www.damanhealth.ae

- National Health Insurance Company (Daman) PJSC -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 03:15:ad:d4:b5:30:e6:68:3a:e7:91:fb:ec:9f:62:eb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Health Insurance Company (Daman) PJSC

Organization: National Health Insurance Company (Daman) PJSC
Locality: Abu Dhabi
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:ad:d4:b5:30:e6:68:3a:e7:91:fb:ec:9f:62:eb
Serial Number (int): 4100247930691767045935399318321062635
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c5:01:0d:15:49:e9:b2:e5:e4:b2:c3:0e:83:e3:c0:93:71:14:6f:0b
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 04:05:c6:ed:9d:7e:20:d8:8d:a3:5b:ae:53:f8:dc:94:06:4f:46:0b
Fingerprint (sha256): 3c:ce:56:f8:d1:bd:7a:8b:e6:2f:b3:91:dc:44:90:d8:ce:fe:1a:86:58:eb:f3:74:60:22:40:fd:9c:f4:8b:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.damanhealth.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.damanhealth.ae

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

damanhealth.ae
www.damanhealth.ae

Other certificates including the domain name damanhealth.ae

(limited to 100 certificates)
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
sfbaccessedge.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
www.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
enterpriseenrollment.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
csapp.damanhealth.ae
www.damanhealth.ae
enterpriseenrollment.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
rpc.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
dwm.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
portal.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
www.damanhealth.ae
bcc1.talentera.com
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
*.damanhealth.ae
bcc1.talentera.com
bcc1.talentera.com
*.damanhealth.ae

Certificate

The complete raw certificate details for www.damanhealth.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Npgi2y9ZeHHhQnvGCBb
i+hF4hGF53hvxB3sR6VGgbRXPwUk+Ebqvy/iGGrrPd+VL3QhZFTYZm2+3tGyjSdD
kNhlHnkU9c27Y1iscpsFSqf7Z9tnCDLfqSjj7xeR6uIr9H9BkMFPXwhqRwVnVGwE
TFEdEp8dLoAi7mrDsjTvsIpubavNqcyss3MSSTDvXPEBO5gwtuj28wA7qqmkKx74
W5VYa7NVJRcFjRoMvdKLVXbzvldly9Pc7x5t2wHuEQeSXkdC4cDGLbyba7iN2jsE
XDKvpN0xAyqpvdoPC2fPigt32PurI/6TwiaIsgE9YHn/uMboaTCuTCz/mbLzvF+l
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4100247930691767045935399318321062635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Health Insurance Company (Daman) PJSC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.damanhealth.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29899925747040747497490771170784333774705023326282702232645628565472219614931037342112288154293284108612917185897962821767994819232343030872318210767752128698890059792331947776626788342621612934062057121651773149688650374885614985329276263222587283921476707350931073433701566833976582484578697139111489227476898403421649527544245955897873726285645649426538296165721059333341692926621289554734615759859075494458639350933223679090537190512031583231479739699301605934136043892078380297268896803204301925295408021822187784787968273792004617319532706507753839509582876482286864369468237278531575972573751527841916824560949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5010d1549e9b2e5e4b2c30e83e3c09371146f0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damanhealth.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damanhealth.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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