tnc-bridge.spsc.io

- SPS Commerce, Inc -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 28:e7:d0:22:f4:e7:38:b0:45:6a:cc:38:7e:22:e6:21 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

SPS Commerce, Inc

Organization: SPS Commerce, Inc
Organization unit: IT
State / Province: Minnesota
Locality: Minneapolis
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:e7:d0:22:f4:e7:38:b0:45:6a:cc:38:7e:22:e6:21
Serial Number (int): 54372761916467137095669694932396992033
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 39:48:c6:a5:65:26:8b:f6:6d:82:c7:f8:92:0d:1f:8c:a1:a1:99:23
Fingerprint (sha256): 1d:64:62:25:6a:78:53:1a:bd:5c:fa:0e:a0:24:cd:10:01:a8:4b:9c:4d:2f:84:01:7a:01:d6:ff:d0:16:b3:fe

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate tnc-bridge.spsc.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tnc-bridge.spsc.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tnc-bridge.spsc.io

Other certificates including the domain name spsc.io

(limited to 100 certificates)
*.prod.spsc.io
cdn.prod.spsc.io
stage.annotation.spsc.io
api.pa-supplier-configuration.spsapps.net
locales.spsc.io
*.dev.spsc.io
test.id.spsc.io
*.sourcing.prod.spsc.io
*.location.spsc.io
*.xtl.compilation.spsc.io
cdn.dev.spsc.io
auth.spsc.io
*.item.spsc.io
script-service-config-api.spsc.io
dev.devcenter.spsc.io
cdn.stage.spsc.io
routing-api.test.spsc.io
stage.notify.spsc.io
routing-api.spsc.io
labelui.spsc.io
filebroker-config-api.preprod.spsc.io
apiv2.fulfillment.spsc.io
id.spsc.io
s3-outbound-service-api.dev.spsc.io
cdn.test.spsc.io
stage.labelui.spsc.io
*.stage.spsc.io
*.test.spsc.io
geocoder.spsc.io
cdn.prod.spsc.io
*.fulfillment.spsc.io
*.test.spsc.io
*.fulfillment.spsc.io
intercom.spsc.io
filebroker-config-api.preprod.spsc.io
dev.geocoder.spsc.io
*.notify.spsc.io
test.devcenter.spsc.io
labelui.spsc.io
*.location.spsc.io
apiv2.fulfillment.spsc.io
otm.api.spsc.io
dev.geocoder.spsc.io
stage.notify.spsc.io
*.preprod.spsc.io
form-presets.test.spsc.io
label.spsc.io
*.prod.spsc.io
*.stage.spsc.io
api.profile-service.stage.spsc.io
s3-outbound-service-api.test.spsc.io
*.prod.spsc.io
catalog-gateway.service.test.spsapps.net
script-service-config-api.spsc.io
tnc.spsc.io
*.fulfillment.spsc.io
*.id.spsc.io
*.fulfillment.spsc.io
cdk-hackathon-api.service.test.spsapps.net
route-registry-api.dev.spsc.io
test.id.spsc.io
s3-outbound-service-api.test.spsc.io
*.location.spsc.io
stage.analytics-monitor.spsc.io
dev.devcenter.spsc.io
routing-api.test.spsc.io
dev.label.spsc.io
*.location.spsc.io
fulfillment.spsc.io
label.spsc.io
*.dev.spsc.io
*.profile-service.stage.spsc.io
api.data-engine-command-center.spsapps.net
corp-analytics.spsc.io
sentry.spsc.io
analytics-monitor.spsc.io
annotation.spsc.io
*.sourcing.stage.spsc.io
*.location.spsc.io
test.geocoder.spsc.io
notify.spsc.io
intercom.spsc.io
routing-api.spsc.io
script-service-api.spsc.io
routing-api.spsc.io
dev.id.spsc.io
locales.dev.spsc.io
tnc-bridge.spsc.io
service-registry-api.spsc.io
devcenter.spsc.io
1screen-prospace-converter.service.prod.spsapps.net
service-registry-api.spsc.io
api.template.test.spsapps.net
cdn.stage.spsc.io
*.item.spsc.io
*.sourcing.stage.spsc.io
annotation.spsc.io
service-registry-api.dev.spsc.io
cdn.prod.spsc.io
script-service-api.test.spsc.io

Certificate

The complete raw certificate details for tnc-bridge.spsc.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54372761916467137095669694932396992033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SPS Commerce, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'tnc-bridge.spsc.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747032262189069802926150170553626817956448385445772007748578426085717889272632794976733211601942729052712614094631429906289349419129963052119293548198619581642818334242158495760754046179705232227263111964650853040029096794144742925980231037769109812420049351389978904069129525089980752059844771680409965371794959402097126180624006588305927666313886660397100986378239854188321085810754574600442211546231688815868751481878735434307455072511441199463540083029063477548566589401250125020220152782580217989157622685802332440484742293168022475397276668837410157356498017069884706852787006902221301604565070438081432844043790546231524386096020655496231456906258033084088829093884629980485540268688343581655859041806404425219465925069037727852560476576712524774768232006190349328302248296207925027381861020211019138148900656566206896724272535004961347793622021196598540620215242825898801272454499117850764948316802829454729814942725038659718909501774370919691875739949235862469828845599301819948647084300749571470714554974386735542972382037493188895365556249326011316693776461459744511363012888179486460969592992557581788156615497995325121150074407880345536881914307663185586216460924700112406747400441187529632369849680855261012382831433587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-bridge.spsc.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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