easiclaim.myguardiangroup.com

- Guardian Holdings Limited -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 40:ee:18:8c:ce:74:6e:6a:8f:50:1f:bb:76:c7:9a:fe was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Guardian Holdings Limited

Organization: Guardian Holdings Limited
Organization unit: Guardian Holdings Limited
State / Province: Port of Spain
Locality: Port of Spain
Country: TT

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:ee:18:8c:ce:74:6e:6a:8f:50:1f:bb:76:c7:9a:fe
Serial Number (int): 86306856316233813322798505265809824510
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): eb:3d:65:c0:54:35:43:d5:f3:85:8a:92:8b:d3:93:ec:17:ec:ec:6e
Fingerprint (sha256): 41:41:7c:83:46:d8:38:f1:75:df:8b:3d:29:35:c5:1b:0d:42:18:e7:90:2f:d5:01:8e:f0:e7:c3:c4:21:34:20

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate easiclaim.myguardiangroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for easiclaim.myguardiangroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

easiclaim.myguardiangroup.com

Other certificates including the domain name myguardiangroup.com

(limited to 100 certificates)
mfiles.myguardiangroup.com
servicedesk.massageenvy.com
portal.roomwith.jp
novaforms.myguardiangroup.com
servicedesk.massageenvy.com
www.qrkan.com
reset.myguardiangroup.com
servicedesk.massageenvy.com
www.xtoearnings.com
myguardiangeneral.myguardiangroup.com
www.myguardiangroup.com
novahub.myguardiangroup.com
servicedesk.massageenvy.com
www.roppong.com
novaforms.myguardiangroup.com
employerportal.myguardiangroup.com
ajusdsupport.ajusd.org
easiconnect.myguardiangroup.com
webstar.myguardiangroup.com
ttlyncaccess1.myguardiangroup.com
salesforcerkofy23.framez.sg
servicedesk.massageenvy.com
servicedesk.massageenvy.com
securetransfer.myguardiangroup.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com

oipa.myguardiangroup.com
autodiscover.dc.MyGuardianGroup.com
app.idealenergia.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
www.equitablehealthorganization.org
webstar.myguardiangroup.com
autodiscover.myguardiangroup.com
myguardiangroup.com
mfiles.myguardiangroup.com
easiclaim.myguardiangroup.com
helpdesk.mercurymed.com
ttlyncaccess1.myguardiangroup.com
servicedesk.massageenvy.com
tor.community
servicedesk.massageenvy.com
servicedesk.massageenvy.com
www.femtoindia.com
helpdesk.naa.edu
helpdesk.countrypure.com
admin.portal.myguardiangroup.com
servicedesk.massageenvy.com
autodiscover.dc.myguardiangroup.com
autodiscover.dc.myguardiangroup.com
servicedesk.massageenvy.com

servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
dutchcaribbean.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webstar.myguardiangroup.com
myguardiangeneral.myguardiangroup.com
webstar.myguardiangroup.com
servicedesk.massageenvy.com
help.gmfus.org
servicedesk.massageenvy.com
oipa.myguardiangroup.com
servicedesk.massageenvy.com
easiclaim.myguardiangroup.com
*.myguardiangroup.com
rms-api.myguardiangroup.com
leaservicedesk.lea.co.bw
romance.education
pensionsonline.myguardiangroup.com
trinidad.myguardiangroup.com
n-videoservice.com
support.stoh.com
webstar.myguardiangroup.com
ithelpdesk.renaissanceservices.com
helpdesk.sgmc.org
gstcentre.eduswitch.com
jeopardy.mbean.tech
solution.consultingnetwork.com
trinidad.myguardiangroup.com
servicedesk.massageenvy.com
trinidad.myguardiangroup.com
easiclaimdev.myguardiangroup.com
nova.myguardiangroup.com
lskdemo.5loyalty.com
helpdesk.countrypure.com
overseas.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
blog.alfhai.ly
servicedesk.massageenvy.com
webstar.myguardiangroup.com
help.sentry-equip.com
servicedesk.massageenvy.com
helpdesk.countrypure.com

Certificate

The complete raw certificate details for easiclaim.myguardiangroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15OAzW6D1omkfYw/gR9S
iR6qBpPBkCXzN2w1+R8P8rf3g2TAYxentyPpNIMuRlmQ/qZnGl1JIOOzjfeQ/YO/
dVByRlU0IQZoD+80fJqE84a95iXB4gNZY/yeaYox2zzCdoF6KBMcjg6VyqCCtItn
uulnbBDg5lIpeOhGzoxxTJc2+M7xNhV8lD8RCGnpBtTo4nQFkL1WNDBZtMcMgRVS
qHinM8Ite+xD2wwKb+TxnfmX9nvXjmlBrAMK1G8eK7X6+X+pFS5K4vyieH22uodV
JEHM6VSziTgat1dGVC7xEJB6YR9/mlViv6mwv9x07DRUEjBwxNZG2+oqky8/AP6r
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86306856316233813322798505265809824510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Port of Spain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Port of Spain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'easiclaim.myguardiangroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27213972074319803895767558961569884873017442180234147565224701423979418841822008650533310635421090285000502854931473476585461208601120885397091605062432513322869875696483551563957289479972805095649864242979743669402459081754136306352690770005610672079059714589216392968011598888212251139960932153251351434585582357723557168372257634508062707613439851218956152908824395440147959739688993962704360533709779190856653512905932823920232801494074190108203828758445848764216601938434156655325913124357314296508906013222442725238440296748120913354514144170761875951066846146788323760805387223167180113503560989595148887173957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easiclaim.myguardiangroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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