api.latitudefinancial.com

- Latitude Financial Services Australia Holdings Pty Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:7d:37:26:dc:e3:7d:25:2d:a5:b6:d3:46:71:12:76 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Latitude Financial Services Australia Holdings Pty Ltd

Organization: Latitude Financial Services Australia Holdings Pty Ltd
State / Province: Victoria
Locality: Docklands
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:7d:37:26:dc:e3:7d:25:2d:a5:b6:d3:46:71:12:76
Serial Number (int): 13942435676726107869900089793862242934
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:ca:38:10:b5:03:11:a9:a7:83:06:fb:5b:67:d7:d4:ca:3c:07:ec
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c2:5d:16:9e:48:1c:0c:62:34:89:10:01:9b:a6:de:5e:8b:7f:26:7c
Fingerprint (sha256): 18:cd:fe:93:ce:0c:42:79:87:5c:3e:1f:3b:63:7c:29:36:c5:39:86:ef:75:c2:8e:1e:c1:30:0b:88:4a:3b:b8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate api.latitudefinancial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.latitudefinancial.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.latitudefinancial.com

Other certificates including the domain name latitudefinancial.com

(limited to 100 certificates)
connect.latitudefinancial.com
quote.latitudefinancial.com.au
shopify.api-inactive.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
private.api-inactive.latitudefinancial.com
api.sit.latitudefinancial.com
*.github.latitudefinancial.com
api.test.latitudefinancial.com
responsysassets.latitudefinancial.com
partner-auth.latitudefinancial.com
visa.api.latitudefinancial.com
di.latitudefinancial.com
shopify.api-inactive.test.latitudefinancial.com
merchanttraining.checkout.latitudefinancial.com
test-payments.latitudefinancial.com
incapsula.com
applyandbuy.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
imperva.com
imperva.com
auth.dev.latitudefinancial.com
imperva.com
rsa.api-inactive.latitudefinancial.com
latitudefinancial.com
assets.latitudefinancial.com
incapsula.com
pcc.api.dev.latitudefinancial.com
imperva.com
imperva.com
smetrics.latitudefinancial.com
rsa-enc.api.dev.latitudefinancial.com
orion.smartdochub.latitudefinancial.com
api-inactive.latitudefinancial.com
resources.latitudefinancial.com
imperva.com
sts.latitudefinancial.com
rsa.api-inactive.test.latitudefinancial.com
visa.api.dev.latitudefinancial.com
imperva.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
p.latitudefinancial.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
oscassets.latitudefinancial.com
*.orion-test.latitudefinancial.com
api.test.latitudefinancial.com
imperva.com
imperva.com
lsc.assets.latitudefinancial.com
imperva.com
p.latitudefinancial.com
imperva.com
api.test.latitudefinancial.com
imperva.com
merchanttraining.checkout.latitudefinancial.com
orion.coreadmin.latitudefinancial.com
api.test.checkout.latitudefinancial.com
api.latitudefinancial.com
imperva.com
responsysassets.latitudefinancial.com
latitudefinancial.com
p.latitudefinancial.com
connect.latitudefinancial.com
api.test.latitudefinancial.com
resources.latitudefinancial.com
oscassets.latitudefinancial.com
di.latitudefinancial.com
smetrics.latitudefinancial.com
eform.latitudefinancial.com
visa.api.test.latitudefinancial.com
incapsula.com
oscassets.latitudefinancial.com
imperva.com
statements.latitudefinancial.com
api-inactive.latitudefinancial.com
paymentportal.latitudefinancial.com
imperva.com
identity.latitudefinancial.com
checkout.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
partner-auth.test.latitudefinancial.com
mobile.assets.latitudefinancial.com
servicecentre.latitudefinancial.com
responsysassets.latitudefinancial.com
identity.latitudefinancial.com
imperva.com
imperva.com
cardapp-sandbox.latitudefinancial.com
assets.latitudefinancial.com
applyandbuy.latitudefinancial.com
cardapp.latitudefinancial.com
shopify.api.test.latitudefinancial.com
lsc.assets.latitudefinancial.com
api-inactive.test.latitudefinancial.com
privacy.latitudefinancial.com
pcc.api.dev.latitudefinancial.com
rsa.api-inactive.latitudefinancial.com

Certificate

The complete raw certificate details for api.latitudefinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13942435676726107869900089793862242934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Docklands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Latitude Financial Services Australia Holdings Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.latitudefinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786816358547537077912171214488692366850332661772089324434753798320538766179891969420120121924106818639295061310243818794992907492413620978317768561402218818334974714490444486973670040832080134245353318712842967198909187508862665876618405065819364912507182694357034985903184867010166662163859705871661111044360804703457923314054472818537004981149249126839899794064282317872696460723994050902916557514523974783479195258935775100024479022629050875219527502586302600503784424155492428881178832782480500454518373645103948667607787799403959833060904210265430682328148567482595132298484429533767262016215969685719652228665525927291115945841829894482049729554622535330445552075300018407647853615027692035895800061426165798312439718922535224864996872013388005626032762037184442343047255093621245749977836120839407319385560396869021339916043860338680827422513505473796573813177548470392763472557206898714472746435551265244600869725793282405918663949334509752862007944551574420028276420526059619493245133353783813586266328662075371020422065588043339375682634747086153766059454756268986367297173959618199923462287582963909441535143573179414982639407618407153374823470969979712101295358152124930835330204292478019406597043664525287601021379495647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67ca3810b50311a9a78306fb5b67d7d4ca3c07ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.latitudefinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174d314091b0000040300463044022030967933cb8f3a34ddc304bd05bd5f42f7666d4132fa1b21d837632c5f1561cb02204a10a397c8202ded3174dcd5d983a96af1ac8f7cd481375e37bb496d924e4d1a0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174d3140967000004030048304602210098cb94fb82d4f5070520e3f14a4e09f8b45869f56bfc88542a2bb81e3ace365c022100de532a3cf842b3eeef4c5efe61421b3bff9aa36838014b965622d27e6ab7d727
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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