# (c) cavaliba.com - demo data


# SSL/TLS Certificate



- classname: _schema
  keyname: certificate
  displayname: TLS/SSL Certificate

  _options:
    icon: fa-certificate
    keyname_mode: edit
    keyname_label: Name
    displayname_label: Info





  description:
    displayname: Description
    description: Description
    dataformat: string
    order: 102
    page: Info


  common_name:
    displayname: common name
    description: common name
    dataformat: string
    order: 102
    page: Info

  subject_alternative_names:
    displayname: alt name
    description: alt name
    dataformat: string
    cardinal_max: 0
    order: 102
    page: Info


  issuer:
    displayname: Issuer
    description: Issuer
    dataformat: string
    order: 102
    page: Info


  valid_from:
    displayname: From
    description: Valid from
    dataformat: date
    order: 130
    page: Info

  valid_to:
    displayname: To
    description: Valid to
    dataformat: date
    order: 130
    page: Info

  serial_number:
    displayname: serial_number
    description: serial_number
    dataformat: string
    order: 130
    page: Info




  public_key_algorithm:
    displayname: public_key_algorithm
    description: public_key_algorithm
    dataformat: string
    order: 130
    page: Info

  fingerprint:
    displayname: fingerprint
    description: fingerprint
    dataformat: string
    order: 130
    page: Info

  certificate_type:
    displayname: certificate_type
    description: certificate_type
    dataformat: string
    order: 130
    page: Info

  status:
    displayname: status
    description: status
    dataformat: string
    order: 130
    page: Info

  site:
    displayname: Site
    description: Site
    dataformat: schema
    dataformat_ext: site
    order: 130
    page: Info


  services:
    displayname: Services
    description: Services and Apps
    dataformat: schema
    dataformat_ext: app
    cardinal_max: 0
    order: 130
    page: Info

  auto_renewal:
    displayname: AutoRenew
    description: Auto Renewal
    dataformat: boolean
    order: 130
    page: Info

  note:
    displayname: Note
    description: Note
    dataformat: text
    order: 130
    page: Info

# dataview

- classname: _dataview
  keyname: certificate_default
  target_class: certificate
  displayname: Certificate default
  description: Default view for TLS/SSL Certificate schema
  content: |
    columns:
      - ID:
          from: keyname
      - Info:
          from: displayname
      - common_name
      - issuer
      - valid_to
      - certificate_type
      - status
      - site



# Data

- classname: certificate
  keyname: certwebpar01
  displayname: Paris Web Gateway SSL
  description: Primary SSL certificate for paris.medcenter.fr
  common_name: paris.medcenter.fr
  subject_alternative_names:
    - www.paris.medcenter.fr
    - login.paris.medcenter.fr
  organization: Paris Medical Center
  organizational_unit: IT Department
  issuer: DigiCert Global CA
  serial_number: "0xA3B1C29D23"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-01-10"
  valid_to: "2026-01-10"
  public_key_algorithm: RSA 2048
  fingerprint: D1:4A:AA:73:00:E0:E9:E8:BF:12:9B:2D:1D:A1:17:8F:81:D1:1C:FA
  certificate_type: server
  status: valid
  site: PARIS
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Main certificate for public website and EMR

- classname: certificate
  keyname: certradlyon
  displayname: Lyons Radiology PACS
  description: SSL for radiology PACS and image viewer
  common_name: pacs.lyonshospital.fr
  subject_alternative_names:
    - images.lyonshospital.fr
    - pacs-internal.lyonshospital.fr
  organization: Lyons Regional Hospital
  organizational_unit: Imaging Services
  issuer: GlobalSign CA
  serial_number: "0x22BCF9E017"
  signature_algorithm: SHA384-RSA
  valid_from: "2023-06-05"
  valid_to: "2025-06-04"
  public_key_algorithm: RSA 4096
  fingerprint: 93:FC:CD:04:BE:F1:E3:61:4C:AB:7C:22:EC:45:97:6E:A0:7B:DF:EE
  certificate_type: server
  status: valid
  site: LYONS
  services:
    - radimage
  auto_renewal: yes
  revoke_date: null
  note: Automatic renewal enabled

