eclink.mcfarlandclinic.com

- McFarland Clinic PC -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:f2:32 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

McFarland Clinic PC

Company registration number: uOxnwEUevonwsmZc4LUhg9PZ6rW2VW4z
Organization: McFarland Clinic PC
Organization unit: MIS
State / Province: Iowa
Locality: Ames
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f2:32
Serial Number (int): 193074
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 68:a0:c8:9f:67:b7:ca:13:24:36:4a:73:54:7a:35:85:5b:e4:fb:50
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 29:31:0b:20:ff:62:e1:2a:e4:10:5e:c4:b1:b7:68:1f:fe:78:61:18
Fingerprint (sha256): 62:9a:34:28:15:c0:2a:b4:e7:fa:df:75:d5:94:90:6c:23:56:47:af:92:33:61:1d:ff:25:dc:48:f7:18:b9:53

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate eclink.mcfarlandclinic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eclink.mcfarlandclinic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eclink.mcfarlandclinic.com

Other certificates including the domain name mcfarlandclinic.com

(limited to 100 certificates)
sso2.mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
update.mcfarlandclinic.com
demosched.mcfarlandclinic.com
pacs.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
tmtest.mcfarlandclinic.com
sso1.mcfarlandclinic.com
eclink.mcfarlandclinic.com
demosched.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
apps.mcfarlandclinic.com
tm01.mcfarlandclinic.com
sso.mcfarlandclinic.com
eclink.mcfarlandclinic.com
sso.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
sched.mcfarlandclinic.com
access.mcfarlandclinic.com
work.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
mcfarlandclinic.com
password.mcfarlandclinic.com
www.mitsubishidrummondville.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
password.mcfarlandclinic.com
app.sukii.at
sfdtest.mcfarlandclinic.com
apps.mcfarlandclinic.com
citrix.mcfarlandclinic.com
mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
www.mcfarlandclinic.com
pacs.mcfarlandclinic.com
update.mcfarlandclinic.com
www.ultimatesoundgroup.com
epiphany.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
*.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
nasb.beta.literalword.com
pacs.mcfarlandclinic.com
remote.mcfarlandclinic.com
rte.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
www.mcfarlandclinic.com
password.mcfarlandclinic.com
update.mcfarlandclinic.com
sched.mcfarlandclinic.com
schedule.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcf-fresh.mcfarlandclinic.com
emrproxytst.mcfarlandclinic.com
share.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
access.mcfarlandclinic.com
pacs.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
password.mcfarlandclinic.com
demosched.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
rte.mcfarlandclinic.com
tm01.mcfarlandclinic.com
access.mcfarlandclinic.com
apps.mcfarlandclinic.com
app.masworldsuite.com
mycharttst.mcfarlandclinic.com
sso2.mcfarlandclinic.com
mcfarlandclinic.com
citrix.mcfarlandclinic.com
renouf.dev
MYCHARTTST.MCFARLANDCLINIC.COM
PASSWORD.MCFARLANDCLINIC.COM
webvpn.mcfarlandclinic.com
eclink.mcfarlandclinic.com
apps.mcfarlandclinic.com
securelink.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
tm01.mcfarlandclinic.com
mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcfarlandclinic.com
www.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
sso.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
citrix.mcfarlandclinic.com

Certificate

The complete raw certificate details for eclink.mcfarlandclinic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum/Loaqt1cG/YGPNpxyD
LjXTXU4c84njpk0GOW30lfgQk8ZHVNc0KPr8aazRBDaE3SZRmBMphOmbZ/M3Hhg+
tPoKmjwz6JjoCXhnsXkyq1Zqjb+SNW5P+izjlS0dZaYxobIwd+b9aDJKmMAmUd0G
rU70EU11zV07/wLyXpzhUAbXvAMCGyMh/tfDakkAGIuTHA2WcYQQSfqS2gZC8qom
WQtT34orqqaYJO8Eu6QXrnBj8RjOLRHeh0wY711WSiI1q4ugi2vwUordIIUMih9a
HyE2XKh+3MxUDGytESJvZNBYIsRMZp52GelexPn6F81Sf1nXAnAwhqq8bbU89Uwr
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 193074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-07 06:07:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-10 13:08:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uOxnwEUevonwsmZc4LUhg9PZ6rW2VW4z'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ames'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McFarland Clinic PC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eclink.mcfarlandclinic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23535453107638503470324517112623797491211858454605197385920721104566416762204103901418413668362800830101298185238707639794709491151153794375184580925947590541187833573026706108654847014147999095615575078308376959572638632617099589929188250411766414276198324212605278105973940380203045761197780407830909529773576325569294465988879451146171510623974994635179023069835396922599715414290166920565408873947070861315028259825462625077340130409327990263104067812989442137287437595311436238838036185979408229238178989475723165904144452421926809232042935842870591277356293744972679491071546668659527949704713514649203705129983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclink.mcfarlandclinic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68a0c89f67b7ca1324364a73547a35855be4fb50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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