKF8B5nb
F7a/1j5P5hIrWze3HVy5NYt0W/33+Ilyjo6gy+CQBAffIZYlzgxtlBjY3pJVu5Rx
j7UMPfk8h/xkTBo7o8CRRcWOmeJd/3rk34DGERE/H815OKXELDZr8B51PLzJoz0D
giYirqoQEA9IDNw0nfafnxlWrWEALtPYKimyKle7WZc2YkZburAM0w3KXy0P0vKD
wtK8tmZxUzuCvJn5V/160aT8ROfzbMzFaT3eYGLWqk3SmVEzunSKT8wSgb+qbD/o
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18797220896396696427595812091430769560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsso.intermountainhealthcare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27966540358937002364215926030341835417337850466302296199283381117694241305039683647005507340694648927440353297329039555871417466803989247282479675277418003381148031196780341610078207669487275646714770361755066003600063737905778972544034298121290994876595831259910022628964700698695496612169406735230182604257302423770891856406383193707787697175991830891880775009245071890496511229444682726839459223837341382254924598106986666290317572498403744828837024431610460124601495201915978300621764869757732109336546586882640464104882733334482089416929106279025494670177892132092947265229552815652409011176830835199147459471457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							898f4e83b5a3f10ccbc4b92e89b6745e98978855
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsso.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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