- classname: certificate
  keyname: certwifi2024
  displayname: Staff WiFi Certificate Lille
  description: WiFi 802.1X/EAP staff authentication
  common_name: wifi.lillecityhospital.fr
  subject_alternative_names:
    - staffwifi.lillecityhospital.fr
  organization: Lille City Hospital
  organizational_unit: Network Team
  issuer: Let’s Encrypt R3
  serial_number: "0x20B4DE67AA"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-12"
  valid_to: "2024-08-12"
  public_key_algorithm: RSA 2048
  fingerprint: AA:BB:CC:DD:12:23:34:45:56:FA:ED:98:CD:7A:2C:12:9B:B4:AA:FF
  certificate_type: server
  status: valid
  site: LILLE
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Valid for 6 months, auto-renewed

- classname: certificate
  keyname: certvpnber01
  displayname: Berlin VPN Gateway
  description: SSL for site-to-site VPN communication Berlin
  common_name: vpn.berlnneurology.de
  subject_alternative_names:
    - secure.berlnneurology.de
  organization: Berln Neurology Center
  organizational_unit: IT Security
  issuer: Sectigo Public CA
  serial_number: "0x334ACF8813"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-03-20"
  valid_to: "2025-03-20"
  public_key_algorithm: RSA 2048
  fingerprint: 19:72:56:80:98:A2:FE:47:32:3A:17:B9:AF:8B:EB:3B:E1:FF:3C:34
  certificate_type: server
  status: valid
  site: BERLN
  services:
    - medrepo
  auto_renewal: no
  revoke_date: null
  note: Manual renewal

- classname: certificate
  keyname: certroot2020
  displayname: Cavaliba PKI Root CA
  description: PKI hierarchy trust anchor for internal certificates
  common_name: Cavaliba Root CA
  subject_alternative_names:
    - Cavaliba.group
  organization: Cavaliba Group
  organizational_unit: IT Security
  issuer: self-signed
  serial_number: "0x01"
  signature_algorithm: SHA512-RSA
  valid_from: "2020-01-01"
  valid_to: "2035-01-01"
  public_key_algorithm: RSA 4096
  fingerprint: FF:EE:DD:CC:BB:AA:11:22:33:44:55:66:77:88:99:00:FE:DC:BA:98
  certificate_type: root
  status: valid
  site: BRUSS
  services:
    - medrepo
    - radimage
    - webcentral
  auto_renewal: no
  revoke_date: null
  note: Kept offline, manual renewal, used for CA signing



- classname: certificate
  keyname: certlonon1
  displayname: Lonon Web Portal Certificate
  description: Certificate for hospital portal and secure login
  common_name: portal.lononspecialist.uk
  subject_alternative_names:
    - www.lononspecialist.uk
    - mail.lononspecialist.uk
  organization: Lonon Specialist Hospital
  organizational_unit: IT Department
  issuer: DigiCert Global CA
  serial_number: "0x98EF1234AF"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-07-10"
  valid_to: "2025-07-10"
  public_key_algorithm: RSA 2048
  fingerprint: 7C:DC:11:15:52:15:A4:BC:1B:22:C2:34:F2:0C:41:50:61:77:A9:B7
  certificate_type: server
  status: valid
  site: LONON
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Used for SSO and web apps

- classname: certificate
  keyname: certparadm1
  displayname: Paris Admin API Cert
  description: Internal API gateway TLS certificate
  common_name: adminapi.paris.medcenter.fr
  subject_alternative_names:
    - legacyapi.paris.medcenter.fr
  organization: Paris Medical Center
  organizational_unit: IT Operations
  issuer: Let's Encrypt R3
  serial_number: "0xBCDA902E17"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-04-01"
  valid_to: "2024-10-01"
  public_key_algorithm: RSA 2048
  fingerprint: 3A:12:98:43:18:DF:E3:35:BC:23:2E:57:47:C8:7B:E2:1B:89:7A:15
  certificate_type: server
  status: valid
  site: PARIS
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Internally rotated every 6 months

- classname: certificate
  keyname: certlyonsw
  displayname: Lyons Wifi Auth Certificate
  description: EAP-TLS certificate for hospital staff wifi
  common_name: wifi.lyonshospital.fr
  subject_alternative_names:
    - staffwifi.lyonshospital.fr
  organization: Lyons Regional Hospital
  organizational_unit: Network Security
  issuer: GlobalSign CA
  serial_number: "0xAA9953CD29"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-10-12"
  valid_to: "2025-10-12"
  public_key_algorithm: RSA 2048
  fingerprint: D6:03:CD:AA:F2:EE:6B:34:A8:01:E4:E5:77:D2:98:C6:E1:25:8F:1E
  certificate_type: server
  status: valid
  site: LYONS
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: For EAP and network auth

