hipobdmzt.carenet.org

- BJC HealthCare -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5e:e4:0f:f0:17:c3:65:43:b2:0f:72:32 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BJC HealthCare

Organization: BJC HealthCare
Organization unit: Information Systems
State / Province: Missouri
Locality: St. Louis
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:e4:0f:f0:17:c3:65:43:b2:0f:72:32
Serial Number (int): 29367301274506716271688512050
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 73:bf:23:27:7b:3b:a9:c8:0f:94:f7:b3:61:8a:5d:0e:01:77:15:a9
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 8b:48:0c:9c:af:4b:88:2d:72:52:98:79:84:8b:6a:68:b0:83:37:db
Fingerprint (sha256): ea:a2:29:03:9d:fa:b4:d0:0a:ce:cb:af:e1:97:1e:2c:22:a6:2d:17:6f:ed:5e:54:c8:05:fa:e8:93:7e:41:03

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate hipobdmzt.carenet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hipobdmzt.carenet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hipobdmzt.carenet.org

Other certificates including the domain name carenet.org

(limited to 100 certificates)
bcaweb.carenet.org
esstest.carenet.org
bjcpsft-prod.carenet.org
carenet.org
pswebhrtst.carenet.org
mybjcnet.carenet.org
bjcexconl01.bjc-nt.bjc.org
bjcfmdtest.bjc.org
ess.carenet.org
bjcidm.carenet.org
fmd.bjc.org
joinbjctest.carenet.org
bjcmgphysicians.carenet.org
BJCIAM.CARENET.ORG
ldmobile.carenet.org
vpn.bjc.org
smartweb.carenet.org
bjcpsft-nonprodext.carenet.org
pswebtst.carenet.org
bjcpsft-nonprodext.carenet.org
myhr.carenet.org
bjcidm.carenet.org
ctxremote.carenet.org
mytime.carenet.org
bcaweb.carenet.org
smartweb.carenet.org
mytime.carenet.org
fmdtest.bjc.org
bjcportal.bjc.org
ctxremotetest.carenet.org
BJCIAM.CARENET.ORG
myhr.carenet.org
mobileenroll.bjc.org
ess.carenet.org
bjcpsft-nonprodext.carenet.org
myhrtest.carenet.org
bjcidm.carenet.org
fmd.bjc.org
fmdtest.bjc.org
BJCIAMTEST.CARENET.ORG
bjcmgphysicians.carenet.org
joinbjc.carenet.org
mytime.carenet.org
ess.carenet.org
bjchcm.psoft.carenet.org
slchoppe.carenet.org
BJCIAMTEST.CARENET.ORG
bjcfmdtest.bjc.org
ctxremote.carenet.org
carenet.org
epicdevmgr.carenet.org
epicdevmgr.carenet.org
vpn.bjc.org
bjcris-prod.carenet.org
sni.cloudflaressl.com
bjcphysicians.carenet.org
bjchcm.carenet.org
bjcportal.bjc.org
rxprofile.bjc.org
bjcfmdtest.bjc.org
mytime.carenet.org
mybjcnet.carenet.org
BJCIAM.CARENET.ORG
BJCIAM.CARENET.ORG
ctxremote.carenet.org
joinbjctest2.carenet.org
joinbjc.carenet.org
bjcpsft-prod.carenet.org
vpn.bjc.org
wuecvfmd.carenet.org
bjcidm.carenet.org
ctxremotetest.carenet.org
joinbjctest.carenet.org
joinbjctest.carenet.org
fmd.bjc.org
epicvalidation.carenet.org
joinbjc.carenet.org
bjcpsft-joinbjc.carenet.org
carenet.org
mobileenroll.bjc.org
bjcfmdtest.bjc.org
hipobdmzt.carenet.org
joinbjctest.carenet.org
bjcris-prod.carenet.org
bjcidm.carenet.org
esstest.carenet.org
bjcportal.bjc.org
bjcportal.bjc.org
epicvalidation.carenet.org

Certificate

The complete raw certificate details for hipobdmzt.carenet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfh8VboJkFT6DY1/Borb
yT3XMPi4lQ5D6VpOJtwkm932HjJYiYoel7aRMPUlc1qR2ClQ/g/RzRb7pH72y7Nm
vIDSflEDl6mt525B+c5w9Tcgf6D2xiTAQ1TfwQrpx5RRai4/CMGyOnjvUXy0PN/Z
aBWsFELFLKRA+7WNfZYD183YFKxMv/sCIZLM2ilssBCQaeaC0qbhTwMHyqCuN61T
FkH0dHYNWxZeSw8LMU5YwukKDt/myJ6ntXbC9jrZ0c/qjnHfRuExgWNfQoF1J3Dy
uniHFSrHagnxzXLnDJLRvEhPInMke0F6GS/hTgGaH6OQmEHDfevVrrO3ic3/+JWm
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29367301274506716271688512050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-08 19:41:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-09 19:41:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BJC HealthCare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hipobdmzt.carenet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24486525715641031636996656982613953432010598361755049819016333322892104541264475267379203491814227218105330845480287556058312711807309147003499963628942195081664103813028494551761283302598218749827230523299654282860871038447151156119581133896728817263715517652791913946033182790695339296946287514998382132691933415295635871606916531576063832546561828231270684265411871934053291827558056112174543867318359623015024260096523790314341076731182998031327935929449420260407295441266391102555481356602167000013480234621474696603169290857559268504394820786675171532138871079682095751526028549844558650074328113340981490066979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipobdmzt.carenet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73bf23277b3ba9c80f94f7b3618a5d0e017715a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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