assets.hospitals.southerncross.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:a6:9f:f9:c2:73:37:bb:2b:ce:23:0c:66:0d:09:fa:20 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=assets.hospitals.southerncross.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6e:a6:9f:f9:c2:73:37:bb:2b:ce:23:0c:66:0d:09:fa:20
Serial Number (int): 298989400644810686981311220210958036761120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:a6:95:78:27:0f:44:23:c5:08:81:ac:79:4a:06:6a:48:60:be:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:3d:77:b2:c7:13:c5:97:38:e1:f1:20:b3:ab:9d:06:a1:3e:59:d3
Fingerprint (sha256): 9f:9a:d8:a4:b5:28:f7:9e:da:eb:ea:31:cc:55:ae:73:2c:bf:18:fb:32:29:4a:7e:fb:96:db:60:3b:a5:18:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assets.hospitals.southerncross.co.nz

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.hospitals.southerncross.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.hospitals.southerncross.co.nz
gillieshospital.co.nz
healthcare.southerncross.co.nz
hospitals.southerncross.co.nz
southerncrosshealthcare.co.nz
southerncrosshospitals.co.nz
southerncrossqe.co.nz
sxhospitals.co.nz
uat.healthcare.southerncross.co.nz
www.gillieshospital.co.nz
www.hospitals.southerncross.co.nz
www.southerncrosshealthcare.co.nz
www.southerncrosshospitals.co.nz
www.southerncrossqe.co.nz
www.sxhospitals.co.nz

Other certificates including the domain name southerncross.co.nz

(limited to 100 certificates)
dev.southerncross.co.nz

provider-identity-pp.southerncross.co.nz
hospitals.southerncross.co.nz
cm-pp.southerncross.co.nz
npos.southerncross.co.nz
brandkit.southerncross.co.nz
identity.southerncross.co.nz
apply.southerncross.co.nz
u.southerncross.co.nz


brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
sam-facade.southerncross.co.nz
dev.southerncross.co.nz
aplogo.southerncross.co.nz
hospitals.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
pp.southerncross.co.nz
easyclaim.southerncross.co.nz
identity.southerncross.co.nz
kete.southerncross.co.nz
beingwell.southerncross.co.nz
careers.southerncross.co.nz
providers.southerncross.co.nz

hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
southerncross.co.nz

southerncrosshospitals.co.nz
prodslot.southerncross.co.nz
brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.ts.southerncross.co.nz
*.api-sit.southerncross.co.nz
brandkit.southerncross.co.nz
finance.southerncross.co.nz
aplogo.southerncross.co.nz
jobs.southerncross.co.nz
aplogo.southerncross.co.nz
*.api-sit.southerncross.co.nz
customer360.pr.southerncross.co.nz
gateway-orb.southerncross.co.nz
assets.hospitals.southerncross.co.nz
identity.southerncross.co.nz
easyclaim16.ts.southerncross.co.nz
identity.southerncross.co.nz
uat.hospitals.southerncross.co.nz
identity-signing.southerncross.co.nz
aplogo.southerncross.co.nz
*.southerncross.co.nz
schs-workflow.southerncross.co.nz
hospitals.southerncross.co.nz
identity-pp.southerncross.co.nz
viewpoint.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.api-sit.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
uat.hospitals.southerncross.co.nz

my.southerncross.co.nz
*.surfly.southerncross.co.nz
email.southerncross.co.nz
*.mapi-sit.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
provider-identity-pp.southerncross.co.nz
uat.hospitals.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
*.southerncross.co.nz
*.api-dev.southerncross.co.nz
gateway-orb.southerncross.co.nz
pp.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
gateway-bri.southerncross.co.nz
aplogo.southerncross.co.nz
aplogo.southerncross.co.nz
mapi.southerncross.co.nz
cm-dev.southerncross.co.nz
prodslot.southerncross.co.nz
*.beingwell.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
www.southerncross.co.nz
www.viewpoint.southerncross.co.nz
brandkit.southerncross.co.nz
viewpoint.southerncross.co.nz
easy-claim-help.southerncross.co.nz
southerncross.co.nz

Certificate

The complete raw certificate details for assets.hospitals.southerncross.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaWRUA7aH6fDflTaNWrU
J9NTlZ7jRdFiPQxJ3AX9SW2fpzml+WQVWwEP0tMzB/e2nyPE/KzkB2vgfW5LNU2O
W1E4sDpUxgDUXhrFOmccjt+pKm6+GOLHRuC+4TADjInEBT7nIyrCcEs7PaGMHb3y
iKZV3BpBt9tPKfFVjugKOiGpO6x6wTLUu0qssyM5qOLlXPDYrpKHgA4AlD9HRadV
lXHmvRyffd5kgEPjVMRP/bCrrPbDjKiyMZv+84wIr+400V9elkFnJu6OTF7xUOji
zSsUz1mY3eO5M9zsr73A9Wo3rZjHxG2wHFhoTdVNGEnkEvkB9ReLjtQVqWofnLGg
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298989400644810686981311220210958036761120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:17:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 00:17:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24445637298666375792569009045298899883962274947058877182566522211437749352725142569189447750277870241592397220989374520558253579099411140649290998275406588098729835517114456920524117987288458944125765248104873083814326328103986516715798165529851956928827619174331147580575681458105315373562358936251402957269251654087709166744744454817110608543649316203314328298816373407821752166472801346172406019018078882505895817243691208722761367050507115852257584949619337458630918663288720671691490184049203564530486326890622244640833648266776634771190371180440667170511410145081212294183938736451768254217293074336584544919777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fa69578270f4423c50881ac794a066a4860bee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9c61b4220000040300463044022053827e9838d4eb007b6dc3ba5810886a8730bed745f2ef31897334e8134896a202205236e764ae19571b838e97e25c31a3215c5096fd1baf62b2c44214acfaff7824007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018e9c61b4ea000004030047304502210091191a40c38eb7e3b87c78cb31df99d9c69236871cc73f53a2c6401170b7d249022020b9fe15bf6f620239e65b467209565a648050828988e4a7de3891bbdedfe823
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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