- classname: certificate
  keyname: certbrestw
  displayname: Brest Web SSL
  description: Main web certificate for Brest Research Hospital
  common_name: www.brestresearch.fr
  subject_alternative_names:
    - api.brestresearch.fr
    - mail.brestresearch.fr
  organization: Brest Research Hospital
  organizational_unit: Web Infrastructure
  issuer: Sectigo RSA
  serial_number: "0xA2CA9DBF01"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-10"
  valid_to: "2025-02-10"
  public_key_algorithm: RSA 2048
  fingerprint: 21:FC:09:75:77:EF:28:82:7F:6C:4D:88:E0:75:28:2D:E4:54:4E:39
  certificate_type: server
  status: valid
  site: BREST
  services:
    - webcentral
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Canonical frontend SSL

- classname: certificate
  keyname: certnante1
  displayname: Nante API Gateway Cert
  description: Secure API TLS for Nante Cardiac Center
  common_name: api.nantecardiac.fr
  subject_alternative_names:
    - gateway.nantecardiac.fr
  organization: Nante Cardiac Center
  organizational_unit: Application Platform
  issuer: GlobalSign
  serial_number: "0x4B92A0F263"
  signature_algorithm: SHA384-RSA
  valid_from: "2023-08-01"
  valid_to: "2025-08-01"
  public_key_algorithm: RSA 4096
  fingerprint: 8E:56:2B:41:F2:3E:93:C1:24:69:91:63:A3:22:55:45:22:F1:09:EE
  certificate_type: server
  status: valid
  site: NANTE
  services:
    - webcentral
    - medrepo
  auto_renewal: no
  revoke_date: null
  note: Manual renewal

- classname: certificate
  keyname: certlille1
  displayname: Lille Intranet Certificate
  description: Internal intranet communication (TLS)
  common_name: intranet.lillecityhospital.fr
  subject_alternative_names:
    - apps.lillecityhospital.fr
  organization: Lille City Hospital
  organizational_unit: IT
  issuer: Let's Encrypt R3
  serial_number: "0xF0391E2B17"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-03-15"
  valid_to: "2024-09-15"
  public_key_algorithm: RSA 2048
  fingerprint: 0A:19:52:A7:B5:12:3F:C8:44:C1:48:82:7C:F5:2B:37:72:0B:C2:DE
  certificate_type: server
  status: valid
  site: LILLE
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Auto-renewed, 6 months

- classname: certificate
  keyname: certmilan1
  displayname: Milan Central Internal Services
  description: Certificate for internal authentication web services
  common_name: internal.milancentral.it
  subject_alternative_names:
    - api.milancentral.it
  organization: Milan Central Clinic
  organizational_unit: Digital Health
  issuer: DigiCert Global CA
  serial_number: "0xDE343F97A3"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-11-10"
  valid_to: "2025-11-10"
  public_key_algorithm: RSA 4096
  fingerprint: C9:8B:81:A1:16:79:24:3E:5B:6A:38:57:E3:02:AB:7C:12:D7:1C:59
  certificate_type: server
  status: valid
  site: MILAN
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Covers all internal services

- classname: certificate
  keyname: certstcok1
  displayname: Stock Wellness API SSL
  description: SSL/TLS for outpatient and staff portals
  common_name: api.stockwellness.se
  subject_alternative_names:
    - wellness.stockwellness.se
  organization: Stock Wellness Center
  organizational_unit: IT/DevOps
  issuer: GlobalSign CA
  serial_number: "0x56CDEF8234"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-12-01"
  valid_to: "2025-12-01"
  public_key_algorithm: RSA 2048
  fingerprint: 0E:AC:13:B3:98:24:BA:98:45:27:C6:F5:3D:90:C6:CA:17:37:1F:1A
  certificate_type: server
  status: valid
  site: STOCK
  services:
    - medrepo
    - webcentral
  auto_renewal: no
  revoke_date: null
  note: Annual manual rotation

