myguardiangroup.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:5d:64:a0:f2:92:91:ea:71:32:ac:e0:94:f8:e8:9c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myguardiangroup.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:5d:64:a0:f2:92:91:ea:71:32:ac:e0:94:f8:e8:9c
Serial Number (int): 16435660549801661507899574367330822300
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d1:15:5a:24:64:09:ae:00:07:c4:da:4d:0e:d5:8a:12:23:91:83:7d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 46:55:d8:77:17:eb:16:ea:aa:33:f0:66:fa:be:e4:9b:16:ae:70:4d
Fingerprint (sha256): 1d:df:e2:d3:f5:21:5a:8b:7c:59:09:a5:de:e9:8c:66:a5:d4:da:df:6f:ea:38:59:c2:e5:03:a6:d3:0b:b7:72

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate myguardiangroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myguardiangroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myguardiangroup.com

Other certificates including the domain name myguardiangroup.com

(limited to 100 certificates)
mfiles.myguardiangroup.com
servicedesk.massageenvy.com
portal.roomwith.jp
novaforms.myguardiangroup.com
servicedesk.massageenvy.com
www.qrkan.com
reset.myguardiangroup.com
servicedesk.massageenvy.com
www.xtoearnings.com
myguardiangeneral.myguardiangroup.com
www.myguardiangroup.com
novahub.myguardiangroup.com
servicedesk.massageenvy.com
www.roppong.com
novaforms.myguardiangroup.com
employerportal.myguardiangroup.com
ajusdsupport.ajusd.org
easiconnect.myguardiangroup.com
webstar.myguardiangroup.com
ttlyncaccess1.myguardiangroup.com
salesforcerkofy23.framez.sg
servicedesk.massageenvy.com
servicedesk.massageenvy.com
securetransfer.myguardiangroup.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com

oipa.myguardiangroup.com
autodiscover.dc.MyGuardianGroup.com
app.idealenergia.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
www.equitablehealthorganization.org
webstar.myguardiangroup.com
autodiscover.myguardiangroup.com
myguardiangroup.com
mfiles.myguardiangroup.com
easiclaim.myguardiangroup.com
helpdesk.mercurymed.com
ttlyncaccess1.myguardiangroup.com
servicedesk.massageenvy.com
tor.community
servicedesk.massageenvy.com
servicedesk.massageenvy.com
www.femtoindia.com
helpdesk.naa.edu
helpdesk.countrypure.com
admin.portal.myguardiangroup.com
servicedesk.massageenvy.com
autodiscover.dc.myguardiangroup.com
autodiscover.dc.myguardiangroup.com
servicedesk.massageenvy.com

servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
dutchcaribbean.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webstar.myguardiangroup.com
myguardiangeneral.myguardiangroup.com
webstar.myguardiangroup.com
servicedesk.massageenvy.com
help.gmfus.org
servicedesk.massageenvy.com
oipa.myguardiangroup.com
servicedesk.massageenvy.com
easiclaim.myguardiangroup.com
*.myguardiangroup.com
rms-api.myguardiangroup.com
leaservicedesk.lea.co.bw
romance.education
pensionsonline.myguardiangroup.com
trinidad.myguardiangroup.com
n-videoservice.com
support.stoh.com
webstar.myguardiangroup.com
ithelpdesk.renaissanceservices.com
helpdesk.sgmc.org
gstcentre.eduswitch.com
jeopardy.mbean.tech
solution.consultingnetwork.com
trinidad.myguardiangroup.com
servicedesk.massageenvy.com
trinidad.myguardiangroup.com
easiclaimdev.myguardiangroup.com
nova.myguardiangroup.com
lskdemo.5loyalty.com
helpdesk.countrypure.com
overseas.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
blog.alfhai.ly
servicedesk.massageenvy.com
webstar.myguardiangroup.com
help.sentry-equip.com
servicedesk.massageenvy.com
helpdesk.countrypure.com

Certificate

The complete raw certificate details for myguardiangroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCtTs92Sh2XX11Ky9iiz
uiYW0zzIOCKMTOuyJHc0Ke4Ot8BHhS460XNahKCpeIOFhiih4C3JzIgp/NwWr84L
vTDQnadIuwcEGDyqL2ogo8mH+yIBiB558mSZ3CVvuJFaPph3SWSwv/Ef0M/I+h+x
0Nvsq7xbdLPXuRgloXNfYQK06JFQxWV86HFbpDJggaOR06knWrlI+ianriepT90G
unj0q+vJHfi0KkuqTwQ2Eo9schs36QXuMhRCYcSlJ8Up8NT9iAqNfFXslOaQfr3n
AOXZVs3aeByrw4oV7PU+OJVhxxQIescb2eVf4YphsXYCrE2Xo3NO4wC+IL4/d1+n
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16435660549801661507899574367330822300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myguardiangroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20219494116459191995282841416631184091558346910323590757061278775878595944517094580571642251582243788920740643681805572223461898949539742301883186008726591432229998086469810553110169283969199575131644613787460319072002298629858328705430747700415467707267964021212822296983518164424251458432480605937743703477285220886362444597393405129514776090536343260208908306793269471478751882073145993881204362542956251238479737039085860221148301932362061130164959084971492001132831087885604990914088591872499519090662818084338050344157029884593981269882869023553281346210589998177158635187267649885523326229232070964736952346581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1155a246409ae0007c4da4d0ed58a122391837d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myguardiangroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00d1b25bb0e33f840d5d3060277f8bf902b8d266f8b2bf8848de09385571e44b25bbb20bd4afc9a38557bcf6000f8d20b9fc9f05a6427144e52cb7db5747dfa5dcaf6cc28c0ada3c233d787d1b2af7770487004d7279458e9f538df4c6f8ea42bdd5229f4009b2cc07a2f9b380b46c4f5be7b472baa31422a3b15a3d765d4c12229a41bf4a79fdff6852cfb3e9b1a84d949d04691aed6525468cffceaee8630e256d392715b00f1bcf3d8084d49adbc84f891830435f21bbc07f0f0f84e0fbdd87394726b5a16065e952f5fbe9051c1ca6ec74d4f7c478ba802b1d18fc7919f824ca3df51f5af82ad8df89577abdaa63de147ec11bd594e27b9dce07016cc3ee7829285b8e5a7fdf8c353b3cf373f3ecc7739369b0b27b15c2aada8e00bc624ef0947d34445358fd3b662d54598ae6cdedd54d38113afb2285e274bd48ab2cf92cee3cd68913999f3c8726150a5c446bd8c075a2c2e173582cf7aaed9f0d771cf29bcbd1efaa5360849f659abd40b71f5a4676be5e2775c79532081880d262812092f84ee51698e13ee845bfdd253591326595836184df7267eca382b253e02e62aa7f674de1923166e118438c21b010316b3551073513a61aa96e34b7e790ccb4309bfab777a74e4b21d32a3b674abdaa1dcfaa3edaf8717e6901d989f8025e7b5eb39411e32790b8c4ea9a94933d970804e32ec9832254c80a89ffa16506410e