advantage02.medstat.com

- Thomson Reuters Holdings, Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:5a:48 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Thomson Reuters Holdings, Inc.

Company registration number: Fd8J0lPFToNybouyIg7tflNE5zdr-Vpd
Organization: Thomson Reuters Holdings, Inc.
Organization unit: Healthcare
State / Province: Michigan
Locality: Ann Arbor
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:5a:48
Serial Number (int): 88648
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 56:b5:1f:26:36:61:cc:41:c1:d7:a1:d4:dd:b1:f7:0b:09:af:fa:57
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 9a:bd:03:21:c1:e6:ba:50:56:e5:c6:1b:49:b2:8c:58:4a:91:d6:84
Fingerprint (sha256): 3d:76:32:15:ae:3c:82:3a:2e:ec:45:ec:c9:7d:c8:66:51:b1:8c:d9:22:a0:0d:f4:fa:9e:d9:66:17:6a:9c:5f

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate advantage02.medstat.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advantage02.medstat.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantage02.medstat.com

Other certificates including the domain name medstat.com

(limited to 100 certificates)
mdss.medstat.com
advantage58.medstat.com
onbaseapptest.cxda.medstat.com
medstat.com
TRVWISWEB01.cxda.medstat.com
advantage20.medstat.com
thfedididp.medstat.com
trvlapp3926.cxda.medstat.com
advantage07.medstat.com
gaedstestcog.cxda.medstat.com
advantage59.medstat.com
trvlapp4358.cxda.medstat.com
trvwadvsql09.cxda.medstat.com
TRVWCAWEB05.cxda.medstat.com
thfedidhm.medstat.com
support.medstat.com
tccdemo1.medstat.com
trvlapp3935.cxda.medstat.com
trvlapp2421.cxda.medstat.com
trvlapp1846.cxda.medstat.com
cobidmcognos.cxda.medstat.com
advantage27.medstat.com
advantage03.medstat.com
advantage07.medstat.com
advantage81.medstat.com
trvlapp1154.cxda.medstat.com
trvlapp0870.cxda.medstat.com
advantage2008.medstat.com
gaedsuatcog.cxda.medstat.com
advantage39.medstat.com
trvlapp1078.cxda.medstat.com
trvlapp4148.cxda.medstat.com
advantage38.medstat.com
trvwmiweb07.cxda.medstat.com
trvlapp0872.cxda.medstat.com
voltage-pp-0000.medstat.com
trvlapp3795.cxda.medstat.com
trvwedwuat02.cxda.medstat.com
infdev.medstat.com
apps.medstat.com
advantage26.medstat.com
cobidmsas.cxda.medstat.com
advantage08.medstat.com
trvwmiweb08.cxda.medstat.com
trvlapp3840.cxda.medstat.com
apps2.medstat.com
advantage11.medstat.com
trvlapp1156.cxda.medstat.com
trvlapp1552.cxda.medstat.com
advantage62.medstat.com
voltage-pp-0000.medstat.com
trvlapp3155.cxda.medstat.com
TRVWEVATAB01.cxda.medstat.com
advantage02.medstat.com
sdss.truvenhealth.com
leapfrog.medstat.com
advantage66.medstat.com
advantage67.medstat.com
advantage43.medstat.com
advantage16.medstat.com
TRVWMIDMZ03.cxda.medstat.com
trvwadvsql08.cxda.medstat.com
advantage64.medstat.com
advantage33.medstat.com
mdss.medstat.com
mihealthandsafety.medstat.com
advantage61.medstat.com
trvwbuptab06.cxda.medstat.com
medstat.com
halfreski.medstat.com
trvlapp3870.cxda.medstat.com
trvlapp0871.cxda.medstat.com
advantage50.medstat.com
TRVWEDWUAT01.cxda.medstat.com
advantage16.medstat.com
thfedid.medstat.com
advantage60.medstat.com
trvlapp3595.cxda.medstat.com
advantage66.medstat.com
thfedidhm.medstat.com
trvlapp0869.cxda.medstat.com
advantage.medstat.com
trvlapp1846.cxda.medstat.com
mdss.medstat.com
trvlapp1460.cxda.medstat.com
trvlapp3870.cxda.medstat.com
leapfrog.medstat.com
trvwedwuat04.cxda.medstat.com
trvlapp4093.cxda.medstat.com
trvlapp4407.cxda.medstat.com
TRVWAPCDPROD01.cxda.medstat.com
trvlapp1980.cxda.medstat.com
trvlapp0872.cxda.medstat.com
cdqmat.medstat.com
advantage43.medstat.com
trvlapp4122.cxda.medstat.com
advdev.medstat.com
advantage39.medstat.com
advdemo3.medstat.com
advantage58.medstat.com

Certificate

The complete raw certificate details for advantage02.medstat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDDXclxWjxm/15IaB809
AgKjoHTuVFoey7jgyr09QSqnHfP8nwYXr6IDC+F99+BdwEEdz6j+OrHzCt4il/BU
AoCWnvmpBO1hGz1R1RvrpG1VuyekIWJ2lGQiEcM02sDesraWeHUEMbiR24+QcIgB
l19nG3byqvXzHSJu8Jq7CWdLNGFA+5NRndJuM44ykVU2dCjDKp6MQeiIrBPIG5vi
z7mudB9smUR5EEKLUukLmXNr1w5h07kYZ2WcksEutNRwFhdR/78uzpiwcidrSwZ1
3juUIHHfHNeQUMJb8PmL8vsMlULyi3hFTd+2RJbcnZxcVRhvJWQsg7ECO/JVTGwV
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-16 01:15:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-18 16:19:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fd8J0lPFToNybouyIg7tflNE5zdr-Vpd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advantage02.medstat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25271745678275682156917061639453395803275106183489953428910297282103036927478968961146109884403766923826815845701177883297604586571659905174185125276453261249197619623902805056954386356833975629825951689341726269176100134037502894108373972836195111232315778434324341092569787717934227464497756741898163416129692943574306573760499039605750253345787794083721721825910787928938205836182838379362441025970188081937697345282659773909846595693893089179577007071030003500875083046139732258191696725649144682972963129864486838226255034798468162849988543831987026695223182211095798828007314590340328348453766342398135967159701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantage02.medstat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b51f263661cc41c1d7a1d4ddb1f70b09affa57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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