- classname: certificate
  keyname: certosloo1
  displayname: Osloo Health Records Root CA
  description: Internal CA for medical record signatures
  common_name: rootca.osloohealth.no
  subject_alternative_names:
    - pki.osloohealth.no
  organization: OSLOO Health Campus
  organizational_unit: Security Office
  issuer: self-signed
  serial_number: "0x0002"
  signature_algorithm: SHA512-RSA
  valid_from: "2022-01-01"
  valid_to: "2032-01-01"
  public_key_algorithm: RSA 4096
  fingerprint: B1:BE:13:19:6A:6A:16:67:A0:BB:92:20:8F:11:48:6C:DF:32:B2:9D
  certificate_type: root
  status: valid
  site: OSLOO
  services:
    - medrepo
  auto_renewal: no
  revoke_date: null
  note: Used for subordinate CA signing only

- classname: certificate
  keyname: certmalmo1
  displayname: Malmo City WiFi Certificate
  description: RADIUS/EAP certificate for secure staff wifi
  common_name: wifi.malmocityclinic.se
  subject_alternative_names:
    - staffwifi.malmocityclinic.se
  organization: Malmo City Clinic
  organizational_unit: ICT
  issuer: Let's Encrypt R3
  serial_number: "0xF6AE349820"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-01-03"
  valid_to: "2024-07-03"
  public_key_algorithm: RSA 2048
  fingerprint: 45:B7:89:F2:98:E1:24:6F:C8:E4:F6:3D:F0:9C:C2:63:E2:A8:BB:1E
  certificate_type: server
  status: valid
  site: MALMO
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Staff and admins only

- classname: certificate
  keyname: certlonvpn
  displayname: Lonon Remote Access VPN
  description: SSL/TLS for remote access and telework users
  common_name: vpn.lononspecialist.uk
  subject_alternative_names:
    - secure.lononspecialist.uk
  organization: Lonon Specialist Hospital
  organizational_unit: IT Security
  issuer: GlobalSign CA
  serial_number: "0xCAE98213A3"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-12"
  valid_to: "2026-02-12"
  public_key_algorithm: RSA 2048
  fingerprint: EC:8B:11:89:00:C4:4B:FE:38:23:17:28:4F:F4:11:39:D2:91:7E:6B
  certificate_type: server
  status: valid
  site: LONON
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: For remote staff VPN

- classname: certificate
  keyname: certdubap1
  displayname: DubLn Women's WiFi Cert
  description: Secure EAP wifi certificate for staff
  common_name: wifi.dublnwomen.ie
  subject_alternative_names:
    - staffwifi.dublnwomen.ie
  organization: DubLn Women's Clinic
  organizational_unit: IT
  issuer: Let's Encrypt R3
  serial_number: "0x7DC874BB41"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-03-15"
  valid_to: "2024-09-15"
  public_key_algorithm: RSA 2048
  fingerprint: 21:C8:43:9A:15:E9:2B:3A:2A:25:66:F6:C8:52:B2:A0:ED:17:92:11
  certificate_type: server
  status: valid
  site: DUBLN
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Staff wifi expiring in 6 months

- classname: certificate
  keyname: certgenezx
  displayname: Genez Admin Console SSL
  description: Admin console and API certificate for Genez Hub
  common_name: admin.genezhub.ch
  subject_alternative_names:
    - console.genezhub.ch
  organization: Genez Oncology Hub
  organizational_unit: IT Support
  issuer: DigiCert Global CA
  serial_number: "0xF4CEE466B0"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-10-03"
  valid_to: "2025-10-02"
  public_key_algorithm: RSA 4096
  fingerprint: 7E:2D:BC:98:4B:71:A7:77:B1:52:45:5A:70:DB:8C:B5:24:63:E4:09
  certificate_type: server
  status: valid
  site: GENEZ
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Multi-domain, covers admin API

- classname: certificate
  keyname: certprags1
  displayname: Prags Hospital App Gateway
  description: API gateway TLS certificate for pediatric hospital
  common_name: api.pragschild.cz
  subject_alternative_names:
    - gateway.pragschild.cz
  organization: Prags Children's Hospital
  organizational_unit: IT & Integration
  issuer: GlobalSign CA
  serial_number: "0x2B5CA304EC"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-15"
  valid_to: "2025-02-15"
  public_key_algorithm: RSA 2048
  fingerprint: 2A:81:3B:24:DD:EE:22:19:C4:A5:A2:BC:1E:ED:34:E8:1E:AA:44:31
  certificate_type: server
  status: valid
  site: PRAGS
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Application API front channel

