chatapi.analytix.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:08:98:47:ff:30:de:91:e5:07:3c:b3:03:ec:5d:2f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chatapi.analytix.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:08:98:47:ff:30:de:91:e5:07:3c:b3:03:ec:5d:2f
Serial Number (int): 14666134958939403790067339330946096431
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 64:0f:4e:40:54:57:fd:5e:f4:c7:77:84:80:71:a0:ba:35:f6:24:e0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 89:9c:05:3b:25:93:b4:11:83:41:a5:67:c6:d9:c1:24:bf:9d:bd:a4
Fingerprint (sha256): 27:a8:c6:bc:63:28:c1:9f:ab:c5:1a:f0:4c:89:32:d5:f1:b7:ce:5e:57:77:37:ab:a7:6d:95:7c:5a:5a:23:b2

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate chatapi.analytix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chatapi.analytix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chatapi.analytix.com

Other certificates including the domain name analytix.com

(limited to 100 certificates)
portal.analytix.com
portal.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
restaurant.insight360.analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
analytix.com
portal.getaviera.com
analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
dental.insight360.analytix.com
portal.analytix.com
vet.insight360.aixsol.com
portal.analytix.com
dunkin.insight360.analytix.com
pattersoncpa.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
login.insight360.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
goshenaccountingsvcs.analytix.com
portal.analytix.com
analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
hateleyhampton.analytix.com
portal.analytixsolutions.com
portal.analytix.com
dental.insight360.analytix.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
vet.insight360.analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
analytix.com
analytix.com
dunkin.insight360.analytix.com
login.insight360.analytix.com
login.insight360.analytix.com
sportsix.analytix.com
dental.insight360.analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
chatapi.analytix.com
rickhoff.analytix.com
liveca.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
sni.cloudflaressl.com
login.insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytixsolutions.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytixsolutions.com
info.analytix.com
sni.cloudflaressl.com
portal.analytix.com
portal.analytix.com
analytix.com
dental.insight360.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
fasttracconsulting.analytix.com
foreyesbookkeeping.analytix.com
sni.cloudflaressl.com
www.analytix.com
sportsix.analytix.com
portal.analytixsolutions.com
analytix.com
sportsix.analytix.com
hrms.analytix.com
insight360.analytix.com
info.analytix.com
portal.analytix.com
mywoops.analytix.com
portal.analytix.com
hrms.analytix.com
hrms.analytix.com
portal.analytix.com
summafinancial.analytix.com
analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
promgmtco.analytix.com
vet.insight360.analytix.com
compliance.analytix.com
analytix.com
markbalogacpa.analytix.com
portal.analytix.com
primehrservices.analytix.com

Certificate

The complete raw certificate details for chatapi.analytix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSGAggso+m7x6wF55Es7
WQg3ze4aH94YIXIqKYFc3YP3AgwaM9YNIOrnKIuALknBjBIPoNt/0DwpR56zSM9l
SiCsQp1I+Qzo2JtC3qaqAPJ4GJirIeoawA15XEc6jOGjj2XdaC6Geccv0gmlDW+8
1I5oAPBTW5i++X4bTkVXwgv50mTrfeDK7cEsF8VCZTuMOuV3dCDR6gIM7AGyGRpz
PZ3eUQexPPg2bn07DepM0QrgSIAztXAlgv6vvb2lKyROQPOvic/s1L8PwNk2HejW
OICbYUqtp7jS+EdrpjLXyyghNjP6IC1bCPLavNvQVAmCANP3bAXwvoSzHKz9fx9b
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14666134958939403790067339330946096431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chatapi.analytix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24380513302636862559818061917899594919355814038805021169661837832815144933000937827372802601907752232980238716885661032774499721271579193785049222534860329259923529637543037943667218731485443817395663490849285592709164943969451644626309430296506956956919104971914075273336209170027724442142860541999822071124633855949648845616852016209048977381627535686532420447799206821851472768778858216537120868253819337261856964018627090898436362338295990371313504974913527624095771561322865640500474180765728704341704508763894845743546982540117732728404250671611055957406331460742699519063387935462379158183866409364692171447137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							640f4e405457fd5ef4c777848071a0ba35f624e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatapi.analytix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00c4491221e4561302d1b7a966979e805738010e16e4ffa6ae4ef69a37973386eb2e76b1a9b2fd3f583424ded05e2c7cccd6d8bbd0e16f9e0c618159455602856b61acc74448fac86d12b677ddff0fbeefb43fad78462f0fd01c2e36cb31ab4f156d92316c12d91969fcc9561cc9e587f818c65c00a6b69c08353c1fa398eb94c2495905d1329e70d649dd41558b109139199fcc2db4345c7ec50ba3e7c037131957559a89a407820235430290384b7fb63bc64d642ecda6dd6b750ed6d1756909606fc3c9904dd4f74a09572473118f26f289173829dcdaba196e10c7dbf4ffd9a6e061d836f5ce53ffd7eba5bc81a7a76758d1cc4e3744f4441a7b85c1a65451baa6cdc4a983a465e1a11a93a63a37a8aad274e3f95358da009341c1b82e7fb65454cbf48a1b7585bae36fdb99f76979847c369fd37262610282b09d8f5212f57b3142845a80943e8b327e81628585a7f9e11a836234b105212ac7330e58c003fc2f97f32da6669c2424a274e4fd5f30a03b25b7517ddf98d5d80e8131336e1fbe1597f2579e8fb623ef64c161c66d568182f3cdb6db61c91e0d26fb09e0d30c60fc47e99413ebf87500b457db8c72a25a57bf291379597d7b2a17a287ddbebd05b45647b94623e16b9b5a7ee461f05b2ed19dff5cc63dbc7988fb5b3ec1620e4d6c91e71faf0f449dd51bdac0a051170a5ef3db6161820a33d306b1ee570f47