ers1.avigilon.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 45:66:0e:fe:29:1d:e9:26:10:41:a3:cf:b6:0d:16:b7 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ers1.avigilon.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:66:0e:fe:29:1d:e9:26:10:41:a3:cf:b6:0d:16:b7
Serial Number (int): 92246650079142522659982634789286778551
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): c8:0e:29:b9:cf:5d:b4:82:8e:11:71:f2:1d:42:af:29:14:0c:61:fc
Fingerprint (sha256): 15:5d:f8:ee:66:35:4a:43:50:ea:7b:04:ef:71:5b:3c:bb:26:2b:23:d5:80:7d:f4:c3:7f:f8:de:b1:8d:45:c1

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate ers1.avigilon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ers1.avigilon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ers2.avigilon.com
ers1.avigilon.com

Other certificates including the domain name avigilon.com

(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com

Certificate

The complete raw certificate details for ers1.avigilon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmi3dRqzOzPJE4psFeNy8
HgEVbWmyGc4hco3JpUW/TGRtCWbc4ZRDqb/PTeu1oyfJWCPtxoXFoP8FEICJUE6T
XkQZrkgoFhkag025tI+zGVnkbZ+4zLaJ2pjVfwCGxFE5FJS0K7B1NrvCQnizqgXm
tgEQModhBbGgsZRNKswlAAZOzydhRGvy1jP8grRbA8cfMAkFyDLtCG5nDye5Rb4x
/kCtpLyO+Hzikv38WPAObWSf8mSOdfM7w+u1LZlQkKYXs84ciY4juhlpZLchMnsG
VPdtLO1mpQ5+8ADVdnjOy4QYBJogaYzm1hmnq3jY+DY1he5Q5XSqXUO4prdZA6AE
oTm7v9GZvGNnCJtEMI3YqoNe2TtOTve7WU1snpBeVNOuWHUmXR/7Z4OKzf9JuSzF
7ayoTbtJAu/rwjQa5fuBqlxMWUcWNb7cRo1zapaAMj4SO7dxdhgv6cnnFBlPIoY1
UEmM5tHNbJa+0yKZ6vFEmxG0loRftzfNWNRq4QzkLw0L81hH97AhV4tPcXQIbH2B
fZMq5aGYR/mRmKoiZT7rTJ1oAbgpHffiY+vkHV+2ovR1iuv6rYvv1kkSAQe8772+
k07O9wmppbQawk5lTjyF3lFfrDrMiq0y+YHgaT1jZ18x7DVbD0qFXzw7y8GTF6Gy
5X53hDVDZk/94CaJL2uNzK8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92246650079142522659982634789286778551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ers1.avigilon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628996085939327759733649033735249613721668479626794601203108618061473428052800150910462241387321649092491881051282783872750177923698336058835833486536656350860016145786412181144634088997878405908487355109453427256187442591916668220028540466210625046671681321103161644005146302021244076973610263053408995926446055710376172173163377756798600998323714580864487561134221443545554289293168951939527153363706731259966228970387588886488144362123958684856510255868323030433533714634568381260785876948868048453608009620536245282488575261651737274657925686389506979468078616511187542032663349514752269039530356369224222930990804509682683832386337421458653012121063109257879869545172610297656319786544434058461361583756485228971625067195416704800601550666777389223038059170730342653387863722748870211714044109472344862305388172302987661062113266675897522084139481934702744196958844450835438069386786166560503130647446997439211597069440810088631488020735516087282696961585286959246864457922533382169148148174566196111484592385010583773643584084998625575313232255261746106471201450422562183393696425846562904348089555371591806582293511663994367746914955534482035095411971960406705234616120845443787210786405014087200043795210244348825206296267951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ers2.avigilon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ers1.avigilon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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