assets.hospitals.southerncross.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:a4:20:d3:a3:25:00:4e:d6:24:b7:82:44:cc:48:30:52:9a was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.hospitals.southerncross.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:20:d3:a3:25:00:4e:d6:24:b7:82:44:cc:48:30:52:9a
Serial Number (int): 317186800149781218820155398750358830338714
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:00:16:c9:01:87:38:e7:8d:4a:e3:88:2d:91:39:2a:a6:5b:c2:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:95:04:b7:a4:a1:ae:00:5a:a4:5c:65:42:e5:8a:8e:7b:6c:ee:ba
Fingerprint (sha256): b7:1c:58:35:12:56:2d:7b:f4:23:92:6a:55:85:36:9e:cc:43:d8:f8:99:3e:ed:c4:3c:08:db:2f:6a:16:8c:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assets.hospitals.southerncross.co.nz

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.hospitals.southerncross.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.hospitals.southerncross.co.nz
gillieshospital.co.nz
healthcare.southerncross.co.nz
hospitals.southerncross.co.nz
southerncrosshealthcare.co.nz
southerncrosshospitals.co.nz
southerncrossqe.co.nz
southernendoscopy.co.nz
sxhospitals.co.nz
uat.healthcare.southerncross.co.nz
www.gillieshospital.co.nz
www.hospitals.southerncross.co.nz
www.southerncrosshealthcare.co.nz
www.southerncrosshospitals.co.nz
www.southerncrossqe.co.nz
www.southernendoscopy.co.nz
www.sxhospitals.co.nz

Other certificates including the domain name southerncross.co.nz

(limited to 100 certificates)

hospitals.southerncross.co.nz
cm-pp.southerncross.co.nz
npos.southerncross.co.nz
brandkit.southerncross.co.nz
identity.southerncross.co.nz
apply.southerncross.co.nz
u.southerncross.co.nz


brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
sam-facade.southerncross.co.nz
dev.southerncross.co.nz
aplogo.southerncross.co.nz
hospitals.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
pp.southerncross.co.nz
easyclaim.southerncross.co.nz
identity.southerncross.co.nz
kete.southerncross.co.nz
beingwell.southerncross.co.nz
careers.southerncross.co.nz
providers.southerncross.co.nz

hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
southerncross.co.nz

southerncrosshospitals.co.nz
brandkit.southerncross.co.nz
assets.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.ts.southerncross.co.nz
*.api-sit.southerncross.co.nz
brandkit.southerncross.co.nz
finance.southerncross.co.nz
aplogo.southerncross.co.nz
jobs.southerncross.co.nz
aplogo.southerncross.co.nz
*.api-sit.southerncross.co.nz
customer360.pr.southerncross.co.nz
gateway-orb.southerncross.co.nz
assets.hospitals.southerncross.co.nz
identity.southerncross.co.nz
easyclaim16.ts.southerncross.co.nz
identity.southerncross.co.nz
uat.hospitals.southerncross.co.nz
identity-signing.southerncross.co.nz
aplogo.southerncross.co.nz
*.southerncross.co.nz
schs-workflow.southerncross.co.nz
hospitals.southerncross.co.nz
identity-pp.southerncross.co.nz
viewpoint.southerncross.co.nz
hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
*.api-sit.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
uat.hospitals.southerncross.co.nz

my.southerncross.co.nz
*.surfly.southerncross.co.nz
email.southerncross.co.nz
*.mapi-sit.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
uat.hospitals.southerncross.co.nz
southerncrosshospitals.co.nz
hospitals.southerncross.co.nz
*.southerncross.co.nz
*.api-dev.southerncross.co.nz
gateway-orb.southerncross.co.nz
hospitals.southerncross.co.nz
*.mapi-test.southerncross.co.nz
gateway-bri.southerncross.co.nz
aplogo.southerncross.co.nz
aplogo.southerncross.co.nz
mapi.southerncross.co.nz
cm-dev.southerncross.co.nz
prodslot.southerncross.co.nz
*.beingwell.southerncross.co.nz
aimee-pp.ts.southerncross.co.nz
uat.hospitals.southerncross.co.nz
hospitals.southerncross.co.nz
www.southerncross.co.nz
www.viewpoint.southerncross.co.nz
brandkit.southerncross.co.nz
viewpoint.southerncross.co.nz
easy-claim-help.southerncross.co.nz
southerncross.co.nz
api.switch.southerncross.co.nz
careers.southerncross.co.nz
*.api-test.southerncross.co.nz
assets.hospitals.southerncross.co.nz
*.switch.southerncross.co.nz

Certificate

The complete raw certificate details for assets.hospitals.southerncross.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DlHvM7q5vJnd3H97jTx
hxgS/zl2GJ08s2SyWeMKtD8szrm2i6QYPdJZ90PP+XXMV7fjMmJJSm00/Z05C/4/
cKlkM2NX0ZMVdHXWNln3Yx0ULjnH8GBFVjntOLeKoY6IRMg7fUoOLmzYCMFoqAi7
BgSyuN5Oua3CNc3oID30ANWO/3TcMJHI3EY3epGM+FaIE177izNHBq74nWPXM5TS
JdLYJ+gbIbiq2MyYQoveVSocMqpK2tA2dHNufso3Qtpr0jGY/q4erQGLHEZWM/Im
Vb66ufNTxIJdJwAHNqpznm9+YjSADS1bc3fqgIQTSYBGUJLGzhwUVfIhuZfqRnXB
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317186800149781218820155398750358830338714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 20:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 20:05:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27800673024090303783416196790883951786369234625851986978217427533738982096908176948620499644366400485828196966075249697455909353142894497730897350070619829346764443314503560025468994735690539754532931990294310422908506886341255576835817698060923337063090481515147677002146290823359747105413865836003224168076059540677898733303057929972496272104453066602348716885301279447873712868585329805601617276202234670105804432231157119931283596445584838389398368519873805367260674067947283736543211148417362613860119509106181681967747912747906613371708133654237485392052855220503341435667397812722804812060045763823314171969871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f10016c9018738e78d4ae3882d91392aa65bc204
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernendoscopy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.healthcare.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillieshospital.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitals.southerncross.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshealthcare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrosshospitals.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncrossqe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernendoscopy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sxhospitals.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001871fbe0ab20000040300463044022073a82c8f5c7fc3eba561f6664fd2eebedd1c2858ebd4a61725054ee054d20abd02203c839f38cf10fd6f42f6d04ac0fe16f9d0017f9528f2fa5612ef0426c0d99ab20075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001871fbe0aca0000040300463044022036f37ea8e8791bae24914fa059e0c30d2004ebe90c6b1b072c0de8ec4ec60c8e0220636ef1f6fb1ea9ea2cccd3a1a22c43d1d354389229645a4bfc8a4a512e6564a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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