cancer.montefioreeinstein.org

- Montefiore Medical Center -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:e1:48:0e:36:a9:35:07:1f:9e:24:0c:ea:d6:93:89 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Montefiore Medical Center

Organization: Montefiore Medical Center
State / Province: New York
Locality: Bronx
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e1:48:0e:36:a9:35:07:1f:9e:24:0c:ea:d6:93:89
Serial Number (int): 3828184244342655492894831054564004745
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 68:22:11:27:ee:fc:93:98:16:53:49:88:e3:6e:60:54:24:41:a0:02
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 59:a8:09:95:bd:0f:69:12:e8:2c:21:9c:9d:5c:3b:74:a8:63:a3:ee
Fingerprint (sha256): b0:24:56:02:72:a5:68:a9:08:f1:65:92:49:3a:1b:3f:10:2d:f6:21:aa:02:1b:88:d2:87:38:7c:2b:7f:0e:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate cancer.montefioreeinstein.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cancer.montefioreeinstein.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cancer.montefioreeinstein.org
cancer-content.montefioreeinstein.org
dev-cancer.montefioreeinstein.org
dev-cancer-content.montefioreeinstein.org
qa-cancer.montefioreeinstein.org
qa-cancer-content.montefioreeinstein.org
uat-cancer.montefioreeinstein.org
uat-cancer-content.montefioreeinstein.org
stage-cancer.montefioreeinstein.org
stage-cancer-content.montefioreeinstein.org

Other certificates including the domain name montefioreeinstein.org

(limited to 100 certificates)
san-12-s10.tlsprovisioning.exacttarget.com
montefioreeinstein.org
stroke.montefioreeinstein.org
montefioreeinstein.org
san-12-s10.tlsprovisioning.exacttarget.com
san-12-s10.tlsprovisioning.exacttarget.com
montefioreeinstein.org
montefioreeinstein.org
san-12-s10.tlsprovisioning.exacttarget.com
san-12-s10.tlsprovisioning.exacttarget.com
cancer.montefioreeinstein.org
cancer.montefioreeinstein.org
san-12-s10.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for cancer.montefioreeinstein.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qc540doL6Af9icz7ldg
6e/hbqiPSizOyayCwhy/OUV/Rq1XkbqDlLcfIUzfyDYg+Yh98xwF7kfxlS7aclrW
oOeGFU3nKj+sBGa0V9BMDt4+DH7AEjkgkIEgcLM58cevQYM9MEAZNQa0os7aXraj
iwt4k0QNQq2sdF5B/w5ivnF0WYg+5xjEmACrNucuLkrA6hek5G3Mqx20pK5pt6z0
C1UdkCy6rIGEcwVTVWgyFOJTZV76hbU+zt4m21zV73X+b4R9DSqB/sr1Ex8rUIZw
2kdQtpCKR0QygFfA7WoVG2X69nqZAE0Amk6/ls/+OUyo6fcDUsGOfi/Zq/b6HyEa
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3828184244342655492894831054564004745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montefiore Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cancer.montefioreeinstein.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28612319197608655704363751450828068867505657317497321924084123152602684577516476552617820245854327687793202592726384939038640105491211805009434465891696184479486227559924225232569900866158002684774968366929557784471134403798569544421122328640817914369391361195485485392295488164045715130690149006447413456257056858336103406054675784421684297434387124125417404495523902450954602457767239154339336611976971716793798981408428066542592371261890768159934493003140508213039328073095335988966810558349594867140241439350292977020449714155246543463324085543182849671866176662409719655676692528424705027619159753118525197195873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68221127eefc939816534988e36e60542441a002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer-content.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancer.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancer-content.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cancer.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cancer-content.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cancer.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cancer-content.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cancer.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cancer-content.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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