*.dentalxchange.com

- EDI Health Group -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 12:02:21:45:4f:7c:86:ba:db:ff:14:bd:7b:de:ed:f4 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EDI Health Group

Organization: EDI Health Group
State / Province: California
Locality: Irvine
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:02:21:45:4f:7c:86:ba:db:ff:14:bd:7b:de:ed:f4
Serial Number (int): 23937163328705548178462860998313176564
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): d7:47:70:cb:79:c3:0f:93:18:c1:8e:d1:f1:44:7c:fd:95:b8:17:00
Fingerprint (sha256): 0e:f5:95:e5:ea:00:c4:45:df:2c:9f:86:f0:59:c2:26:c2:98:85:a2:f3:d0:fb:f5:50:26:2b:52:ce:f5:26:18

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate *.dentalxchange.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dentalxchange.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dentalxchange.com

Other certificates including the domain name dentalxchange.com

(limited to 100 certificates)
tls.automattic.com
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
tls.automattic.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
*.dentalxchange.com
*.dentalxchange.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
tls.automattic.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
dentalxchange.com
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
atlas-alerts-test.mit.edu
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
*.dentalxchange.com
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
atlas-alerts-test.mit.edu
cert00028-azurecdn.akamaized.net
tls.automattic.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
tls.automattic.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
tls.automattic.com
*.dentalxchange.com
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
tls.automattic.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
claimconnect.dentalxchange.com
cert00028-azurecdn.akamaized.net
aeonstatus.mambu.com
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
cert00028-azurecdn.akamaized.net
tls.automattic.com
cert00028-azurecdn.akamaized.net
remote.dentalxchange.com

Certificate

The complete raw certificate details for *.dentalxchange.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nz0hWECajGpIWDTHZqd
4bSV89LrduQvcbC9ddsNnJjGkMCoWu5bKBe8hld1gPlPB5Wm7YoR9s0iYXFyDomD
KoRrFCQfd+1PDrQWVe0SNlrSVMb9MEJKyHIunuIog92gcvUiZ05P70CcT2kDSQ3Q
F3aeKpoS6fEsZ9fefhn5yO66W+8FqFbe0K2lJCG6h4E3gW3Hktqaq9lKR3POTing
ShWE5snAikKavsNq0Q765/qM1Yg8HEk7nhztEdLc7qCKOkMQvpKksu/XFUMTWHJe
NO+FZX/G+9oiawXHCsOwKYJ2zbsCEFuDf2utIaoZbsRDePT+pHU4WmyeZpjSohq/
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23937163328705548178462860998313176564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDI Health Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.dentalxchange.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27581568168618578511048406825191649537897836018693316837753870867526837818005828986887493920981838656646523739621153487192434714250887880098106343413721396051130847716004440698216477831767825149160518486302468044344433079429611544321553454491957071190855703032963608627269630497789098226611513710950671429582367652874867857546862773715877136917240907575483557755237363552614754006386233137748490166067219105079533031234183397028771307546420601159906051489817491269916235252363711916150888899746221515346336995445461878688655674723997517739896157687074709001327410773736515897317922304384697093103073180215952358948837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalxchange.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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