- classname: certificate
  keyname: certwienca
  displayname: Wienn Rehab Center WiFi
  description: 802.1X EAP certificate for guest and staff wifi
  common_name: wifi.wiennrehab.at
  subject_alternative_names:
    - guestwifi.wiennrehab.at
  organization: Wienn Rehabilitation Center
  organizational_unit: IT & Access
  issuer: Let's Encrypt R3
  serial_number: "0xB2E398119F"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-01-21"
  valid_to: "2024-07-21"
  public_key_algorithm: RSA 2048
  fingerprint: CF:3F:9B:88:41:35:48:F2:18:37:0F:93:4F:3C:BF:A9:4E:23:88:FE
  certificate_type: server
  status: valid
  site: WIENN
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Valid 6 months

- classname: certificate
  keyname: certoxlfd1
  displayname: Oxlfd Secure Services SSL
  description: Secure access to rural medical services portal
  common_name: portal.oxlfdunit.uk
  subject_alternative_names:
    - admin.oxlfdunit.uk
  organization: Oxlfd Rural Medical Unit
  organizational_unit: IT
  issuer: Sectigo CA
  serial_number: "0xC34B12DC98"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-12-15"
  valid_to: "2025-12-14"
  public_key_algorithm: RSA 2048
  fingerprint: 69:1B:41:F0:28:86:CC:D3:1B:29:7E:B1:25:0B:11:BB:56:55:D0:3A
  certificate_type: server
  status: valid
  site: OXLFD
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Used for patient and staff

- classname: certificate
  keyname: certbrsfw1
  displayname: Bruss Corporate HQ Firewall Cert
  description: SSL certificate for firewall management and admin
  common_name: firewall.brussmedhead.be
  subject_alternative_names:
    - mgmt.brussmedhead.be
  organization: Bruss Medical Headquarters
  organizational_unit: IT Security
  issuer: DigiCert Global CA
  serial_number: "0x1E5A3A3A10"
  signature_algorithm: SHA384-RSA
  valid_from: "2024-03-10"
  valid_to: "2025-03-09"
  public_key_algorithm: RSA 4096
  fingerprint: E4:91:A9:A0:CB:25:E6:73:D4:04:BA:42:DF:92:7D:32:EA:53:16:D7
  certificate_type: server
  status: valid
  site: BRUSS
  services:
    - medrepo
    - paywise
  auto_renewal: no
  revoke_date: null
  note: IT firewall console

- classname: certificate
  keyname: certbudadm
  displayname: Budap Ortho Center Admin SSL
  description: TLS for admin and patient portal
  common_name: admin.budaportho.hu
  subject_alternative_names:
    - portal.budaportho.hu
  organization: Budap Ortho Center
  organizational_unit: Application Platform
  issuer: Let's Encrypt R3
  serial_number: "0xDD89F7C2E9"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-01-18"
  valid_to: "2024-07-18"
  public_key_algorithm: RSA 2048
  fingerprint: 9E:7A:5D:16:7C:93:AD:1E:23:4B:A7:1D:54:3B:08:AF:48:A1:88:02
  certificate_type: server
  status: valid
  site: BUDAP
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: For public and internal use

- classname: certificate
  keyname: certhatps1
  displayname: Athens Diabetes Management Cert
  description: Secure traffic certificate for diabetic clinic frontend
  common_name: athnsdiabetic.gr
  subject_alternative_names:
    - portal.athnsdiabetic.gr
  organization: Athns Diabetic Clinic
  organizational_unit: Medical Platform
  issuer: Sectigo CA
  serial_number: "0xDCB4832A11"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-03-20"
  valid_to: "2026-03-20"
  public_key_algorithm: RSA 2048
  fingerprint: 2C:5F:9A:A3:CC:76:E2:F3:6B:1A:BE:0A:38:0B:9A:3C:AC:74:61:92
  certificate_type: server
  status: valid
  site: ATHNS
  services:
    - medrepo
  auto_renewal: no
  revoke_date: null
  note: Secure portal traffic, renewed in 2 years

