thegrid.healthshareexchange.org

Issued by Amazon

About this certificate

This digital certificate with serial number 04:9e:52:61:33:47:fc:cb:40:cf:fc:ed:3a:57:0b:ad was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thegrid.healthshareexchange.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:52:61:33:47:fc:cb:40:cf:fc:ed:3a:57:0b:ad
Serial Number (int): 6138965745378192597332753633930316717
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 18:5a:a8:43:83:20:33:f1:5f:f6:2e:f4:0e:0b:ca:8c:e9:e1:9d:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b5:70:2b:75:fc:e4:cd:04:db:a7:60:20:bb:ab:cb:af:e5:2c:97:e8
Fingerprint (sha256): ba:17:24:50:49:e4:12:46:13:1f:ec:b1:3f:c9:38:3d:44:66:f1:44:9f:64:4b:2d:24:07:1a:54:a0:d7:54:93

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate thegrid.healthshareexchange.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thegrid.healthshareexchange.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thegrid.healthshareexchange.org
*.thegrid.healthshareexchange.org

Other certificates including the domain name healthshareexchange.org

(limited to 100 certificates)
hie.healthshareexchange.org
gradecda.healthshareexchange.org
thegrid.healthshareexchange.org
servicedesk.tangerinelife.com
hsxsepa.org
hie.healthshareexchange.org
hsxsepa.org
servicedesk.tangerinelife.com
helpdesk.roadandrail.com
iithelp.childrensmuseum.org
test.grade.healthshareexchange.org
healthshareexchange.org
grade.healthshareexchange.org
dev.gradecda.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
support.firsteagle.com
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
dev.gradecda.healthshareexchange.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
hie.healthshareexchange.org
portal.buyautopartsonline.shop
hsxsepa.org
hie.healthshareexchange.org
healthshareexchange.org
*.api.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
helpdesk.plan-roa.org
auth.dev.api.healthshareexchange.org
dev.diameter.healthshareexchange.org
enshare.healthshareexchange.org
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
healthshareexchange.org
portal.buyautopartsonline.shop
healthshareexchange.org
hsxsepa.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
servicedesk.tangerinelife.com
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
helpdesk.plan-roa.org
healthshareexchange.org
support.firsteagle.com
gradecda.healthshareexchange.org
support.firsteagle.com
servicedesk.jalladgroup.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
hie.healthshareexchange.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
*.api.healthshareexchange.org
helpdesk.roadandrail.com
support.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
healthshareexchange.org
healthshareexchange.org
portal.buyautopartsonline.shop
itsm.questmindshare.com
dev.gradecda.healthshareexchange.org
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
test.grade.healthshareexchange.org
hsxsepa.org
hie.healthshareexchange.org
helpdesk.plan-roa.org
healthshareexchange.org
helpdesk.hpretiro.hi-precision.com.ph
itsm.questmindshare.com
hie.healthshareexchange.org
servicedesk.jalladgroup.com
iithelp.childrensmuseum.org
ncbahelpdesk.ncbal.com
servicedesk.tangerinelife.com
enshare.healthshareexchange.org
servicedesk.tangerinelife.com
thegrid.healthshareexchange.org
hie.healthshareexchange.org
iithelp.childrensmuseum.org
hie.healthshareexchange.org
test.gradecda.healthshareexchange.org
support.firsteagle.com
grade.healthshareexchange.org
test.gradecda.healthshareexchange.org
itsm.questmindshare.com

Certificate

The complete raw certificate details for thegrid.healthshareexchange.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9T1iwDAf1JOY2PpJWfp
QA9eb78uzY6UU94V6Zkec/rxzMTwH4sY/IbEIod0FBn/V3kXMvw76irkpiGmju9Z
j5kcxku58/akP3IZ7D60SH7sM+cuunYiVyBd8xZf9PQEAC93GDuLkSD5xefn3mLz
i9zvi3Iya1xhvudjCGizzd13SY9KoELwVQTtaeLSFeB0rVKsq+kMHxlZYrnpEiHG
uxefNXTeqjFceXGkqfZsrW6UYg0VxjeztMIfibofio9fnJdIfitXCsdbWx98hiAv
qCYTRjo1SRITV1OjV6LDPygYVh7obfIcvXnqOhvCvg9T5Z86fh3Gs7m8Y3dvvdYe
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6138965745378192597332753633930316717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thegrid.healthshareexchange.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23206623880699398231146214321899704536805964613266431134062908817205763284614048760327347469414782088799604184764861632900845202739937527591078892030147331279090006074016086356195515217293701007515129463009304541256096283233552168292478275197607587143041444875198465214184754506095618356570407619634333934945457904091748180565766199910242994705554495043992536556185113492708149772684122182415942818439935753536964596137600492021295684953518105832777413663050231144594428632437953662263620247472820203882159491560405773561649284640906561726130805376996258614701546001589950245370227489222230709986141399283370955251311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							185aa843832033f15ff62ef40e0bca8ce9e19d08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrid.healthshareexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegrid.healthshareexchange.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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