www.healingedge.net
- HealingEdge Sciences, Inc. -
Issued by Trustwave Organization Validation CA, Level 2
About this certificate
This digital certificate with serial number 06:40:08:d1:33:12:94:79:49:70:d4:2c:42:52:f6:5d:ea:36:31 was issued on by Trustwave Holdings, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
HealingEdge Sciences, Inc.
Organization:
HealingEdge Sciences, Inc.
State / Province:
California
Locality: Costa Mesa
Country: US
Locality: Costa Mesa
Country: US
Trustwave Holdings, Inc.
Organization:
Trustwave Holdings, Inc.
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:40:08:d1:33:12:94:79:49:70:d4:2c:42:52:f6:5d:ea:36:31Serial Number (int): 139382657823586867652388025500886496331839025
Serial Number lenght: 147 bits, 19 octets
SubjectKeyId: 89:84:4a:80:f8:1d:93:64:58:17:b8:8d:ee:28:95:ad:83:20:ec:4c
AuthorityKeyId: 5d:d9:96:9a:40:c7:27:cb:2c:9b:a2:ec:cf:19:ab:c8:af:cc:86:48
Fingerprint (sha1): 93:86:47:d4:2a:50:ab:ca:ce:36:a0:3a:64:d5:0d:de:f7:f7:d2:4e
Fingerprint (sha256): 3f:27:ef:b7:a2:22:f5:cb:34:61:e0:9a:d4:a9:75:f2:66:32:73:06:02:3e:98:5d:77:a8:15:1b:49:94:64:af
Revocation information
OCSP Server: http://ocsp.trustwave.com/CRL Distribution Point: http://crl.trustwave.com/OVCA_L2.crl
Check the revocation status for certificate www.healingedge.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.healingedge.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.healingedge.net
healingedge.net
healingedge.net
Other certificates including the domain name healingedge.net
(limited to 100 certificates)
healingedge.net
healingedge.net
healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
www.healingedge.net
healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
healingedge.net
healingedge.net
healingedge.net
healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
www.healingedge.net
healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
www.healingedge.net
healingedge.net
healingedge.net
healingedge.net
Certificate
The complete raw certificate details for www.healingedge.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgITBkAI0TMSlHlJcNQsQlL2Xeo2MTANBgkqhkiG9w0BAQUF ADCBrjELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMRAwDgYDVQQHEwdD aGljYWdvMSEwHwYDVQQKExhUcnVzdHdhdmUgSG9sZGluZ3MsIEluYy4xNjA0BgNV BAMTLVRydXN0d2F2ZSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBDQSwgTGV2ZWwg MjEfMB0GCSqGSIb3DQEJARYQY2FAdHJ1c3R3YXZlLmNvbTAeFw0xNDAzMDMwMDAy NThaFw0xNTAzMDMwNjAyNThaMHoxHDAaBgNVBAMME3d3dy5oZWFsaW5nZWRnZS5u ZXQxIzAhBgNVBAoMGkhlYWxpbmdFZGdlIFNjaWVuY2VzLCBJbmMuMRMwEQYDVQQH DApDb3N0YSBNZXNhMRMwEQYDVQQIDApDYWxpZm9ybmlhMQswCQYDVQQGEwJVUzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOZjKjHnel7ktNUBYJYHJUgn UJQFymWaknq9YMdi5HVybGjJzxJP8mryUXfP8EgQFju7PsIouqMwaW4WOiErThtM Ge8FS+2Y+q2Q+TYKLCE5Avg/qfp+7zhfLydkGLBNCDaEiHUBjK3N9T1F27RHqXh/ qJp56V8QpchDv+Gi2byYAumnfu+KX904Cq1KACnd2PK1OCu4gaBd8agnKJW72Kwl 96kyLVh4NiR5DqpYlXK7aGbRgVAiXbcFLPLgoJI94WqL5v6h7JhZ1dvdavoavQXm xXx7urGYft+jooymtn1wAnjLdDQTHSNRmM/jclsZx2iAjhY+iDHgCpV2YNYuPikC AwEAAaOCAWgwggFkMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUiYRKgPgdk2RYF7iN7iiV rYMg7EwwHwYDVR0jBBgwFoAUXdmWmkDHJ8ssm6LszxmryK/MhkgwSAYDVR0gBEEw PzA9Bg8rBgEEAYHtGAMDAwMEBAMwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly9zc2wu dHJ1c3R3YXZlLmNvbS9DQTAvBgNVHREEKDAmghN3d3cuaGVhbGluZ2VkZ2UubmV0 gg9oZWFsaW5nZWRnZS5uZXQwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC50 cnVzdHdhdmUuY29tL09WQ0FfTDIuY3JsMDYGCCsGAQUFBwEBBCowKDAmBggrBgEF BQcwAYYaaHR0cDovL29jc3AudHJ1c3R3YXZlLmNvbS8wDQYJKoZIhvcNAQEFBQAD ggEBADTACoZccbdbGXsMAavC9CBDPlEAUFl+lkDNMKKGwUcO6A/gISsTFzygQ6Uo PJVZJz0YVmamX9wo9BjBWNNTCL8nLQ54Wu7UyO1ySv4t5tceGdWTO+Ewwdni8Nzr fozOwjKnTKhtcp+WLU+gv5+CWnwo58kJYanLsn40zB86lQpZm1gHxzNY+78S68nP A/gITXWe/YJEQaeTlOa99+s8QVMTdPCoWtK1cdeaSv9LRRbOZGvdheWVwz/GTX0Z DmbOoyQbjqnXpaToO2ArAiHOofIgZtMjv/wTg/5LEGEdR+9KgxNFujzIXQxE/my7 8DxXqEqiWZYkflnu/dYDlRcw9mc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mMqMed6XuS01QFglgcl SCdQlAXKZZqSer1gx2LkdXJsaMnPEk/yavJRd8/wSBAWO7s+wii6ozBpbhY6IStO G0wZ7wVL7Zj6rZD5NgosITkC+D+p+n7vOF8vJ2QYsE0INoSIdQGMrc31PUXbtEep eH+omnnpXxClyEO/4aLZvJgC6ad+74pf3TgKrUoAKd3Y8rU4K7iBoF3xqCcolbvY rCX3qTItWHg2JHkOqliVcrtoZtGBUCJdtwUs8uCgkj3haovm/qHsmFnV291q+hq9 BebFfHu6sZh+36OijKa2fXACeMt0NBMdI1GYz+NyWxnHaICOFj6IMeAKlXZg1i4+ KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 139382657823586867652388025500886496331839025 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation CA, Level 2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 00:02:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-03 06:02:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.healingedge.net' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HealingEdge Sciences, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Costa Mesa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29083710139424805994796567779018528502461355429707702429605939038322611394962458341199620703596235970137028186915003161481797324461633058931418505465280565687043489241490044685626189607435525443611653674258805087914871732687407637466649328536018071955715075688945834649503573271706107567711532886690116951165477107735807264642593032970545791320342516571351325897027781382179534923895692650539135758972394245698275692256147722953709520077031949526910056048159833812208821951877339361859586591818308365959210982384890258525007121071715444143642649886023825689318381204925582283618335341334828081490093997106761588162089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 89844a80f81d93645817b88dee2895ad8320ec4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5dd9969a40c727cb2c9ba2eccf19abc8afcc8648 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healingedge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healingedge.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA_L2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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