*.bayada.com

- BAYADA Home Health Care, INC -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:62:db:a0:ff:15:fb:10:7c:60:17:b2:5d:a5:7c:27 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BAYADA Home Health Care, INC

Organization: BAYADA Home Health Care, INC
State / Province: New Jersey
Locality: Pennsauken Township
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:62:db:a0:ff:15:fb:10:7c:60:17:b2:5d:a5:7c:27
Serial Number (int): 4500983682645613289176463747267787815
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 83:5c:6b:95:91:8d:e4:34:05:f7:62:84:c1:44:0b:c6:29:d4:81:3f
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 8f:e9:ac:21:52:a3:a3:b8:23:29:81:46:53:b4:f5:e8:cf:53:f4:0a
Fingerprint (sha256): 27:e1:7a:71:83:df:aa:7e:c5:da:b5:1f:67:2c:49:0d:d9:0d:a8:c9:02:1d:ed:3d:52:c0:e2:33:d9:b7:24:dc

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.bayada.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bayada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bayada.com
bayada.com

Other certificates including the domain name bayada.com

(limited to 100 certificates)
szervizek.carglass.hu
secureapps.bayada.com
education.bayada.com
expressway.bayada.com
cisco.bayada.com
itsupport.bayada.com
education.bayada.com
www.bayada.com
*.bayada.com
education.bayada.com
jobs.bayada.com
mail.bayada.com
jobs.bayada.com
email.bayada.com
hs.bayada.com
hsemail.bayada.com
home.bayada.com
fs.bayada.com
stores.tesco.com.pagescdn.com
blog.bayada.com
shop.bayada.com
*.bayada.com
training.bayada.com
jobs.bayada.com
*.bayada.com
*.bayada.com
email.bayada.com
hsemail.bayada.com
jobs.bayada.com
hsemail.bayada.com
*.bayada.com
jobs.bayada.com
hs.bayada.com
blog.bayada.com
expressway.bayada.com
financialreports.bayada.com
locations.aussiegrill.com
offices.bayada.com
*.bayada.com
education.bayada.com
education.bayada.com
blog.bayada.com
hs.bayada.com
education.bayada.com
secureapps.bayada.com
coxbusiness-search.yext-cdn.com
www.bayada.com
shop.bayada.com
storefinder.carpetright.co.uk.yext-cdn.com
training.bayada.com
education.bayada.com
locations.aussiegrill.com
secure.bayada.com
jobs.bayada.com
education.bayada.com
itsupport.bayada.com
ciscovm.bayada.com
stores.dxl.com
shoppingspecials.bayada.com
expressway02.bayada.com
blog.bayada.com
local.pharmacy.safeway.com
partnerservices.bayada.com
education.bayada.com
shoppingspecials.bayada.com
local.oldsecond.com
jobs.bayada.com
local.pharmacy.safeway.com
itsupport.bayada.com
partnerservices-stage.bayada.com
secureapps.bayada.com
itsupport.bayada.com
answers-embed.bellross.com.pagescdn.com
education.bayada.com
itsupport.bayada.com
my.bayada.com
education.bayada.com
offices.bayada.com
reports.bayada.com
stores.sakura-dining-tokyo.jp
education.bayada.com
ca-stores.iqos.com.yext-cdn.com
secureapps.bayada.com
education.bayada.com
tesite.bayada.com
hs.bayada.com
coxbusiness-search.yext-cdn.com
hs.bayada.com
trainingreports.bayada.com
education.bayada.com
financialreports.bayada.com
secure.bayada.com
shoppingspecials.bayada.com
shoppingspecials.bayada.com
email2.bayada.com
education.bayada.com
hsemail.bayada.com
autodiscover.bayada.com
expressway.bayada.com
*.bayada.com

Certificate

The complete raw certificate details for *.bayada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrl6mvpfyFXPCNvg0rbQ
M9R6Ms9wC4knEkpgXL8e5TFaRakZ5RUhk2GiY2cqYvaQKDRQKOQVYSQVV0GRI/f7
TFFjCeXJsVJm3I6Jd/qEqKsYlUXlsev5jNWA4+a+5LkQ3gq6ni+QRsEt/WkSCK0b
S8fw/upWq5irO/ZMAoXejgcYTILp0VmHFZNbJyAjpQ5IUKZPb/U0SC9RlGddBNsc
UYZB1i5lu4WwQ/0d/5BbYxtR2GkYhdhmSbiaLvokTbIzIcL5CuC6QxDDJplRY0h0
+sjiVD4hayniIq1yC0cJsXZmuB3wKnBf1I8sV2DwWKa/MdtkP1vy1xVehzX9ZNX2
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4500983682645613289176463747267787815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsauken Township'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BAYADA Home Health Care, INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bayada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25591600671059343844907698039191027460344872251057397554950945485079941024422491670765173619333260115235715188452352729614526801647437416144915130443962031183258960887445892452159395633938372405792539536343603063476759584631736371208605921260288646312091924206856373275229558875343301460080285574841019047560720208210791210175412961909804772152827918087765807728740854605614894181866008997876206749246210428390066143252264219462297013199428008204971552888768363705088701003887072416796133769563617797943438723615768378493156190840210786945477529232696436488022049242607082221246884726389590810082492705461542566884869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							835c6b95918de43405f76284c1440bc629d4813f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayada.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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