- classname: certificate
  keyname: certgeneva
  displayname: Genez Oncology Web Cert
  description: Web and patient webapps TLS for DNA analysis
  common_name: www.genezhub.ch
  subject_alternative_names:
    - webapp.genezhub.ch
    - results.genezhub.ch
  organization: Genez Oncology Hub
  organizational_unit: Genome Research
  issuer: DigiCert Global CA
  serial_number: "0xCBB123E789"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-08-11"
  valid_to: "2025-08-11"
  public_key_algorithm: RSA 4096
  fingerprint: 5F:A4:18:2F:11:5B:C9:D3:E2:8C:7B:07:7B:11:B2:BB:F3:C0:C7:63
  certificate_type: server
  status: valid
  site: GENEZ
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Used for main app and results

- classname: certificate
  keyname: certpragsv
  displayname: Prags Staff VDI SSL
  description: VDI RDP gateway SSL for staff access
  common_name: vdi.pragschild.cz
  subject_alternative_names:
    - staffvdi.pragschild.cz
  organization: Prags Children's Hospital
  organizational_unit: IT Infrastructure
  issuer: Sectigo CA
  serial_number: "0x4CCA5983F1"
  signature_algorithm: SHA384-RSA
  valid_from: "2023-11-08"
  valid_to: "2024-11-08"
  public_key_algorithm: RSA 4096
  fingerprint: 62:8B:1C:70:7A:87:9A:37:B5:54:44:D1:51:1E:23:99:21:77:CB:A5
  certificate_type: server
  status: valid
  site: PRAGS
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Auto-renewal through SCEP

- classname: certificate
  keyname: certbresta
  displayname: Brest Archive Access
  description: SSL for secure archive and records access
  common_name: archive.brestresearch.fr
  subject_alternative_names:
    - brestarchive.fr
  organization: Brest Research Hospital
  organizational_unit: Data Archive
  issuer: GlobalSign CA
  serial_number: "0x793A1FA5F2"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-03-12"
  valid_to: "2025-03-12"
  public_key_algorithm: RSA 2048
  fingerprint: 31:E6:F2:B2:C9:FF:E3:A3:5B:5E:88:E5:0F:17:22:B0:33:55:1F:61
  certificate_type: server
  status: valid
  site: BREST
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Archive only, not for web UI

- classname: certificate
  keyname: certmilvpn
  displayname: Milan VPN Cert
  description: SSL for Milan site-to-site VPN connections
  common_name: vpn.milancentral.it
  subject_alternative_names:
    - remotevpn.milancentral.it
  organization: Milan Central Clinic
  organizational_unit: Network
  issuer: Let's Encrypt R3
  serial_number: "0x5C290702FA"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-05-17"
  valid_to: "2026-05-17"
  public_key_algorithm: RSA 2048
  fingerprint: 8B:BB:B0:17:CD:6B:21:9D:8F:A3:AA:11:19:E6:DA:75:C0:83:9E:9D
  certificate_type: server
  status: valid
  site: MILAN
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: VPN only

- classname: certificate
  keyname: certluzint
  displayname: Luzrn Women's Health Internal API
  description: Mutual TLS for EHR API
  common_name: ehr.luzrnwomen.ch
  subject_alternative_names:
    - ehr.int.luzrnwomen.ch
  organization: Luzrn Women's Health Center
  organizational_unit: Application Platform
  issuer: DigiCert Global CA
  serial_number: "0x119084CB55"
  signature_algorithm: SHA384-RSA
  valid_from: "2023-09-01"
  valid_to: "2025-09-01"
  public_key_algorithm: RSA 4096
  fingerprint: 44:AD:8E:C1:BB:DA:A6:09:E9:E2:A5:92:42:F3:77:C7:B8:73:53:39
  certificate_type: server
  status: valid
  site: LUZRN
  services:
    - medrepo
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Internal mutual TLS client+server

- classname: certificate
  keyname: certodens
  displayname: Odens Guest Wifi EAP
  description: Certificate for guest wifi RADIUS auth
  common_name: guest.odenschild.dk
  subject_alternative_names:
    - guestwifi.odenschild.dk
  organization: Odens Children's Hospital
  organizational_unit: Network
  issuer: Let's Encrypt R3
  serial_number: "0x774AEB8003"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-01"
  valid_to: "2024-08-01"
  public_key_algorithm: RSA 2048
  fingerprint: D8:92:A1:E2:E2:29:77:13:33:F0:51:FF:44:22:11:77:AA:B8:BD:1E
  certificate_type: server
  status: valid
  site: ODENS
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Guest EAP certificate

