care.mynovant.org

- Novant Health -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number f2:7d:e2:3a:9f:98:0c:f6:88:d4:e7:fe:eb:65:7d:86 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Novant Health

Organization: Novant Health
Organization unit: Novant Health Inc.
Organization unit: Hosted by Novant Health
Organization unit: EliteSSL
Address: 2085 Frontis Plaza Blvd
Postal code: 27103
State / Province: North Carolina
Locality: Winston Salem
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f2:7d:e2:3a:9f:98:0c:f6:88:d4:e7:fe:eb:65:7d:86
Serial Number (int): 322326800556462280303466899829701311878
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:be:cf:0f:ff:3d:d9:04:f4:b9:f5:c9:fc:23:86:f3:e7:31:e9:a6
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): c7:5f:15:6b:9d:b4:01:da:10:7e:16:e2:98:ef:4d:00:ed:6d:40:2c
Fingerprint (sha256): 94:81:c3:46:b3:91:30:1a:14:f4:77:f5:27:5c:c0:ea:1d:e1:40:91:23:e4:ad:85:e5:e5:bf:01:62:e6:5f:5e

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate care.mynovant.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for care.mynovant.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

care.mynovant.org
www.care.mynovant.org

Other certificates including the domain name mynovant.org

(limited to 100 certificates)
nhlink.mynovant.org
webproxy.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webproxy.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
nhvpn.mynovant.org
tesyproxy.mynovant.org
webcenter2.novantpractices.org
www.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
mvv.mynovant.org
webproxy.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
nhlink.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
webproxy.mynovant.org
nhlink.mynovant.org
myportal.mynovant.org
care.mynovant.org
myportal.mynovant.org
webcenter2.novantpractices.org
nhlink.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
mvv.mynovant.org
webcenter2.novantpractices.org
mvv.mynovant.org
webproxy.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
care.mynovant.org
www.novantonline.org
webcenter2.novantpractices.org
www.mynovant.org
nhlink.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
mvv.mynovant.org
webcenter2.novantpractices.org
ssl887705.cloudflaressl.com
videovisits.mynovant.org
care.mynovant.org
webcenter2.novantpractices.org
webcenter2.novantpractices.org
ssl887706.cloudflaressl.com
webcenter2.novantpractices.org
care.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
nhccportal.mynovant.org
nhlink.mynovant.org
testproxy.mynovant.org
nhlink.mynovant.org
nhlink.mynovant.org
webproxy.mynovant.org
myportal.mynovant.org
nhccportal.mynovant.org
webcenter2.novantpractices.org
care.mynovant.org
www.mynovant.org
myportal.mynovant.org

Certificate

The complete raw certificate details for care.mynovant.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322326800556462280303466899829701311878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '27103'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winston Salem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2085 Frontis Plaza Blvd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novant Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novant Health Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Novant Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EliteSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'care.mynovant.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919665907418639000061821303054564335747052218490057738080447876090534631731768308673282090060202343608910129629960503179361109170259102246225792205210475624139792141745422444241766866791115572176970666260563414961000455018930764515591084474542715874971323835427969110629014913275267106744461172277133449978629872770967003717619663037404445505801827589685542533718218995231553450819360036736696328329120361031968901583638161558817981350562834845329082430816671840362711484081340646509428482621432034272004539486788333910706717946352504609262386196544194152622071583894165811312042896008916747531683439459834307643098938970663747245684908274422132209118934307615569995257813106297371617124892342067544039139887791411051836848807871105995416024039701579028583293851070430490754317336278005422881905843537136297695417398568699958255376898136837675677697540433706594733246045291241514588760322307299266604437352495132304779006279966261758833616204105971252240512281715626491795393673916981209840865247533017012187146139108421093838273791962291871277808926556227730758531159934684077694602222179490187269543968433378735602407672561033591850823505760955974298524283958626974670374396494594321993039595600428426223232355176910309562949753433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4becf0fff3dd904f4b9f5c9fc2386f3e731e9a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.mynovant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care.mynovant.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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