*.vericlaim.co.za

- MediCharge (Pty) Ltd -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 25:f3:8a:67:89:99:be:c5:aa:83:74:34:7c:52:43:80 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

MediCharge (Pty) Ltd

Organization: MediCharge (Pty) Ltd
Organization unit: Development
State / Province: Gauteng
Locality: Centurion
Country: ZA

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:f3:8a:67:89:99:be:c5:aa:83:74:34:7c:52:43:80
Serial Number (int): 50445971156277206202771481103644640128
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 85:49:8d:1d:18:5a:34:97:ad:53:f8:68:6a:ad:8b:13:9b:de:9b:7a
Fingerprint (sha256): c4:4e:d7:a0:b2:fa:82:7a:bf:8f:92:2d:91:92:31:f0:f1:09:66:4e:1c:0a:95:b7:d5:e3:1f:c3:e9:b5:18:0a

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.vericlaim.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vericlaim.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vericlaim.co.za
vericlaim.co.za

Other certificates including the domain name vericlaim.co.za

(limited to 100 certificates)
www4.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
uat.vericlaim.co.za
training.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www2.vericlaim.co.za
prod.vericlaim.co.za
www2.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
www.vericlaim.co.za
www1.vericlaim.co.za
www1.vericlaim.co.za
www2.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
stage.vericlaim.co.za
*.vericlaim.co.za
www1.vericlaim.co.za
stage.vericlaim.co.za
stage.vericlaim.co.za
training.vericlaim.co.za
uat.vericlaim.co.za

Certificate

The complete raw certificate details for *.vericlaim.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZhCI6G5oJNN4R0WcU7r
YDsspXNA1C6Ec0jHUClZgXxNZZUboWHuBkD4aSj8JeehG2zMeSqISAsj3kiTpaI8
lDvS7GmlCxbXoYMoaM5/fCtbP0y7e5L6zb2Vuj9Fxu1HK7Qj0JziKk621WC7vq8n
pe0g1FdiIlCKViXKjb9+EMBLn20rbQA3eVdQSL8j68nA/Jt5u5ee1NP659KmonMH
eQZY0BskgWbiNo9JCLMJe1cHApuzLXWpJLQD2aDuGooRmcJzhXp8FrNcdGjpORK+
B3M/ge1n/YzIfQrulskOweWzd4ljuwqI0AQ+jdJVPB0Skc8bKg5niWixXrTXWrR7
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50445971156277206202771481103644640128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centurion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MediCharge (Pty) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vericlaim.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18379635613841199388749492603099671412553617849930188691086578453783213723621520238505205383256821056488151787273094340813257956913804651862261904963221803350171573143255588130839505406918497418801576132992260920955764248217572846503349061822967813506536529531256063066546288235543915467048546624920597278631676244629855298838378340515268642436036719147593352553902770020387508664185959032894835069563006298437333508252659307944107628427179900106773741710120126717854273488662476896466431608775220219528871908690833309745909116557573534522983736764889972437532386717139852885246813631409195399030022596750856319957961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vericlaim.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vericlaim.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005eeb082c05b1a9d09f30805712e261f7194af9b4640d02a316154edc34691c58c52da5c4f43442379ea9511147b546c6e16206e80059bc7da3945d89d6c652ac5d2b5f75823b456bf0c179c930af45e6c924f32c944d47cb222a2b75410cc5d6a0b7b5e5aba5e1e076b1772c3c837ee63e608f00b662a3c890d27926d0ac5e25eeb551d1b4f65bdccae92e6e6f8acda65557d4ca15e77e3b7f50bebb4cc490de595a95b6addb07273c3779c612254e5d3ca3da14d913df2a3623c6c74aafacffb9d89ffcd554a98dbd19f9e5140423eedf65b434399ddb59749d776f3ae128c8ba6f063252c65f8e656704f6eadeaee1c0e95e21eb3ee44c20adeaf34f92f461