login.healthdata.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:bf:00:0a:ec:dd:0d:b9:df:af:ce:b6:8c:50:ef:34 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=login.healthdata.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:00:0a:ec:dd:0d:b9:df:af:ce:b6:8c:50:ef:34
Serial Number (int): 4979413552922224581906650998290575156
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 66:ce:a1:3e:05:3f:f8:14:c6:a9:09:17:f1:5e:32:f1:4e:3d:a2:fe
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4d:6b:c2:14:c0:32:ab:02:f8:8e:31:fb:40:27:3d:e0:87:42:85:1c
Fingerprint (sha256): 98:a4:7f:56:4f:32:63:29:b7:4c:06:31:11:74:ac:f3:a1:a8:85:6d:60:76:9f:e7:81:3c:33:53:f4:35:87:aa

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate login.healthdata.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.healthdata.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.healthdata.org

Other certificates including the domain name healthdata.org

(limited to 100 certificates)
dev.healthdata.org
*.stage.ghdx.healthdata.org
ssl441041.cloudflaressl.com
login.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441041.cloudflaressl.com
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl4831.cloudflare.com
sni.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
s3.healthdata.org
learn.healthdata.org
ssl319586.cloudflaressl.com
learn.healthdata.org
learn.healthdata.org
dl.healthdata.org
ssl441041.cloudflaressl.com
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
ssl441041.cloudflaressl.com
ssl319586.cloudflaressl.com
healthdata.org
sni.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
dl.healthdata.org
console.dl.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
dev.healthdata.org
learn.healthdata.org
healthdata.org
healthdata.org
learn.healthdata.org
sni.cloudflaressl.com
ssl441042.cloudflaressl.com
learn.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
login.healthdata.org
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441041.cloudflaressl.com
healthdata.org
www.healthdata.org
*.stage.ghdx.healthdata.org
console.dl.healthdata.org
learn.healthdata.org
console.dl.healthdata.org
healthdata.org
healthdata.org
console.dl.healthdata.org
dl.healthdata.org
console.dl.healthdata.org
healthdata.org
login.healthdata.org
console.dl.healthdata.org
console.dl.healthdata.org
healthdata.org
sni.cloudflaressl.com
dl.healthdata.org
ssl441042.cloudflaressl.com
healthdata.org
healthdata.org
ssl441042.cloudflaressl.com
www.healthdata.org
healthdata.org
ssl441040.cloudflaressl.com
learn.healthdata.org
ssl441040.cloudflaressl.com
console.dl.healthdata.org
ssl4831.cloudflare.com
sni.cloudflaressl.com
console.dl.healthdata.org
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441042.cloudflaressl.com
*.stage.ghdx.healthdata.org
ssl441040.cloudflaressl.com
ssl441042.cloudflaressl.com
healthdata.org
login.healthdata.org
learn.healthdata.org
ssl441041.cloudflaressl.com
ssl441041.cloudflaressl.com
ssl4831.cloudflare.com
ssl441041.cloudflaressl.com
ssl441042.cloudflaressl.com
ssl441040.cloudflaressl.com
learn.healthdata.org
sni.cloudflaressl.com

Certificate

The complete raw certificate details for login.healthdata.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKCYwscolwOW2rEmpDNs
KJV6BMOriFiHYMewKyrlyohJfiu8UwzlOzRY6u8vWPUZu4ip/EV32VJHHmxhpHrU
ejiQrB1ZIrRgB1IE5l6CbZIJnM6UTKT2aB+n5Zcup7S14OszbX7XOFycRmw0yomu
q3blmJSsgBvjzP3aBCp8szk3lNz8bpzzLROKBhPrcbIR6e/iO+zZkHmQq50XoRhI
mcbHJfkkiZHj8n1vnn7eE/zk2XfCko/sh5Kbyvooi1Rlkc4Tg6+xnh7LG3g2j5fK
Q0ONelmY7AZNpk+x7tBoHPkaRBIdbAPlHSYpaTv7i/1mDdrfMV2uKZsbdpzEdFFL
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4979413552922224581906650998290575156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.healthdata.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23307041308981196228207519200887153039192424958365662730289210967521160486594475473167104340400240288068381414300174552378722678767509377386343472936256796983105117133095679042505899543959448603353009639942798081120352305186455376206567166896373831705130939631072897354605553682539445776312250684422184908138586349627745070328648332455431943512536469079095004675808584360681467776802470685533118199230628790182740644799814104328944322689870531548073848814041703078008212337841511326430967502277362486349751991314554217657275760766856100265316753240774464191900230211986200354160409676022222274474797222702597452942081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66cea13e053ff814c6a90917f15e32f14e3da2fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.healthdata.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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