www.edifecs.com

- Edifecs, Inc -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 04:0d:ec:18:75:24:d3:60:72:a6:ed:cb:37:61:3e:03 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Edifecs, Inc

Organization: Edifecs, Inc
Organization unit: IT
State / Province: Washington
Locality: Bellevue
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:ec:18:75:24:d3:60:72:a6:ed:cb:37:61:3e:03
Serial Number (int): 5389200428697244064430646775626415619
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 10:f1:a7:c1:56:f6:88:c9:c6:bf:61:f7:78:aa:6b:80:9a:39:0f:db
Fingerprint (sha256): 30:e9:f1:04:24:92:e6:cf:f3:1a:cf:2b:d4:c1:dc:de:42:22:78:a8:fb:59:cb:39:64:33:70:1a:41:34:3c:5c

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate www.edifecs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edifecs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.edifecs.com
edifecs.com

Other certificates including the domain name edifecs.com

(limited to 100 certificates)
hix.edifecs.com
citrix.edifecs.com
software.edifecs.com
col5010.edifecs.com
fdus-16.freshdesk.com
impactanalytics.edifecs.com
rrm.edifecs.com
horizon.edifecs.com
testmanagement.edifecs.com
tenncareqahelpdesk.edifecs.com
sites.edifecs.com
bcbsnc.hix.edifecs.com
uat.hix.edifecs.com
fdus-16.freshdesk.com
LyncPool01.edifecs.com
support.edifecs.com
bcbsnc.hix.edifecs.com
fdus-16.freshdesk.com
sit.horizon.edifecs.com
remote.edifecs.com
tenncareqahelpdesk.edifecs.com
collabt.edifecs.com
stateauto.edifecs.com
content.edifecs.com
www.edifecs.com
support.edifecs.com
sites.edifecs.com
uat.horizon.edifecs.com
support.edifecs.com
qualchoice.edifecs.com
ibc.psr.edifecs.com
fdus-16.freshdesk.com
LyncPool01.corp.edifecs.com
fdus-16.freshdesk.com
reports.edifecs.com
phase2.5010.core.edifecs.com
testmanagement.edifecs.com
fdus-37.freshdesk.com
support.edifecs.com
tenncareqahelpdesk.edifecs.com
uat.bho.reports.edifecs.com
support.edifecs.com
or.edifecs.com
uat.em.edifecs.com
kaiser.edifecs.com
ennexus-mdc.corp.edifecs.com
phase3.core.edifecs.com
citrix.edifecs.com
tenncareqahelpdesk.edifecs.com
demos.edifecs.com
spam.edifecs.com
support.edifecs.com
www.edifecs.com
beta.col.edifecs.com
support.edifecs.com
www.edifecs.com
training.tc.edifecs.com
talix.com
ibc.psr.edifecs.com
talix.com
projects.edifecs.com
staging.edifecs.com
fdus-16.freshdesk.com
secure02.lithium.com
esd.edifecs.com
bcbsnc.psr.edifecs.com
uat.bho.reports.edifecs.com
uat.reports.edifecs.com
core.edifecs.com
uat.reports.edifecs.com
projects.edifecs.com
tenncareqahelpdesk.edifecs.com
analytics.edifecs.com
enet.edifecs.com
www.edifecs.com
bcbsnc.hix.edifecs.com
LyncPool01.edifecs.com
uat.or.edifecs.com
reports.edifecs.com
sites.edifecs.com
oh.pps.edifecs.com
citrix.edifecs.com
resources.edifecs.com
ibc.hix.edifecs.com
edifecs.com
fdus-37.freshdesk.com
em.edifecs.com
phase4.core.edifecs.com
citrix.edifecs.com
support.edifecs.com
rrm.edifecs.com
uat.edifecs.com
tenncareqahelpdesk.edifecs.com
ibc.psr.edifecs.com
wyse.edifecs.com
www.edifecs.com
reports.awhea2.edifecs.com
support.edifecs.com
bcbsnc.hix.edifecs.com
bcbsnc.psr.edifecs.com

Certificate

The complete raw certificate details for www.edifecs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTeshXI+MDtTBjxZd4JZ
2+8iSRtZvlRSYg7/bxju76TF7tCKQEo68ChfWsE0AhCRe8WCj46X3WrwosDGJJge
ghFib2jxAjqHOfP/LTNrBcOCZk9rignvJPRCgDZcdrmkZf7pZ8c+cwPuMVYfJoa2
14TpPK7Pef/vzpLyWKSiYaRvrFuoo4dnFndch2rJyul0/mJJYj0ouffEZvKn+0Ne
ih6+yc5Uqe1iMUt+hYf0gTwr98DC/sUOifGddT52tvAmd03WuyWEoswYG7Pwq8SE
xp8r5dY5KMRZZ0AOl2wrJ4QitA1qpV34H44Fm9dKYRAJfdBQ3wIysooclc06qLx9
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5389200428697244064430646775626415619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edifecs, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.edifecs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21866680587973056694583875959790393930178503383372050240810207382400206028784767065172661667836725669993463671167106147630218899158423769510307812110030418275043802628718718995627454939846941198644747753033690372452268683768352817981555798989739555711050773127362700113337618735722153477884786754613051685253909134186177970707217714739051714783199165593883729932762003387027077311401042943394718771339199431101728336361795383156163225276339717710631060295489792234403270430585112052121246069634200505547101947516357169239283448724049933668488600411423112263420700158241929184341390659320460690714652072129554500320531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edifecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edifecs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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