my.marshfieldclinic.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:c3:e2:c7:0b:a9:82:11:ce:74:e9:d0:f9:ca:66:fe was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=my.marshfieldclinic.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:c3:e2:c7:0b:a9:82:11:ce:74:e9:d0:f9:ca:66:fe
Serial Number (int): 18297061427202221159095794708182099710
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:97:b0:0f:d6:6d:05:9e:63:ca:b0:bb:52:6f:8f:ce:04:9d:7d:3d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 26:7f:e3:39:a4:7a:1a:51:b5:fd:4b:59:98:9c:50:b3:c2:fe:bc:17
Fingerprint (sha256): 8f:1d:2e:c4:7d:bb:1c:78:38:e2:62:f8:ea:9e:b2:72:6a:23:fe:b6:37:f3:6f:dc:9d:ba:c8:56:dd:b3:72:73

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate my.marshfieldclinic.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.marshfieldclinic.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.marshfieldclinic.org

Other certificates including the domain name marshfieldclinic.org

(limited to 100 certificates)
shine365.marshfieldclinic.org
stats.marshfieldclinic.org
securemail.marshfieldclinic.org
marshfieldclinic.org
communityhealth.marshfieldclinic.org
lyncsip2.marshfieldclinic.org
activesync-plt.marshfieldclinic.org
marshfieldclinic.org
rdsweb.marshfieldclinic.org
lyncweb.marshfieldclinic.org
vetimages.marshfieldclinic.org
join.marshfieldclinic.org
uag.marshfieldclinic.org
lyncsip2.marshfieldclinic.org
nuancemobile.marshfieldclinic.org
marshfieldclinic.org
stats.marshfieldclinic.org
willow.marshfieldclinic.org
get2.marshfieldclinic.org
webservicesstage.marshfieldclinic.org
sshisp-dev.marshfieldclinic.org
access.marshfieldclinic.org
connect.marshfieldclinic.org
rdsweb.marshfieldclinic.org
appstore.marshfieldclinic.org
outlook.marshfieldclinic.org
connect.marshfieldclinic.org
cribbs.marshfieldclinic.org
outlook.marshfieldclinic.org
healthconnect.marshfieldclinic.org
stats.marshfieldclinic.org
vpn.marshfieldclinic.org
join.marshfieldclinic.org
bbs1.marshfieldclinic.org
appstore.marshfieldclinic.org
communityhealth.marshfieldclinic.org
marshfieldclinic.org
adfs.marshfieldclinic.org
lyncweb.marshfieldclinic.org
healthconnecttest.marshfieldclinic.org
identity.marshfieldclinic.org
LyncWeb.Marshfieldclinic.org
securemail.marshfieldclinic.org
mcs-csmcwd1.marshfieldclinic.org
amc.marshfieldclinic.org
jabberexpresse.mfldclin.edu
acano.marshfieldclinic.org
lyncweb.marshfieldclinic.org
join.marshfieldclinic.org
appstore-dev.marshfieldclinic.org
webservices.marshfieldclinic.org
bbs1.marshfieldclinic.org
communityhealth.marshfieldclinic.org
vpn.marshfieldclinic.org
sshisp-dev.marshfieldclinic.org
outlook.marshfieldclinic.org
cribbs.marshfieldclinic.org
cribbs.marshfieldclinic.org
seg.marshfieldclinic.org
appstore.marshfieldclinic.org
www.marshfieldclinic.org
shine365.marshfieldclinic.org
acano.marshfieldclinic.org
adfsencrypt.marshfieldclinic.org
securemail.marshfieldclinic.org
securemail.marshfieldclinic.org
outlook.marshfieldclinic.org
get2.marshfieldclinic.org
amc.marshfieldclinic.org
get2.marshfieldclinic.org
stats.marshfieldclinic.org
shine365.marshfieldclinic.org
outlook.marshfieldclinic.org
jabberexpresse.mfldclin.edu
shine365.marshfieldclinic.org
businessdictation.marshfieldclinic.org
mcs-csmcwd1.marshfieldclinic.org
outlook.marshfieldclinic.org
ishine.marshfieldclinic.org
awseg.marshfieldclinic.org
securemail.marshfieldclinic.org
ishine.marshfieldclinic.org
ws1.marshfieldclinic.org
outlook.marshfieldclinic.org
ccha.marshfieldclinic.org
access.marshfieldclinic.org
vpn.marshfieldclinic.org
appstore-dev.marshfieldclinic.org
pdmp.marshfieldclinic.org
cco.marshfieldclinic.org
amc.marshfieldclinic.org
stats.marshfieldclinic.org
appstore.marshfieldclinic.org
get2.marshfieldclinic.org
my.marshfieldclinic.org
willow.marshfieldclinic.org
vpn.marshfieldclinic.org
marshfieldclinic.org
get2.marshfieldclinic.org
activesync.marshfieldclinic.org

Certificate

The complete raw certificate details for my.marshfieldclinic.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPefp0YJjSrE4syUeeJ+
oXaKNPUIqi6ybLcqZ3SD1026p/xycXwL1IaMcSTLATxtPn6u+C6Ej663AcdC02jv
OpxmE+1LYeQe3z32zdt1a49msYXvg5VQjCbbfF8t3khtvJqtfG0mgV1N8iT/yluE
8Wekb54Y+iBe2kr3bzZx1hpTJJTkV4g24pB4Zkqk+HQKSe9BpJwLex8j6IKBUUWB
s9SFc1ZhOKIQ1vtwJBXdyEHA5V+oUkIoRI9+soaSroqRpAjdUagk383s3e8GGiMz
Z0JYOsD8fuWc6bASJQ6Kl5BbNOlF0leltZBUvnvc4pspL446AXT1JPmz7ov5kW/z
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18297061427202221159095794708182099710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.marshfieldclinic.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22340049444958043635107180071015416017242496661067759594952005963518345943092309641802262326832160503298625769126885248109434462312292290175714340545007839315848277649770235491596028217139085711184209581879297534044938875836074828879223623764594222257642746973258184832932028335001500416340379328288680988960803171833232920221243493095947164033724894098745298381480467430364745764721926900032673197907309996896915210640918379892330595256577873914593400608418928054089476298637379802181170584821481350799543653189163396060082022547575406758352878723491895594134195372969048572042057725091541110115296011466140206232557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac97b00fd66d059e63cab0bb526f8fce049d7d3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.marshfieldclinic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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