AWARMTS.bhs.org

- Baystate Health -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0b:3e:c0:9c:4c:6f:84:73:b3:12:53:92:21:ee:b3:7d was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Baystate Health

Organization: Baystate Health
State / Province: Massachusetts
Locality: Springfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:3e:c0:9c:4c:6f:84:73:b3:12:53:92:21:ee:b3:7d
Serial Number (int): 14947336964756164259923055001310507901
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:76:5a:f4:b2:40:ef:66:d8:a1:a3:ee:8d:85:4d:ea:0f:16:d0:cb
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 50:dd:4e:96:d8:3d:2c:09:ec:51:45:c9:7c:a8:bd:e5:1f:cf:9b:f2
Fingerprint (sha256): b7:9e:1f:da:5d:49:3d:c6:d0:d0:50:c9:cb:f9:a3:14:b0:bf:a8:dc:35:15:5c:e0:e4:1a:bb:46:7e:05:e2:f1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate AWARMTS.bhs.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AWARMTS.bhs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

AWARMTS.bhs.org

Other certificates including the domain name bhs.org

(limited to 100 certificates)
zxswlawslmts01.bhs.org
Punchouttest.bhs.org
spfldrelay.bhs.org
Remote.bhs.org
twilio.bhs.org
SNLDAP.bhs.org
scholarlycommons.libraryinfo.bhs.org
Zxswlawsmgts01.bhs.org
zxswlawslmpr02.bhs.org
libraryinfo.bhs.org
zxswpurewbdv01.bhs.org
zxswlawsdsts02.bhs.org
awsegt.bhs.org
sa.bhs.org
zxsllilaadpr01.bhs.org
zxswmmmewbpr01.bhs.org
Zxswlawsbits01.bhs.org
SNLDAP.BHS.ORG
zxsllilaadpr01.bhs.org
hemswebrequest.bhs.org
hemswebenterprise.bhs.org
TestCapacityMobile.bhs.org
libraryinfo.bhs.org
zxswlawsdspr02.bhs.org
PACSLILA01.BHS.ORG
scholarlycommons.libraryinfo.bhs.org
baclrpssappts01.bhs.org
libraryinfo.bhs.org
outlook.bhs.org
zxswdndrappr01.bhs.org
guestlogon.bhs.org
scholarlycommons.libraryinfo.bhs.org
scholarlycommons.libraryinfo.bhs.org
scholarlycommons.libraryinfo.bhs.org
secureguestlogon.bhs.org
zxswcccrapts01.bhs.org
ZXSWLAWSDSPR01.bhs.org
zxsllwsnapts01.bhs.org
ZXSWICSMWBTS01.bhs.org
zxswmepoappr01.bhs.org
thehub.bhs.org
fax.bhs.org
scholarlycommons.libraryinfo.bhs.org
Zxswlawslmts01.bhs.org
smslarubcppr01.bhs.org
guestlogon.bhs.org
hw-md1-vc-sg01.bhs.org
scholarlycommons.libraryinfo.bhs.org
lyncpool.bhs.org
CapacityTest.bhs.org
zxswlawslmts01.bhs.org
ServiceDesk.bhs.org
scholarlycommons.libraryinfo.bhs.org
Secure.bhs.org
libraryinfo.bhs.org
lyncpool.bhs.org
zxswlawsbipr01.bhs.org
zxswlawslmts01.bhs.org
TheHub.bhs.org
outlook.bhs.org
thehubtest.bhs.org
zxswmmmeapts01.bhs.org
praxify.bhs.org
fax.bhs.org
sldap.bhs.org
zxsllwsnappr01.bhs.org
scholarlycommons.libraryinfo.bhs.org
secure.bhs.org
zxswfortempr01.bhs.org
scholarlycommons.libraryinfo.bhs.org
GMEDWebApi.bhs.org
zxswonbswbpr03.bhs.org
FPE.PEVCO759-6.bhs.org
sa.bhs.org
Secure.bhs.org
AWARM.bhs.org
mbam-web.bhs.org
punchouttest.bhs.org
CapacityMobile.bhs.org
zxswmepoappr01.bhs.org
scholarlycommons.libraryinfo.bhs.org
zxswlawsdsts02.bhs.org
hw-m1-nsx-pr01.bhs.org
scholarlycommons.libraryinfo.bhs.org
libraryinfo.bhs.org
scholarlycommons.libraryinfo.bhs.org
libraryinfo.bhs.org
zxswmmmewbts01.bhs.org
zxsw1calapts01.bhs.org
clrpas-app-pr02.bhs.org
outlook.bhs.org
zxsllwsnapts01.bhs.org
bssnadam01.bhs.org
HVSBCDialer.bhs.org
hw-w1-nsx-pr01.bhs.org
zxswlawsbipr01.bhs.org
spfldrelay.bhs.org
zxswonbswbpr03.bhs.org
zxslarubmmpr02.bhs.org
spfldrelaymaster.bhs.org

Certificate

The complete raw certificate details for AWARMTS.bhs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7LIaBMlUNmPf5gruoHL
j8A3laPzL9iL+QvgBhRr9XNKSlI+SxqEOxsvlUy37xa+kmAY8wxILgw6HvOI+fU2
uEKtqDj9jUHWsC7XU6cXVZfEbDfY1TrbpfObIY4yDBmO0arOzv7YiT7BT6Hb3N/m
dfi7/wrOGFSltsF+N6QTA32CejP+1Z3ggScaTD8s96mVaGvq5t8NzVbvIb4VqTM/
3BmZIc3t7TdQUsHxdYnvHYQ/bc2Is6j8O+ibehnh5nkzbeWrexHE2X5LNzHnEfmc
L283/GARO1IETZsqqZb6rvuepXBkTk6YxjPFAb2fRYneUL2/ymJcxBHrBkrP1V9i
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14947336964756164259923055001310507901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 02:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-01 02:51:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baystate Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AWARMTS.bhs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18140238713400737414244693389655230746370385052687891048641785088552188268998260852393953843274846543878629208097549494711955020679065766372881621202463801700717951560612390877087052471618822243901296303408261828203899810566881852991852553622081779101842409327259871097201890183362628997710323162785004306842772429137566507252095737694039320569708812756317009853274748719645350154690037689745289768357611011042887219567809916761500374928442985902019134241956329029724362725816008818297191161618514142063857580918975286021435571362557582300983395401036877410392179191684947104989151485484186897077467701079317833278127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2765af4b240ef66d8a1a3ee8d854dea0f16d0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AWARMTS.bhs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e0f044f6e9ce7702a017f1d5b46d827ae1f411741c01a4a3e62e03110941aea2aebee891963e9b8af19c2e04f6feea40ba5417069c4e4b4c7f18fb0b307ad4a89972b0e4f496b28ba3707d3506d410e8e5a900310934994939a97837c56e2dbf29a1304e327b3454726cfd275c8988ca7299b8b3f4866318e55af5ea03c27aaf212207635c1ade570048b1e848f83bd35bb0d7f2011c84f1996ac6a8b6b3d9981778ae6fe6b623abb90928e4fbf321a395d8718232df0ca6e5945ea43197373090eb503d78b6c3ac438f69b77586229849da19921cc1db5901ee6a535587d10c4df5f462d01de350b03e92d06085a1b5104b1f64f6346617c91ec09ee6897b9