www.nationalcaregroup.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:3c:d1:74:32:75:1f:02:6f:5d:ec:4f:01:d3:b0:b8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nationalcaregroup.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:3c:d1:74:32:75:1f:02:6f:5d:ec:4f:01:d3:b0:b8
Serial Number (int): 8291154015911440999157890059274006712
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bb:4c:0c:d3:f4:1b:22:43:71:38:f3:0b:6a:93:30:30:0c:ca:19:e3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 2b:6c:0e:e0:77:7b:58:cb:cb:e8:b4:9c:b7:e0:b9:50:c4:ad:b0:8e
Fingerprint (sha256): f7:3d:9f:64:2c:6e:e1:dd:f9:82:69:35:bb:e4:96:ab:ff:cd:f0:07:a0:f6:da:d7:a4:64:c1:7d:6b:3e:b8:d7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.nationalcaregroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nationalcaregroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nationalcaregroup.com
nationalcaregroup.com

Other certificates including the domain name nationalcaregroup.com

(limited to 100 certificates)
servicedesk.weareavidity.com
servicedesk.vretigas.it
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
ictportal.linkfinancial.eu
www.nationalcaregroup.com
helpdesk.bedes.org
aiseait.fuchs.com
nationalcaregroup.com
helpdesk.hambroperks.com
itservicedesk.eldoradogold.com
helpdesk.bedes.org
aiseait.fuchs.com
assist.east-diagnostics.com
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
assist.pentest.partners
assist.pentest.partners
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
helpdesk.wentworthclub.com
www.nationalcaregroup.com
assist.pentest.partners
helpdesk.wentworthclub.com
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
nationalcaregroup.com
helpdesk.saviaantjes.be
helpdesk.nationalcaregroup.com
assist.pentest.partners
assist.pentest.partners
sdp.vdp.com
nationalcaregroup.com
www.nationalcaregroup.com
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com
www.nationalcaregroup.com

Certificate

The complete raw certificate details for www.nationalcaregroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8291154015911440999157890059274006712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nationalcaregroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783850033764501555489530318427979640872018251647030747365100030695012125815704587624372440909471767782666328244889780266094350116612807533841630312943045168624412963790598629311123293038008144051282970864342923493889984325757434644588389908745245202778379955803858130293351935820206301589734393348382593688468268683326855546904325792520097032985160941006955170072703555922843308430999532693202771792338192183097577659055359232019944092398403407527999890014094361311528394859860654812833589622321432304397872278453578456298799382683966036844300888259442947349402583926878137382524489156642925561420877893564091001251992434878790321988073417089628943214312278855517288241803559715370787043260029775948316482390978681793287442004255688839214737722378070263142005459233359892642797084843110946901740432606655518413262133120543005735261061489704198202069872147077630352627776606177625760501602647874507600359246366259022498436506274308611979637876185410194941676575165163117150736675949458038439547155013322281787224858982105576398167878849852871898510338796515135794119114261565264533649956545135446511824400865963477923898194951891713230156916093889143045739835776289310168803302262532475641941654172395755439997206105359051323240743141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb4c0cd3f41b22437138f30b6a9330300cca19e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcaregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalcaregroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b462db2e60000040300483046022100899c385288d4ddb772a688efbcee33132a5e0da4cf0e791cfcd73eb8924489aa022100b41ec80905b58496d2a310538bf2991b9a59d02b059b83dd386112385a8c251e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b462db3b600000403004730450220671454b206f2e72e3c1d7191a2ce442655f0d0f0e6c8929d5341bbb97d7d529e022100ef60f9f8b9abfcf535ca44517080e80ecbbfb0276b28577c0b422ad3e422238d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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