apiservices.belk.com

- Belk Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 2c:c7:0d:34:e3:13:c1:b1:98:ea:60:9a:91:3b:ab:f0 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Belk Inc.

Organization: Belk Inc.
Organization unit: Information Technology
State / Province: North Carolina
Locality: Charlotte
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:c7:0d:34:e3:13:c1:b1:98:ea:60:9a:91:3b:ab:f0
Serial Number (int): 59519566750851008832147774698656869360
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d1:fb:22:4e:c0:63:b7:13:45:b2:71:f2:c6:c7:0f:3a:f3:3f:6f:a6
Fingerprint (sha256): 04:7f:8d:e2:d6:70:5f:72:3f:84:d1:c9:c8:bb:46:51:59:86:d2:b2:d7:70:f1:22:f4:96:5d:64:ea:5a:ef:a4

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate apiservices.belk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apiservices.belk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apiservices.belk.com

Other certificates including the domain name belk.com

(limited to 100 certificates)
coherentpath.link
dns-vetting1-mims-pawel.map.fastly.net
services-stores.belk.com
prospective.shared.global.fastly.net
coherentpath.link
t2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
gateway.belk.com
v2.shared.global.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
coherentpath.link
pickup.belkdev.com
appdev.belk.com
prospective.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
link.boitoi.com.bd
z.ssl.fastly.net
www.belk.com
prospective.shared.global.fastly.net
z.ssl.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1k.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
apiservices.belk.com
appdev.belk.com
rscx.belk.com
newsroom.belk.com
awc.belk.com
services-ecomm-stg.belk.com
coherentpath.link
m.belk.com
z.ssl.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
dns-vetting1k.map.fastly.net
coherentpath.link
icarus-talent-sim.shigureaya.me
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
vss.belk.com
dns-vetting1i.map.fastly.net
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
dns-vetting1k.map.fastly.net
ProductEnrichmentPortal.belk.com
www.belk.com
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
appdev.belk.com
dns-vetting1k.map.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
staging.link.awarefy.app
prospective.shared.global.fastly.net
v2.shared.global.fastly.net
v2.shared.global.fastly.net
prospective.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
app.belk.com
wfm.belk.com
dns-vetting1-mims-pawel.map.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
v2.shared.global.fastly.net
scx.belk.com
coherentpath.link
prospective.shared.global.fastly.net
z.ssl.fastly.net
ITSERVICES.BELK.COM
prospective.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
z.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v2.shared.global.fastly.net
t2.shared.global.fastly.net
t2.shared.global.fastly.net
z.ssl.fastly.net
prospective.shared.global.fastly.net
on.belk.com
z.ssl.fastly.net
coherentpath.link
v2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
advisory.belk.com
CARS.BELK.COM

Certificate

The complete raw certificate details for apiservices.belk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKmeiNFzryZnV64F+SZ
oXAaNh8EhmJHm0rw4x6RGi4SOwysGRIaObgRCFx6ny8+X6Vml/3Phe2cLUO2idfe
47a4lK3LulvH75J3LQCyZlqkFMQm0THhXh7ZZ38zOsJaTv4Oft8YzA/6wcHFCaPg
AFDlk2bLdYKwI7zGqZp4TRzujQCq71jGqxNEV6jDyq4QMLqgHevK9F6gTvdOCrAs
MPwpth5uYrko9BCEhGw2VSAKdjmJKN5m0k20d/JTAjcwer54CKJj4EX74VM3uVAD
1AXI3PF6lzcpal5dnt6SDsd2UGV9kCk36rTGll6eaeqOSCvI6KZ5n+IAgl5Uosqj
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59519566750851008832147774698656869360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Belk Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apiservices.belk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26377222756064394291396937917654758019526877497280526397723325920604442903498282233254830741966380252878820824097572215567864463855235754245351131438263695702384097682072337329236128058155895303047732799695973750446462063839932503367204145920759164903852390004292291014918027634590354448689731725567685613759226594086180537689838791917804597106761248600162856090763272421810340918097704248307303475572680758700829360568849148970429606479635287850304003074170543514178575446922366788269058371114316526151470739998085250277261819555807505458224356105934750085216110303993458240157137563301056829639866279160922757571533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiservices.belk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061ce4246b2c76c54d96f65df22175850cdd334ae244581faa27019ef64f696a04e5b83f75362a34b15bf805ee01c9343630339bf216748574959114ece60c97e6a51f91dc77273b12e483d4b314cbd5b1f5fdaac34e2748fe6f42d11cebeecd705dff0ae80814ba3d26d5069e698fc9d2b890b5e05b69d10309b58f7973a9b4418802c242c2f4b43257ed756b0a9e1cec09fa328631a4dc19a545d6eb7719cf9e2f494ed453dd5e75bca053795352369b83432ddfa0f979f35732e856b88e9169c8fa202e4716ac0c87e4b25febe32ba7d462ca683d05812fe65131d98fca69044af7bc0bcd3c2a7c07da35d73b4c7b824b0c561b3f1558c37c5bc4adce6530c