expressway02.bayada.com

- BAYADA Home Health Care, INC -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:33:13:00:d9:1f:2d:52:bb:4b:57:c2:79:b3:2a:45 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BAYADA Home Health Care, INC

Organization: BAYADA Home Health Care, INC
Organization unit: NES
State / Province: New Jersey
Locality: Pennsauken Township
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:33:13:00:d9:1f:2d:52:bb:4b:57:c2:79:b3:2a:45
Serial Number (int): 14886700526397758056995641770682559045
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9e:91:5e:c8:09:13:90:4f:da:75:94:e5:33:02:b4:ea:86:b1:79:94
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 89:0b:51:49:bb:c0:c0:3a:e2:68:c6:16:18:01:08:fe:ce:a8:7d:8b
Fingerprint (sha256): 5b:bb:80:0f:a1:a2:fc:40:97:5d:d5:91:b5:66:5e:e8:05:9a:4d:9c:30:b7:7c:50:5d:19:38:4f:aa:ae:c0:90

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate expressway02.bayada.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expressway02.bayada.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expressway02.bayada.com

Other certificates including the domain name bayada.com

(limited to 100 certificates)
szervizek.carglass.hu
secureapps.bayada.com
education.bayada.com
expressway.bayada.com
cisco.bayada.com
itsupport.bayada.com
education.bayada.com
www.bayada.com
*.bayada.com
education.bayada.com
jobs.bayada.com
mail.bayada.com
jobs.bayada.com
email.bayada.com
hs.bayada.com
hsemail.bayada.com
home.bayada.com
fs.bayada.com
stores.tesco.com.pagescdn.com
blog.bayada.com
shop.bayada.com
*.bayada.com
training.bayada.com
jobs.bayada.com
*.bayada.com
*.bayada.com
email.bayada.com
hsemail.bayada.com
jobs.bayada.com
hsemail.bayada.com
*.bayada.com
jobs.bayada.com
hs.bayada.com
blog.bayada.com
expressway.bayada.com
financialreports.bayada.com
locations.aussiegrill.com
offices.bayada.com
*.bayada.com
education.bayada.com
education.bayada.com
blog.bayada.com
hs.bayada.com
education.bayada.com
secureapps.bayada.com
coxbusiness-search.yext-cdn.com
www.bayada.com
shop.bayada.com
storefinder.carpetright.co.uk.yext-cdn.com
training.bayada.com
education.bayada.com
locations.aussiegrill.com
secure.bayada.com
jobs.bayada.com
education.bayada.com
itsupport.bayada.com
ciscovm.bayada.com
stores.dxl.com
shoppingspecials.bayada.com
expressway02.bayada.com
blog.bayada.com
local.pharmacy.safeway.com
partnerservices.bayada.com
education.bayada.com
shoppingspecials.bayada.com
local.oldsecond.com
jobs.bayada.com
local.pharmacy.safeway.com
itsupport.bayada.com
partnerservices-stage.bayada.com
secureapps.bayada.com
itsupport.bayada.com
answers-embed.bellross.com.pagescdn.com
education.bayada.com
itsupport.bayada.com
my.bayada.com
education.bayada.com
offices.bayada.com
reports.bayada.com
stores.sakura-dining-tokyo.jp
education.bayada.com
ca-stores.iqos.com.yext-cdn.com
secureapps.bayada.com
education.bayada.com
tesite.bayada.com
hs.bayada.com
coxbusiness-search.yext-cdn.com
hs.bayada.com
trainingreports.bayada.com
education.bayada.com
financialreports.bayada.com
secure.bayada.com
shoppingspecials.bayada.com
shoppingspecials.bayada.com
email2.bayada.com
education.bayada.com
hsemail.bayada.com
autodiscover.bayada.com
expressway.bayada.com
*.bayada.com

Certificate

The complete raw certificate details for expressway02.bayada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14886700526397758056995641770682559045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsauken Township'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BAYADA Home Health Care, INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expressway02.bayada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815626515073396946065907722733571083612226132022509078208574938219319187676379561907538060117780759132192954534933773066183422315682382023483658727982813571948901083713644474746697444713305620562247404839909406421543814073443990281007169651392182471260983100812809255997252750197714651441847551424541842184659925264929462281204212633739535929525997641872995009559063332492673054680080341569919156635228866596348578512996569194221438517981928061473916158652871302274497017338827791813235456101263026791953456517670156621958490322437631058233897912367917368335128714128317738256420831889877692611525286413093649331763116897610107346962028696651571410043549267162761621041057475293226477233910037234606536310654996366253888693479817364031600835633395832966526365235139637941534998531305741087774154272457146420096847690325251797057418277630522710898043592764325088005270157728229224685056916664088534966151323028880708340253324972118570291804436440863088454668196618553375307787995812594355651123785703023116486231568450456344585685165731167792248848341430015014545119362566458169418643783610532123140282340588438266615905632402765425909679333644525478023974970551476313448956927268636527730469258506049232576479992206251317344709886581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e915ec80913904fda7594e53302b4ea86b17994
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressway02.bayada.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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