securelink.spectrummedical.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 06:44:86:d3:54:39:94:84:89:09:f2:d2:48:c9:e6:26 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securelink.spectrummedical.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:44:86:d3:54:39:94:84:89:09:f2:d2:48:c9:e6:26
Serial Number (int): 8331178747185394301570349997471950374
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 32:e6:1a:44:a4:f2:a2:1f:5c:4c:bb:29:04:71:6b:24:53:1c:80:10
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 46:06:f0:56:fa:f1:cf:49:11:d0:96:5d:0b:32:f9:b8:7e:60:3c:ec
Fingerprint (sha256): 25:98:39:33:af:1a:db:d1:ef:db:c1:a1:ae:d0:8d:b4:9e:e6:14:5c:2f:09:5b:f4:22:3b:21:2d:3f:5d:ac:0f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate securelink.spectrummedical.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securelink.spectrummedical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securelink.spectrummedical.com

Other certificates including the domain name spectrummedical.com

(limited to 100 certificates)
servicedesk.presbyterianhomes.org
soporte.familiabercomat.com
webmail.spectrummedical.co.uk
remoteus.spectrummedical.com
www.spectrummedical.com
soporte.familiabercomat.com
soporte.familiabercomat.com
webmail.spectrummedical.co.uk
priority.spectrummedical.com
remote.spectrummedical.com
www.spectrummedical.com
soporte.familiabercomat.com
servicedesk.spectrummedical.com
yardimmasasi.egeyapi.com
priority.spectrummedical.com
securelink.spectrummedical.com
www.spectrummedical.com
intdev.spectrummedical.com
remote.spectrummedical.com
soporte.familiabercomat.com
servicedesk.dgc-mex.com
servicedesk.blockimaging.com
soporte.familiabercomat.com
www.spectrummedical.com
remote.spectrummedical.com
securelink.spectrummedical.com
priority.spectrummedical.com
crucible.spectrummedical.com
webmail.spectrummedical.co.uk
priority.spectrummedical.com
itadev.spectrummedical.com
prioritydev.spectrummedical.com
webmail.spectrummedical.co.uk
help.louisville-tile.com
soporte.familiabercomat.com
soporte.familiabercomat.com
priorityltd.spectrummedical.com
itadev.spectrummedical.com
securelink.spectrummedical.com
soporte.familiabercomat.com
help.helaclothing.com
www.spectrummedical.com
remote.spectrummedical.com
priority.spectrummedical.com
priority.spectrummedical.com
sd.et.ae
help.louisville-tile.com
soporte.familiabercomat.com
sd.et.ae
soporte.familiabercomat.com
servicedesk.blockimaging.com
www.spectrummedical.com
soporte.familiabercomat.com
servicedesk.blockimaging.com
priority.spectrummedical.com
sd.et.ae
bamboo.spectrummedical.com
webmail.spectrummedical.co.uk
www.spectrummedical.com
itadev.spectrummedical.com
remote.spectrummedical.com
intdev.spectrummedical.com
remoteus.spectrummedical.com
soporte.familiabercomat.com
documents.spectrummedical.com
soporte.familiabercomat.com
bitbucket.spectrummedical.com
soporte.familiabercomat.com
servicedesk.presbyterianhomes.org
priorityltd.spectrummedical.com
soporte.familiabercomat.com
soporte.familiabercomat.com
documents.spectrummedical.com
soporte.familiabercomat.com
webmail.spectrummedical.co.uk
yardimmasasi.egeyapi.com
priority.spectrummedical.com
servicedesk.obaro.co.za
prioritydev.spectrummedical.com
it.carsome.com
webmail.spectrummedical.co.uk
servicedesk.blockimaging.com
webmail.spectrummedical.co.uk
yardimmasasi.egeyapi.com
remote.spectrummedical.com
www.spectrummedical.com
priority.spectrummedical.com
priority.spectrummedical.com
priority.spectrummedical.com
priority.spectrummedical.com
webmail.spectrummedical.co.uk
help.louisville-tile.com
soporte.familiabercomat.com
servicedesk.dgc-mex.com
itadev.spectrummedical.com
intdev.spectrummedical.com
priority.spectrummedical.com
help.helaclothing.com
soporte.familiabercomat.com
www.spectrummedical.com

Certificate

The complete raw certificate details for securelink.spectrummedical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8MO9YX4iPl4H4DrxZ6U
x6lGsaGrr0fz0XB4eE3m5Y4DQ4RnFWnYeHZShdqRsvyuRfwtppEikgwGzCEjtXn/
cHYNUMVYMnZFrUMvtEfGCcs0Bzqq8Q1j3jAgGcXhAGVotNsI7c8bNtTmjtvt59el
AAifWMUpnpWPYjdLiabA0eYzsSNn9qzPpLuEYvQwwpg5UyLK/gBiPYQSI7tVNLWL
OqEKtmcmqmlOGzEqgfd3w+0fJB1BXEjHmPRvKSrBJ4DA2jSOPz0fopSsf3t6G4m8
mTNWNaA1igW4oALRAVKUC6zJFZoeqJFEnCgj2fGsU/EUQjgD7hQ3FEizMv3/5JE6
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8331178747185394301570349997471950374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securelink.spectrummedical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18653217728695896603119593785373052499976582254511371263226782832075073588471528631087613315612210366774263373738023266703252763212840089012798530128493287439925904716169044781618456871047851434018432519075938736644311948042672921784936733623364757410106563466394548583017755418705280935955709735625738001363939058165027628346792602148933478698920294194558308721783437016403691551654961879078730328899568592473683708272346702540500822832858241796947468572301543585665075359051108253395003056580182507486196585916679077202268122040415822393508360015553620367080499096585149301812051832691060460470411543817407442270957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32e61a44a4f2a21f5c4cbb2904716b24531c8010
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securelink.spectrummedical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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