mail.avigilon.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 7f:78:30:15:03:97:73:20:02:c6:bb:5d:10:51:8b:ff was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.avigilon.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:78:30:15:03:97:73:20:02:c6:bb:5d:10:51:8b:ff
Serial Number (int): 169436006308272429744805832968899759103
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 24:41:11:23:45:05:44:31:cd:ce:b0:db:cd:cb:d1:70:71:23:c3:79
Fingerprint (sha256): 1c:20:8d:ac:c3:39:fc:55:76:fe:f8:20:61:4e:a9:f0:4f:f7:ae:bb:76:2e:43:10:e2:c7:9b:37:7c:9d:a5:bc

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate mail.avigilon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.avigilon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.avigilon.com
mail.avigilon.com

Other certificates including the domain name avigilon.com

(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com

Certificate

The complete raw certificate details for mail.avigilon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169436006308272429744805832968899759103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.avigilon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 956389837656412942034197848386145732794021230576896844576803958406824887393738992844018773277558940422529491114876383682617055148891870222492983508844660931571903495699211653989468988817696086017763304767281366320969010479828691871099246311250556164746501411862974344544158186676528476480923189345518609667302336306070537743709948500554316238050222346756989160420235298849290709945377928234447525310568848999166683059607556143024084000777325222288941517083772711820268621562761663188651781192878813219362658664461149640432030121820879402459007337720994464291930511331387570320414300503026147983932944403932230261263575949772617229437175381226290902187427932399475832132704923475711018235605445615363137174490394108053071308787758194419118149551710202469942291695033895217212353739751785264177991231109922783573847111096099299502185841836690341160846339374624139098619769398441210306004979223566897440854535805257991527987138167392807686121385954930256360509675624572914889439945454461267077712430229324711861491750639321519146525798942446761102944250734254264683146570874570941112587847813847102642426973375109726287877438384608071751308243720202212151955920450475892039296593476419879454174800389814501160899400509052678276797600357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.avigilon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avigilon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (490 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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