- classname: certificate
  keyname: certporto1
  displayname: Porto Specialty Gateway SSL
  description: SSL for porto.specialty.pt admin and booking
  common_name: admin.portospecialty.pt
  subject_alternative_names:
    - portal.portospecialty.pt
  organization: Porto Specialty Hospital
  organizational_unit: Applications
  issuer: Sectigo CA
  serial_number: "0x31ADCA1327"
  signature_algorithm: SHA256-RSA
  valid_from: "2023-12-10"
  valid_to: "2025-12-10"
  public_key_algorithm: RSA 2048
  fingerprint: F0:12:55:77:99:22:10:DD:44:6E:72:93:C7:EF:11:7C:B9:E2:52:3D
  certificate_type: server
  status: valid
  site: PORTO
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: Used for admin and booking features

- classname: certificate
  keyname: certespain
  displayname: Madrid Ortho Client Auth
  description: Certificate for orthopedics SSO login
  common_name: ortho.madrdortho.es
  subject_alternative_names:
    - login.madrdortho.es
  organization: MadRd Orthopedic Clinic
  organizational_unit: IT
  issuer: GlobalSign CA
  serial_number: "0x8831D984D1"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-04-12"
  valid_to: "2025-04-12"
  public_key_algorithm: RSA 2048
  fingerprint: 8A:77:34:9C:25:44:7B:F3:14:D1:52:AA:9C:2B:21:1C:C5:32:19:AD
  certificate_type: client
  status: valid
  site: MADRD
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Used for staff SSO

- classname: certificate
  keyname: certbrnsw1
  displayname: Brnby General Switch Auth
  description: Switch management TLS for Brnby General Practice
  common_name: switch.brnbygpr.dk
  subject_alternative_names:
    - admin.brnbygpr.dk
  organization: Brnby General Practice
  organizational_unit: Network Ops
  issuer: Let's Encrypt R3
  serial_number: "0xB45829FD34"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-04-20"
  valid_to: "2024-10-20"
  public_key_algorithm: RSA 2048
  fingerprint: DD:02:A1:B2:31:98:76:99:AB:8E:B9:7A:41:73:7A:2F:4E:FA:10:DC
  certificate_type: server
  status: valid
  site: BRNBY
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: For switch OOB management

- classname: certificate
  keyname: certnanapi
  displayname: Nante Internal API SSL
  description: mTLS certificate for internal Nante Cardiac Center APIs
  common_name: api.internal.nantecardiac.fr
  subject_alternative_names:
    - mapi.nantecardiac.fr
  organization: Nante Cardiac Center
  organizational_unit: Applications
  issuer: DigiCert
  serial_number: "0x9281F3DD75"
  signature_algorithm: SHA384-RSA
  valid_from: "2024-05-01"
  valid_to: "2026-05-01"
  public_key_algorithm: RSA 4096
  fingerprint: B2:8D:35:EF:1B:51:CC:52:F7:41:AA:F4:A3:60:B6:13:7E:5C:3A:DD
  certificate_type: server
  status: valid
  site: NANTE
  services:
    - medrepo
  auto_renewal: yes
  revoke_date: null
  note: Only for mutual TLS (API to API)

- classname: certificate
  keyname: certturin0
  displayname: Turin Eye Institute SSL
  description: SSL certificate for main portal and appointment booking
  common_name: www.turineye.it
  subject_alternative_names:
    - portal.turineye.it
  organization: Turin Eye Institute
  organizational_unit: IT
  issuer: Let's Encrypt R3
  serial_number: "0xA010EE2324"
  signature_algorithm: SHA256-RSA
  valid_from: "2024-02-09"
  valid_to: "2024-08-09"
  public_key_algorithm: RSA 2048
  fingerprint: 00:A1:22:44:99:ED:81:4F:A8:23:6F:A2:22:99:03:1C:AB:D4:E5:BC
  certificate_type: server
  status: valid
  site: TURIN
  services:
    - webcentral
  auto_renewal: yes
  revoke_date: null
  note: For all main www traffic
